Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa
File:                     074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa (raw, json)
Hash identifier:          X+EUx6EPvKRQcLcDAr7nFItgVQrtgtROjn4JwfEBPKw=
Subject key identifier:   BE:C4:D8:95:C2:B9:D6:29:52:AB:8A:0F:49:2C:C5:CD:E1:4A:95:F2
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F4328584A6B17DC529ECBD4FADB8C7780
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa
Signing time:             Sat 05 Jul 2025 14:20:20 +0000
ROA not before:           Sat 05 Jul 2025 14:20:20 +0000
ROA not after:            Fri 03 Oct 2025 14:20:20 +0000
asID:                     135074
IP address blocks:        23.167.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6b:17:dc:52:9e:cb:d4:fa:db:8c:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: Jul  5 14:20:20 2025 GMT
            Not After : Oct  3 14:20:20 2025 GMT
        Subject: CN=a677474e-c0a6-474d-8c93-99cd285a7228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:91:5b:b3:e6:46:48:3d:ca:f5:1d:cd:bb:
                    ab:d9:9f:25:76:af:76:99:01:43:48:c1:5d:01:b2:
                    ea:56:2d:ef:29:bd:de:d3:65:de:8e:7c:5f:dd:fa:
                    10:06:05:ed:de:b0:86:dc:be:ba:60:22:7d:d6:72:
                    89:71:59:cf:ba:8e:82:5c:b7:b6:b9:25:93:45:9b:
                    55:8b:4b:d2:fd:4d:6f:61:0c:e2:3b:3d:4f:c1:38:
                    83:09:9e:5e:73:32:b4:e8:b7:4b:db:63:c7:fe:c0:
                    3e:70:5e:b9:e1:98:c6:4c:97:a9:25:f4:2e:2c:9b:
                    df:0e:db:a0:49:d4:12:cc:a3:43:b0:84:3a:b0:68:
                    5d:07:dc:b1:90:b1:e4:72:97:06:7d:19:6f:4f:48:
                    02:19:86:72:e1:34:b3:2b:8a:e8:8a:b0:03:01:1a:
                    3b:d4:bb:9a:f2:f9:e7:fd:27:7f:c2:32:4f:54:f5:
                    dc:c5:e7:1e:d0:6e:aa:39:41:15:20:df:cb:7f:6e:
                    18:89:64:99:60:81:83:21:1b:0c:e9:c7:f1:77:2d:
                    5a:26:bb:db:8e:d3:ea:01:0c:f6:55:03:58:f3:5c:
                    0b:7b:71:47:6d:39:e9:3b:7d:a4:15:01:2c:67:3b:
                    a1:1c:5c:30:60:78:fe:57:c5:fe:a2:72:53:79:91:
                    bb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:D8:95:C2:B9:D6:29:52:AB:8A:0F:49:2C:C5:CD:E1:4A:95:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:03:3c:f8:68:d8:f7:0f:c6:5f:b2:51:f6:a5:5b:ea:8d:8b:
         eb:d8:9d:4c:4a:95:42:f8:bf:32:fb:42:64:3e:0e:ac:64:11:
         0f:cc:d6:c5:df:a2:97:c4:c0:49:e3:5a:79:98:58:8b:7f:36:
         27:77:5b:d2:f4:8d:53:62:a1:cb:07:c0:35:31:b7:4f:79:cd:
         4d:eb:6a:b7:91:af:68:52:f0:79:c2:0b:c7:c7:e7:ba:aa:b4:
         76:ed:85:ab:35:44:60:23:46:87:8e:09:66:45:0a:74:92:b8:
         db:ad:4c:c2:85:54:57:5f:cd:f4:8a:2f:70:7b:9c:52:a0:3d:
         31:02:95:d3:4a:a3:c4:86:f0:c1:bf:40:1f:f5:fc:38:e4:b6:
         40:2e:f5:2f:f6:cd:52:b1:4f:2b:ff:ed:fa:ee:fe:bb:9d:0e:
         9a:61:5e:54:2f:49:4f:8c:be:c3:96:fd:90:77:7f:f5:72:dc:
         80:77:ca:ab:8e:40:ac:09:d8:4f:5e:71:11:12:86:bb:0b:4e:
         99:9c:e2:c7:26:b3:51:b6:40:e7:c6:0a:da:00:2b:8b:a8:99:
         45:b1:4e:0a:27:61:c7:93:52:43:7b:8b:25:11:4f:7e:43:90:
         04:e2:4f:fa:c1:72:c4:77:49:b0:51:49:c6:2b:05:39:e3:21:
         0b:4c:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:53 2025 by rpki-client