Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa
File:                     50fd98fa-196b-389a-897e-310945d94333.roa (raw, json)
Hash identifier:          7RevRHtLzUs71xnsa8zPhYhsTer5f+eTGgDnO2rW17E=
Subject key identifier:   9C:94:C7:60:43:47:88:56:BA:0F:F4:39:D5:33:CD:26:DC:AF:DD:96
Certificate issuer:       /CN=dc81e524-050d-4a15-9043-39314922cc81
Certificate serial:       010D0C9F4328584A6825FFA4361330EA4DC06A40
Authority key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     400146
IP address blocks:        23.136.136.0/24 maxlen: 24
                          2606:d240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:ff:a4:36:13:30:ea:4d:c0:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc81e524-050d-4a15-9043-39314922cc81
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=28110003-7eb9-4c40-851d-af907cfc4741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:1f:6f:50:51:22:4d:83:71:2f:93:c9:59:
                    5d:96:ab:b7:21:bd:7e:16:ba:61:7c:01:e0:9f:ee:
                    f0:17:01:5e:ed:b8:b3:89:5c:af:1e:2f:a0:1f:32:
                    2f:a8:5e:f9:1f:f7:25:23:2c:4c:e1:b8:5c:4f:23:
                    f1:95:44:b2:c0:01:2a:0e:97:f8:64:9f:df:53:ad:
                    1a:1b:00:36:92:bf:3a:5f:b6:0c:f3:94:dd:fc:91:
                    af:27:88:43:99:d6:d5:4f:78:50:50:7f:b5:e7:01:
                    2b:f1:04:8c:56:e2:78:90:29:cd:ed:dd:2a:e3:86:
                    5e:15:d4:aa:2e:60:1a:cd:58:50:f8:aa:94:76:d1:
                    f2:bc:22:95:ec:b3:81:99:d9:53:d8:9f:ad:49:5f:
                    ea:59:3a:f6:e2:35:f9:04:18:e8:42:64:70:d5:a3:
                    6d:27:89:40:a1:71:26:29:ff:9b:5e:27:ae:e2:c0:
                    a6:19:2a:6d:7c:33:71:2d:91:23:22:bd:cd:71:e9:
                    70:ce:5c:92:a2:15:f6:b6:d5:43:1c:56:0e:4b:24:
                    eb:ad:5a:6c:0d:5a:3c:ac:fa:51:13:ca:6c:c2:ef:
                    c1:88:ff:25:ad:3c:cd:3f:b0:b7:61:b3:7d:27:a2:
                    3e:4d:11:a3:1a:0c:14:48:9f:13:26:4f:4c:c9:1e:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:C7:60:43:47:88:56:BA:0F:F4:39:D5:33:CD:26:DC:AF:DD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl

            X509v3 Authority Key Identifier:
                keyid:12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.136.0/24
                IPv6:
                  2606:d240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:95:a4:1a:d7:43:04:e4:e3:49:e3:3b:e3:c0:5f:31:19:1a:
         b5:8a:f9:4d:99:09:05:3d:6e:81:3e:0b:e7:f8:dd:c2:2c:87:
         70:1a:ca:eb:3d:0a:71:3a:13:8f:8e:fa:f5:37:0c:26:46:6f:
         7e:ae:cf:e7:ca:58:0c:ce:04:6b:d6:fc:45:35:27:57:6c:ce:
         32:e4:b8:a6:17:d9:2e:d5:6f:40:95:b9:de:b2:e2:31:29:06:
         cd:7b:21:dd:73:fc:7d:5e:55:ce:64:62:5c:32:cf:d5:57:16:
         86:6e:c4:44:8d:5b:cb:da:8a:5d:f1:a8:01:d2:bd:05:7f:59:
         61:73:55:2e:3d:e9:87:ca:16:b4:f1:85:50:38:f4:f8:3b:17:
         1a:03:a5:e0:cf:fe:d1:68:e2:88:0b:01:fb:eb:d1:06:51:b5:
         84:17:71:fa:1b:e3:df:a3:46:bc:8b:41:25:97:5e:79:00:33:
         1e:d3:0d:09:5b:7b:95:e8:3c:db:49:da:4d:20:bd:34:58:18:
         b3:fb:8c:45:16:af:67:92:05:4a:36:46:95:b8:a3:af:88:72:
         4d:95:6c:ab:43:f0:f7:2c:22:15:ac:e9:14:f0:10:3d:00:d5:
         2f:f5:b4:d9:08:5f:8d:8d:8b:19:33:4d:ba:a8:3f:75:f2:b0:
         a0:24:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:51:40 2025 by rpki-client