Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
File:                     1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa (raw, json)
Hash identifier:          fX824rUbrORGXlJRazxUobCRmfSFZLIPzjPk7S9wUz0=
Subject key identifier:   F1:0A:22:B8:9E:CD:DD:70:B5:AF:4E:7A:68:FF:80:38:EF:CB:28:FD
Certificate issuer:       /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Certificate serial:       010D0C9F4328584A612B0FBCB5A26D67DDBC5DC0
Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     55140
IP address blocks:        23.138.0.0/24 maxlen: 24
                          162.220.180.0/22 maxlen: 24
                          162.245.104.0/21 maxlen: 24
                          198.1.0.0/21 maxlen: 24
                          209.177.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0f:bc:b5:a2:6d:67:dd:bc:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=dd1e95c8-20fb-4cf7-8b5e-d3637f3f1daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:ea:40:06:b2:cf:a3:97:cb:5e:b1:61:7c:
                    d9:d9:2b:ef:98:d4:62:72:82:3d:4a:31:4d:71:32:
                    8e:b3:e5:ca:b7:4a:f1:bb:d2:4d:26:d3:bf:b3:2a:
                    87:db:78:8d:f2:ee:94:b2:41:5c:f7:22:f7:94:33:
                    ec:0b:59:09:10:44:d0:87:d7:0c:7c:05:52:41:7e:
                    ad:b9:f8:1d:a5:09:e2:7b:40:62:ab:47:ec:e9:53:
                    ce:b7:84:ce:e6:46:08:6a:95:55:e7:e2:41:d7:da:
                    16:0f:f4:aa:71:7c:fc:c8:bc:31:34:94:d8:f5:b0:
                    46:80:4f:3b:27:e2:bb:b0:de:d7:e8:39:93:4d:5d:
                    a0:58:93:86:eb:d8:a5:5a:5d:6b:a7:c4:c3:bb:dc:
                    6d:38:26:31:07:21:f8:07:c4:7f:24:e1:61:07:89:
                    61:b0:10:ac:0a:5d:1d:4e:0e:fb:80:32:b2:d6:e4:
                    e2:68:61:35:15:63:ce:20:c0:a9:6f:d5:29:7a:11:
                    d5:f3:ef:b8:be:38:84:2a:15:45:27:0c:38:43:f8:
                    29:67:29:c9:ab:17:de:f3:24:0f:7e:57:8e:3c:1e:
                    77:f0:4e:b1:31:7d:f2:6d:bf:ef:17:63:f8:95:ac:
                    40:31:81:69:58:11:2c:d5:2e:14:b2:4c:03:07:59:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:22:B8:9E:CD:DD:70:B5:AF:4E:7A:68:FF:80:38:EF:CB:28:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl

            X509v3 Authority Key Identifier:
                keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.0.0/24
                  162.220.180.0/22
                  162.245.104.0/21
                  198.1.0.0/21
                  209.177.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:bd:1f:e7:17:9d:00:9e:85:5c:66:cc:e4:14:51:7a:52:
         f2:55:8c:f3:14:85:66:0c:b3:16:1c:ca:b5:b8:b8:3a:7e:9e:
         31:35:9c:06:82:d9:a4:2b:0a:ad:df:ed:70:3b:81:c7:db:9f:
         1f:42:ed:d6:8c:d0:90:c5:54:69:31:8c:50:5e:62:2c:ea:35:
         65:5b:42:7e:d9:36:f9:0e:10:39:44:83:63:d7:ad:31:20:14:
         43:8f:57:b9:43:da:c9:dd:d3:d2:6f:71:ac:53:e8:2c:fa:92:
         b4:5a:44:52:08:e7:9e:81:ba:46:d8:41:18:47:07:de:21:e9:
         94:9b:3b:ee:4d:03:cb:65:c5:d9:75:0c:2e:1e:20:40:ff:6a:
         f4:a6:38:2b:4e:55:17:dd:67:5e:96:66:5f:54:56:19:7e:a3:
         6f:56:2b:60:76:25:bb:c3:a0:ce:20:4c:95:16:f7:ce:3f:eb:
         bb:14:54:87:c8:d4:a2:8a:6b:5c:a9:97:58:7d:4f:d3:ca:ca:
         f5:de:07:a3:7e:16:06:52:44:d2:25:de:1a:ad:88:3b:f9:e0:
         78:f1:9e:13:11:1a:33:07:97:f4:a3:b4:7e:e0:92:d0:70:c3:
         aa:74:88:03:5d:d7:17:83:4b:b5:d4:64:cf:35:68:4d:95:11:
         a8:c6:28:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:05:15 2025 by rpki-client