Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa
File:                     ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa (raw, json)
Hash identifier:          So50IjWYEV5Nu3hSaRd5fJvV7KIwlX7iIXxFVh22KtM=
Subject key identifier:   01:D8:F9:AA:55:77:60:9F:FA:3A:D2:8F:AE:9D:AF:7C:2E:FF:51:C9
Certificate issuer:       /CN=e121c7c4-c415-4c4c-bf5a-394a602b65bf
Certificate serial:       010D0C9F4328584B047BF869E0E17457A5F1E300
Authority key identifier: 68:7A:B4:04:74:7A:45:75:CC:DC:F1:80:E2:E1:93:34:1C:3F:9C:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     14847
IP address blocks:        23.136.84.0/24 maxlen: 24
                          2602:f6af::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:f8:69:e0:e1:74:57:a5:f1:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e121c7c4-c415-4c4c-bf5a-394a602b65bf
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=8d4d951c-045c-4800-a7eb-2238583f8337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:58:5d:16:4d:47:f6:08:07:9e:51:04:21:
                    cd:db:64:8c:6b:3e:a0:80:5e:ae:f1:7f:81:14:a1:
                    37:04:8c:32:68:48:99:69:fd:0a:71:1e:43:80:45:
                    24:d1:49:35:90:da:ca:28:ad:52:94:9e:56:fa:60:
                    3d:f8:28:6e:5e:75:24:21:f2:10:3d:c7:2e:a3:dd:
                    5d:b5:a4:c6:69:ed:4a:ce:2a:84:cf:59:fa:87:3c:
                    57:06:d2:9d:3b:71:11:c1:53:f8:bc:e7:b3:40:ef:
                    31:26:3a:bf:8e:71:9e:8d:c0:75:fa:cc:5f:1a:eb:
                    d5:b5:64:8c:1e:e1:0c:08:d1:c9:91:11:3f:c5:db:
                    2f:c3:34:74:76:22:93:b7:fb:1b:a3:5b:6c:c3:45:
                    cc:e9:27:8d:c3:8a:58:ea:94:68:ed:09:05:03:be:
                    b6:68:cf:be:b5:81:55:9c:36:6a:8a:b2:e9:fc:54:
                    fd:66:f0:45:f8:23:c6:e9:6a:71:d1:7c:11:28:6b:
                    2a:8d:93:8d:6c:e1:5e:40:88:c5:16:46:d7:27:9b:
                    2e:6a:af:6e:d3:5a:1f:d9:14:cc:ce:83:e2:97:82:
                    1e:07:fe:56:74:bf:8d:2c:36:86:48:48:ae:dd:5d:
                    1f:ac:2e:7e:3d:bb:f3:de:f4:cb:35:d8:9c:77:db:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D8:F9:AA:55:77:60:9F:FA:3A:D2:8F:AE:9D:AF:7C:2E:FF:51:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.crl

            X509v3 Authority Key Identifier:
                keyid:68:7A:B4:04:74:7A:45:75:CC:DC:F1:80:E2:E1:93:34:1C:3F:9C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.84.0/24
                IPv6:
                  2602:f6af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:39:aa:4f:b4:bc:74:5d:d2:35:af:55:2d:31:bb:09:23:
         db:ae:c2:91:d6:ea:b3:b3:47:7b:37:73:af:bf:c2:97:79:3e:
         0a:56:5e:b8:10:ca:ed:fe:14:51:69:8e:ec:0b:00:86:cf:4e:
         c0:ee:c0:cb:11:d8:7d:a0:b9:07:08:87:ff:dd:aa:ab:1a:eb:
         ce:01:93:61:97:a8:3c:56:84:02:44:23:0c:c1:e8:99:63:1d:
         5b:4d:ce:69:33:df:17:66:76:83:08:b7:b0:f8:90:1c:83:39:
         de:f6:fc:1a:68:27:cd:1a:2c:e4:9b:ea:8a:3b:34:55:00:3d:
         c7:e3:b3:2a:f8:a6:4f:3d:32:e4:63:de:6e:60:03:91:c4:46:
         51:c1:2a:a7:b9:a9:1c:5a:33:4f:d8:b8:ff:72:5d:e8:61:85:
         0a:39:87:2a:c9:3e:7d:e9:dc:1b:05:49:eb:fb:0c:fd:1c:9a:
         ae:72:92:9b:a4:9f:4a:d3:2d:b9:46:48:a6:84:4e:7e:29:47:
         0f:0e:f2:00:88:0a:a4:60:62:8d:c6:85:66:84:a2:96:52:ff:
         f5:d5:dd:02:9a:6b:02:ac:d0:2f:c4:ac:fd:04:5a:85:e9:56:
         52:10:2e:de:72:67:62:81:7e:cf:83:3d:ed:44:6a:ba:1b:5f:
         c2:b7:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:21:22 2025 by rpki-client