Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa
File:                     46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa (raw, json)
Hash identifier:          YgqIPc//YVZ2Mmtg3PdCm8SbITdY/iDRVad0lhxKpMI=
Subject key identifier:   EF:52:E6:4C:F9:AF:F3:AB:4E:0C:33:31:90:63:E3:9E:64:E7:43:1D
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584A6F2072CB7B36C0B2B144F480
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        23.153.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:72:cb:7b:36:c0:b2:b1:44:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=ee52ab75-3a16-4336-b99c-619dcf028e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c7:0a:a0:03:54:3f:86:a4:21:e0:56:d9:df:
                    35:cc:78:ab:73:2e:c8:ef:aa:6c:9a:2b:51:17:f0:
                    14:86:43:fb:ab:5f:f4:65:f0:73:bd:fe:02:c9:b3:
                    c2:cc:03:4c:40:91:bb:70:95:80:e0:80:e1:d1:7c:
                    0e:13:02:9d:53:1b:c4:6b:5e:1d:2b:7a:0b:b5:a5:
                    1e:e8:0a:58:91:78:d2:44:80:ea:8a:82:d1:e4:a2:
                    bf:8f:63:2c:84:b0:86:58:ab:a1:19:4e:07:9c:45:
                    8b:dd:d5:ca:81:85:79:c9:89:6f:58:35:49:1d:3c:
                    69:b4:4f:2d:9d:af:de:a0:5c:ea:90:cb:cf:85:f2:
                    58:ca:77:ca:29:50:1c:e2:e1:ed:7c:8c:a5:d3:b0:
                    34:d8:00:83:d1:46:26:5a:9a:d4:ad:29:ca:a8:d3:
                    59:72:a7:a5:5a:ee:b2:37:ca:a9:23:02:24:e8:74:
                    d0:e0:1f:63:fe:76:36:9f:ab:57:5e:14:5c:14:d0:
                    ea:52:fa:69:61:20:41:2e:ca:29:71:ac:c7:cd:1a:
                    9e:48:70:f7:2d:3e:6e:61:fa:df:50:49:88:55:dd:
                    8a:64:ff:40:d7:bd:6c:b4:d2:41:d9:73:2b:2b:3b:
                    4c:dd:2a:37:50:9e:47:7d:1f:22:ab:5a:30:f9:8b:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:E6:4C:F9:AF:F3:AB:4E:0C:33:31:90:63:E3:9E:64:E7:43:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:04:ec:a2:5d:6f:bf:27:cd:3a:1f:04:cf:c9:17:bc:05:04:
         e5:a5:fa:d0:73:8f:39:8b:2f:cd:9d:87:ab:83:9a:98:f0:13:
         57:32:c3:90:88:c2:27:a5:20:01:51:2b:72:2a:26:7a:9e:ae:
         b8:a8:b0:8e:56:6b:ec:72:73:93:33:2e:87:86:25:99:15:2f:
         8d:bd:4c:61:77:bc:ab:f1:21:10:5c:da:74:42:50:d5:d1:2e:
         0b:02:eb:1d:f9:85:ba:29:d1:90:e0:53:d1:dc:df:ed:e9:b1:
         b0:3e:0c:9a:23:da:46:d4:e6:0d:57:a5:cc:a9:32:17:d1:b6:
         29:ee:0b:9c:56:5e:dd:cb:5b:d3:69:97:84:c2:97:0b:50:c1:
         e7:e0:7b:55:aa:6d:3d:96:fa:a5:10:62:15:03:1b:d6:78:ad:
         5d:e1:17:6d:16:c0:e8:2e:3b:fc:cd:36:86:6e:ec:e4:06:91:
         50:f9:be:d3:83:c7:94:61:75:05:94:3b:02:5c:e7:4a:89:fe:
         dc:ee:8a:00:13:78:33:be:1c:53:3b:a2:91:45:d2:74:26:99:
         be:bb:55:e1:05:3b:c6:fa:b5:42:22:c3:e2:3b:9e:6c:91:80:
         b7:d8:0d:f7:84:7e:cd:8a:15:b0:71:11:7f:13:d0:5d:14:4c:
         2b:aa:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:31:13 2025 by rpki-client