Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa
File:                     d8a375e5-b89e-3f90-9327-3c71a184061b.roa (raw, json)
Hash identifier:          5OQeDlgmzeA4527c3G2XK2cEsYe6HcYpBXfxv9cABqY=
Subject key identifier:   0C:A3:29:63:9E:DD:30:D3:51:65:A6:8D:08:91:B2:30:D2:56:61:1B
Certificate issuer:       /CN=905aef82-72e9-43e1-9a66-0acee9d79d3b
Certificate serial:       010D0C9F4328584A23C0183EFBE315D54A5BD680
Authority key identifier: F4:E2:F5:AA:81:19:91:77:11:BE:66:F3:75:3B:15:BF:BD:8B:83:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     394109
IP address blocks:        23.146.0.0/24 maxlen: 24
                          146.71.72.0/24 maxlen: 24
                          146.71.73.0/24 maxlen: 24
                          146.71.74.0/24 maxlen: 24
                          146.71.75.0/24 maxlen: 24
                          2606:3b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:18:3e:fb:e3:15:d5:4a:5b:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905aef82-72e9-43e1-9a66-0acee9d79d3b
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=767fb5c6-92fc-4aa1-af66-f2d90411057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:f9:7c:d1:e6:00:6a:62:01:6f:1e:5c:f1:
                    e6:cc:ff:40:d7:cb:3d:77:7f:4f:8f:5f:67:5f:8c:
                    bb:0a:e3:6b:64:38:55:69:b0:c1:db:35:32:74:99:
                    76:50:13:66:97:ad:cf:7a:42:d3:10:33:a0:b3:70:
                    c0:44:ec:d0:27:44:e3:76:cc:7f:21:d7:0d:bc:4a:
                    31:b4:02:1e:50:35:29:70:c7:1a:d3:54:c3:e9:79:
                    19:78:6f:38:e8:ca:0c:0f:bf:42:2a:7f:57:3a:c7:
                    91:be:23:33:19:06:af:81:ca:d6:19:16:53:45:a3:
                    b6:fa:56:8d:44:06:5e:c9:52:d9:ba:13:b2:e9:9b:
                    e7:aa:79:68:43:bc:a3:cb:fc:8b:61:74:b8:1d:24:
                    7c:71:bb:1e:06:4c:28:3b:aa:49:30:6d:24:eb:89:
                    9e:b3:dc:8b:cf:b9:01:0d:c8:0d:98:17:db:2c:a5:
                    07:c0:72:10:fc:a0:bf:4f:2d:6c:ac:8c:cc:1e:1c:
                    7c:35:8f:0a:76:18:bd:15:06:d3:79:e3:23:88:59:
                    fc:78:97:48:1d:20:9c:6c:9c:54:4e:2d:8b:af:fe:
                    ef:cf:fe:50:4f:f6:f6:7e:1d:b9:b9:ac:06:bc:33:
                    0d:5a:1f:b6:71:18:0b:76:0c:a8:21:7c:f6:0e:f2:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:29:63:9E:DD:30:D3:51:65:A6:8D:08:91:B2:30:D2:56:61:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.crl

            X509v3 Authority Key Identifier:
                keyid:F4:E2:F5:AA:81:19:91:77:11:BE:66:F3:75:3B:15:BF:BD:8B:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.0.0/24
                  146.71.72.0/22
                IPv6:
                  2606:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:13:8f:80:70:96:54:33:b7:06:54:c9:00:44:24:b7:ac:91:
         ea:21:0f:93:9c:d3:31:5d:44:d1:20:db:6a:1c:12:a7:17:75:
         b3:80:a5:20:79:21:1e:1f:4e:d8:15:78:0a:ba:84:f5:80:38:
         0c:f1:61:d9:bb:15:a5:b0:27:1d:db:a5:4d:b4:61:f4:3b:9d:
         22:51:7e:4d:b6:1f:6f:c9:3f:6d:f6:e6:ec:f0:12:21:30:8b:
         85:47:c2:71:26:18:8e:0d:ab:1f:b9:fe:0d:3d:23:f9:69:13:
         7a:54:8e:0b:d1:14:5a:30:d8:d4:fd:37:b8:3c:0a:c3:49:22:
         e5:32:70:d1:6a:bb:b6:78:65:59:36:d6:87:29:cc:28:39:e5:
         d1:3f:86:7e:18:e6:d4:ad:bd:c9:19:38:1b:86:51:23:21:92:
         93:3e:3d:18:57:d1:71:80:01:75:51:60:48:ef:90:60:b1:59:
         98:27:9c:b7:99:10:5e:01:d2:31:c2:ba:d3:a7:3c:0b:f9:51:
         07:e7:f8:b2:02:7d:52:68:c9:4a:32:ac:a3:88:98:cf:12:3a:
         d5:7a:1b:49:20:5d:9f:f5:51:95:d8:0b:d5:5f:1f:51:f1:4b:
         da:98:bc:6f:fb:15:7a:21:61:f6:00:6d:dc:d5:f7:6f:5d:15:
         61:88:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:39:40 2025 by rpki-client