Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/b2b288e1-fd82-3520-b109-bf71decd9f88.roa
File:                     b2b288e1-fd82-3520-b109-bf71decd9f88.roa (raw, json)
Hash identifier:          6RAM09tsBNoPtTbmMMepCMNL/w08jtUqIQDRSX6QqJA=
Subject key identifier:   F4:17:14:EA:A8:96:22:3C:62:25:E6:B1:B6:EB:80:AC:91:BA:D1:97
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584A268AB36815801A1D2ADF6680
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/b2b288e1-fd82-3520-b109-bf71decd9f88.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     23154
IP address blocks:        143.116.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b3:68:15:80:1a:1d:2a:df:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=25b15f4c-8a9e-42af-919f-3c6e8adb0520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:26:08:75:3d:a3:97:e7:d0:55:54:a2:c3:
                    22:ef:2b:77:3e:a2:ab:8d:d6:dd:ea:fd:ba:44:0e:
                    cb:16:1d:66:69:d5:6d:af:27:e4:f2:c9:0b:fa:49:
                    54:c9:f6:d0:d0:aa:46:ac:57:96:91:65:08:f1:db:
                    1c:13:12:4d:a3:4b:6a:eb:13:0b:45:af:5c:09:4c:
                    7a:b5:b0:61:41:d7:0f:3e:2a:de:27:43:e4:52:68:
                    9d:43:36:8e:d5:1d:4b:d8:25:ca:53:6f:42:18:24:
                    bf:c5:b1:c6:85:89:32:41:e3:12:ac:0f:b5:7e:b1:
                    22:f6:a7:73:ba:ba:c3:14:34:7e:99:46:8f:fa:e6:
                    4f:b9:49:76:d8:40:c9:6e:43:7b:7b:b9:73:4b:83:
                    73:bb:c2:78:78:d2:a8:10:2a:98:eb:a4:4f:0e:59:
                    07:7e:2c:0b:71:40:b3:66:a4:98:2f:f8:c7:e7:4f:
                    19:5a:e9:f0:9c:bd:76:bf:fd:80:29:fa:46:03:c5:
                    c1:75:f7:9d:0c:ec:72:c0:9c:ac:5c:26:bc:02:76:
                    1e:e0:8b:a9:07:bd:ee:e0:8b:31:0e:a6:ed:9b:8a:
                    54:d6:2a:90:ce:5d:05:62:45:0d:52:65:13:84:8f:
                    4c:d6:74:d4:7f:18:b2:e2:78:ef:b6:e1:64:98:ff:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:14:EA:A8:96:22:3C:62:25:E6:B1:B6:EB:80:AC:91:BA:D1:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/b2b288e1-fd82-3520-b109-bf71decd9f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:aa:7f:ca:75:a7:90:d4:6e:3d:ec:6c:90:a5:13:99:6a:
         37:40:eb:94:5b:53:cf:ec:9c:bf:20:84:10:95:3d:76:aa:06:
         d9:61:9c:45:cc:89:51:e1:5f:a5:ad:77:6b:5e:59:55:8e:5b:
         e2:72:3d:13:17:79:2a:e8:14:44:52:ed:6b:00:82:a1:1a:c1:
         bc:61:22:b8:fc:96:f5:3c:96:17:0d:18:a9:7f:6d:ba:34:0c:
         40:9b:0c:52:b1:21:92:56:75:7b:f4:d1:23:1c:8d:8f:a9:1d:
         cc:48:cd:17:b9:05:28:59:cd:52:02:2d:53:2f:17:d7:f0:42:
         16:24:fb:b7:13:96:e2:f8:30:32:bb:ee:23:8d:b3:f5:aa:d9:
         4f:c7:97:c5:aa:78:cf:a5:da:9d:2e:d8:ee:35:c7:97:b3:38:
         be:46:e9:41:71:b9:18:05:52:b4:bf:92:07:e8:87:71:9b:0e:
         bd:3b:84:e8:fa:2f:87:a6:91:16:da:da:0b:cd:de:2e:b3:4c:
         55:3f:9d:b4:8d:93:5a:d8:0b:b4:fa:73:68:72:7f:ce:3c:27:
         7f:ac:c2:69:64:9b:2a:0c:7b:7c:4d:61:5c:d5:80:0f:ad:ef:
         58:8a:85:2a:1c:bb:8d:fc:d5:ed:7b:3d:a9:a7:10:17:8d:33:
         e0:9e:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:00:05 2025 by rpki-client