Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa
File:                     8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa (raw, json)
Hash identifier:          ctgw8Hnuss8p0VPJ3xmvvAFT4H2bUOwXBIxI+DIS40Q=
Subject key identifier:   EF:53:62:97:5F:19:3C:43:C3:BC:B0:06:07:8E:B9:D7:A7:77:3A:FE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849C762E23D7691D2B942CCF0E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa
Signing time:             Wed 07 May 2025 22:58:55 +0000
ROA not before:           Wed 07 May 2025 22:58:55 +0000
ROA not after:            Tue 05 Aug 2025 22:58:55 +0000
asID:                     19157
IP address blocks:        23.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:62:e2:3d:76:91:d2:b9:42:cc:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  7 22:58:55 2025 GMT
            Not After : Aug  5 22:58:55 2025 GMT
        Subject: CN=7b367147-bc2f-449c-8f87-c1b0ac075c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8b:c5:42:eb:5a:ea:1d:45:fa:b6:17:37:21:
                    3c:72:27:09:cf:19:96:6a:03:dd:30:89:7b:6b:83:
                    e9:2a:8a:59:08:f8:61:c3:b7:0f:a0:8e:c2:d9:23:
                    74:ff:41:3a:17:2a:b9:24:f2:41:28:eb:37:48:70:
                    4d:11:34:cc:bf:b9:9e:5e:94:06:ef:9c:ca:49:eb:
                    df:97:7c:ee:b3:19:a0:07:3b:3d:b5:70:e3:f1:e8:
                    0a:13:15:d7:d7:cb:e1:1d:01:fe:15:c8:7c:25:0a:
                    98:c1:37:2e:75:d5:5c:44:ba:f7:86:22:2f:64:72:
                    96:3b:9c:a3:c6:31:08:d1:b9:2e:91:3d:1b:8c:f9:
                    23:48:03:c9:c1:00:c8:5a:bf:dd:a8:4c:cb:d3:a6:
                    6c:89:91:11:aa:3c:0b:af:9f:08:79:02:61:94:97:
                    2e:dd:37:6a:13:79:66:ee:32:d2:79:3a:a9:bc:1c:
                    23:01:eb:89:68:c1:f5:7d:f6:3a:8c:c9:ed:cb:67:
                    8b:33:f2:50:1a:39:31:ef:ae:85:dc:8f:8f:2a:6f:
                    86:7a:7d:04:c9:6e:32:3e:48:21:ab:2f:0c:b1:b8:
                    31:08:69:6f:f1:6f:43:3a:b0:4c:e3:5d:70:25:7c:
                    bd:0c:81:2e:11:11:39:a5:6f:f4:d2:f2:6b:87:f5:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:53:62:97:5F:19:3C:43:C3:BC:B0:06:07:8E:B9:D7:A7:77:3A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f70a1ef-a6e4-36f1-a83d-2bb798f825ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:cf:0d:13:4e:b6:bf:c3:b7:51:89:fb:70:82:4f:17:bf:
         74:08:b2:9b:50:d1:85:bc:fe:2c:4c:40:47:79:6f:d1:80:4f:
         21:ed:7e:7b:7e:b9:8f:ee:e2:12:42:1b:a8:3d:4a:3d:74:44:
         92:e5:16:05:34:fb:66:31:b6:33:a1:8e:84:ee:cc:b0:9a:ef:
         c2:1e:19:37:c5:b6:9a:14:9e:8c:24:25:78:25:b2:8f:c2:6b:
         34:28:c4:4b:0e:c6:c4:3d:dd:f2:1c:52:e0:d4:a3:15:46:75:
         43:a2:fb:8f:7b:ce:92:7d:a3:02:b4:47:19:3e:25:0b:71:1c:
         89:72:3d:fe:d6:87:da:97:cb:f0:ab:9d:2c:99:8b:c0:87:0c:
         65:5f:bd:70:70:20:10:96:23:74:54:c4:3a:b5:c0:09:53:c5:
         bd:60:26:d4:53:fd:55:ea:39:b5:0a:50:94:bd:d4:19:21:0d:
         2b:c1:61:cb:ef:b7:4f:1d:d6:22:cc:ac:a7:22:d8:1d:f6:b7:
         9a:a6:6c:e6:7c:f6:2d:ac:00:e1:73:8e:74:38:c2:ac:5c:66:
         ef:03:64:62:93:25:53:cd:7b:de:ae:f8:76:db:2e:85:e5:a3:
         ed:79:70:18:4e:18:6e:16:91:bb:7f:99:66:24:a8:8d:5e:7b:
         83:10:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:12:25 2025 by rpki-client