Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/2368fd7e-fbda-392f-9bd8-2250c599ae21.roa
File:                     2368fd7e-fbda-392f-9bd8-2250c599ae21.roa (raw, json)
Hash identifier:          oEOv3Nt75XIYvfJjBh4b4oUdwJPotHUqrLKRtaroqSA=
Subject key identifier:   8C:4B:10:93:21:DE:41:01:30:97:9E:A4:98:E3:50:16:40:7C:52:14
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584AF7EBE631FA19BA0D23EBDC00
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/2368fd7e-fbda-392f-9bd8-2250c599ae21.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     16570
IP address blocks:        164.153.184.0/23 maxlen: 32
                          164.153.188.0/22 maxlen: 32
                          164.153.224.0/24 maxlen: 32
                          164.153.225.0/24 maxlen: 32
                          164.153.226.0/24 maxlen: 32
                          164.153.227.0/24 maxlen: 32
                          164.153.228.0/24 maxlen: 32
                          164.153.229.0/24 maxlen: 32
                          164.153.230.0/24 maxlen: 32
                          164.153.231.0/24 maxlen: 32
                          204.138.52.0/24 maxlen: 32
                          204.138.53.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e6:31:fa:19:ba:0d:23:eb:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=e80a1044-85cc-4122-ba1e-be4fd5810d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:fa:df:01:7d:44:a2:95:c5:f2:cb:0d:e9:
                    35:b5:b3:78:3d:a2:cc:6a:89:e9:09:48:1c:f0:76:
                    b9:87:12:b3:99:9f:f0:a5:dd:58:8b:3d:61:32:26:
                    56:cc:83:17:4e:74:a3:74:cc:c3:41:01:7c:5c:53:
                    90:69:04:00:95:aa:b0:ce:c0:3d:68:e6:15:2b:ff:
                    b7:99:d7:bd:ae:50:0f:50:46:e1:98:a8:24:86:6c:
                    b5:9c:12:aa:8b:e1:4b:51:3e:40:17:9b:65:08:85:
                    d9:6a:93:16:91:66:7e:08:bb:0f:5b:8a:e4:a4:dd:
                    61:1a:3f:ff:3f:97:3e:62:12:67:60:e1:2c:dc:8d:
                    bc:7c:a6:03:b8:23:fc:09:2b:c3:96:86:78:47:ff:
                    5e:95:63:2c:ae:90:c2:20:85:75:15:e7:fe:ad:ec:
                    6f:30:c6:f6:db:14:7e:70:0e:2e:05:5d:c7:d4:d0:
                    df:ac:c9:8d:57:2d:47:b6:7b:95:d7:82:05:92:20:
                    27:e0:41:fb:54:33:8f:e2:d6:be:72:9d:44:c7:76:
                    fa:56:89:6e:a0:a6:47:75:86:60:87:f0:d8:4d:47:
                    46:73:50:4a:e6:a1:cc:44:d0:a8:48:d0:32:04:4d:
                    be:d8:72:85:96:45:03:41:15:ea:87:f5:01:8c:f3:
                    06:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:10:93:21:DE:41:01:30:97:9E:A4:98:E3:50:16:40:7C:52:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/2368fd7e-fbda-392f-9bd8-2250c599ae21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.184.0/23
                  164.153.188.0/22
                  164.153.224.0/21
                  204.138.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:e9:1c:80:d6:fd:d7:62:96:95:03:83:01:e5:07:68:c0:
         b2:d1:f3:4f:ba:21:f2:19:58:1f:a2:53:bd:c7:dd:53:c4:47:
         42:24:24:1e:e3:0c:04:ca:a6:96:c4:e1:71:cf:8e:60:04:ae:
         f5:96:47:98:e0:49:41:72:9c:4f:52:31:54:6d:52:82:05:0e:
         1a:7b:d8:42:6f:ef:f3:1e:f2:4a:37:47:f6:06:69:3e:b7:4f:
         d1:b8:01:75:30:dd:2f:6f:cf:d5:d3:bb:17:28:40:ea:3c:12:
         8c:87:96:9f:28:42:14:8a:a1:3f:86:58:6c:8a:48:d8:a1:23:
         6a:14:6b:de:61:df:5b:07:1c:07:36:83:5e:b8:cb:21:d9:94:
         f1:64:a8:53:8b:20:5c:b2:fe:01:08:c1:ad:66:a8:67:73:d2:
         68:72:18:69:99:04:2d:52:7d:4e:14:a7:ee:8c:a4:77:a0:17:
         fd:1b:63:6c:b4:e1:05:4a:47:80:83:1a:55:6b:7e:e5:a2:fc:
         a8:1c:cb:40:79:fe:1a:f1:db:3f:41:66:1e:4d:34:57:b6:41:
         90:32:61:c8:76:a8:ea:b5:46:28:87:30:f1:9a:45:fc:db:76:
         dc:d0:17:98:d9:95:e4:d0:f5:e1:e3:7f:06:7d:1b:c7:0b:26:
         26:0d:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:41:15 2025 by rpki-client