Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa
File:                     a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa (raw, json)
Hash identifier:          XXKkPH/+DIxqkvZghDiCPRQ+2kBBD6AAapczwNCllkQ=
Subject key identifier:   14:5E:D3:EB:C8:91:3F:26:67:F1:0C:AB:F8:CE:63:CF:C1:3E:25:62
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F4328584A066FE8ED2FDC82028B32B640
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa
Signing time:             Fri 30 May 2025 13:01:03 +0000
ROA not before:           Fri 30 May 2025 13:01:03 +0000
ROA not after:            Thu 28 Aug 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.247.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:6f:e8:ed:2f:dc:82:02:8b:32:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: May 30 13:01:03 2025 GMT
            Not After : Aug 28 13:01:03 2025 GMT
        Subject: CN=99be9d7b-64d1-49a3-b601-f5c5fd4f780e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:d4:fc:13:75:14:9f:d3:cb:8e:db:b6:88:
                    7c:8f:7b:79:94:4d:74:38:a1:9e:f5:74:7a:f0:e1:
                    be:d4:ed:93:05:b0:dd:c5:a7:d3:7e:3d:b3:d7:55:
                    10:0c:eb:3b:1f:30:c9:dc:d1:43:da:4a:86:98:13:
                    b5:a4:4c:d0:56:2d:55:d5:82:40:c6:30:df:b1:6a:
                    df:04:15:95:39:7f:e9:36:48:56:bd:54:d4:ee:d6:
                    c6:79:90:8f:73:79:4b:0d:27:55:c3:20:f9:6a:00:
                    b3:e0:59:b5:a6:5b:8f:d5:d8:06:d1:3d:f5:24:2d:
                    d2:cb:80:b5:24:be:20:bb:85:44:8d:c9:ea:a5:bf:
                    29:e8:4b:88:c2:55:3d:c7:20:0f:59:2e:18:3d:35:
                    47:03:8e:0e:33:47:b1:4d:33:75:0a:91:93:5c:59:
                    1a:98:c3:66:fe:b9:ef:b7:21:cb:67:03:21:18:92:
                    69:c3:72:3d:56:80:c1:b2:d0:b9:54:05:d1:ad:ff:
                    db:fc:88:aa:4a:97:1b:b6:bd:9c:90:0e:1f:d4:13:
                    69:33:28:89:d6:6f:11:df:b3:6a:95:54:98:13:ae:
                    30:8b:93:dc:c3:80:be:05:ba:9d:f9:97:55:16:07:
                    9d:18:a1:5b:4d:04:dd:0e:c5:3e:ab:96:08:97:d4:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:D3:EB:C8:91:3F:26:67:F1:0C:AB:F8:CE:63:CF:C1:3E:25:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:04:79:d6:29:da:f4:8d:d0:34:2c:76:a9:92:92:51:eb:3a:
         c0:2e:ae:ae:31:02:d1:80:84:ae:4a:35:96:0f:89:74:54:fa:
         ce:b9:1d:d6:67:4b:f1:c7:d8:30:d7:6d:58:7a:50:10:bd:6d:
         4e:4c:2a:d2:3f:56:39:19:f6:2c:07:67:0a:20:71:44:b2:d1:
         55:56:a1:ba:d8:ed:e0:07:27:27:50:7c:b6:35:11:1b:88:bb:
         cd:7b:9a:eb:af:90:91:43:8c:82:2e:20:1c:4d:dd:64:9f:03:
         b5:6e:2a:54:0e:e4:b4:7e:f7:0d:c4:a0:ea:ad:7e:f5:1b:0c:
         d5:df:d5:cd:9c:a8:7f:9a:95:0b:e9:4d:68:d0:d9:30:c9:40:
         f1:30:c6:6b:d4:68:ed:22:ad:22:7f:1e:38:a3:a4:b6:1a:57:
         4f:4f:5b:d1:7b:2d:11:fb:bf:8c:8c:e0:c4:e3:d2:a0:0f:15:
         24:79:1c:e5:ec:13:e3:c5:d0:16:7b:6b:eb:65:7b:9c:2b:00:
         f8:ee:37:1b:2b:9f:1a:52:df:60:0d:ff:b2:2c:2b:ee:7a:f0:
         3f:f9:c0:d3:ea:df:65:2c:50:15:68:0c:c1:91:7d:03:1b:f0:
         00:f5:56:63:5d:be:b9:f8:ef:4e:a4:cf:8f:8a:28:0d:26:b5:
         57:a7:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:01 2025 by rpki-client