Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa
File:                     bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa (raw, json)
Hash identifier:          x5rWXXZecKVloeyqC0jTxAhxMqyUwVlTDsx6K/e1Dj4=
Subject key identifier:   BA:34:FB:B3:88:A3:87:65:03:B4:74:08:A4:62:BC:4D:D5:6E:F9:B0
Certificate issuer:       /CN=f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65
Certificate serial:       010D0C9F4328584A5CFB2E8EE977B80804E6BFC0
Authority key identifier: E0:D8:1B:F6:4D:3E:35:A6:CE:33:3A:A0:D6:B3:D8:2F:90:11:21:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        23.169.80.0/24 maxlen: 24
                          2602:808:7000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2e:8e:e9:77:b8:08:04:e6:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d5ad7721-09e0-4a1c-ad87-8b76fc1e16da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:dc:33:79:65:54:9c:36:55:ce:9d:83:a8:
                    57:b3:44:55:5b:05:9a:fa:f8:a2:e9:e3:82:b6:2f:
                    85:7f:4e:3f:11:b1:1d:9c:ac:5b:3b:ac:06:69:84:
                    b6:2e:bb:9e:b4:7f:9c:b3:e9:89:b1:4a:ef:86:ea:
                    7b:09:83:48:d8:d4:65:2a:dc:08:e5:60:76:29:2b:
                    98:e3:42:37:b7:af:c8:8c:f9:f2:b1:ff:3d:6b:d7:
                    79:b4:5d:33:b8:8b:8c:56:3a:fc:c6:fd:01:36:9e:
                    13:f6:22:4c:c3:d9:6b:76:d1:60:7f:94:91:ef:63:
                    ff:68:e1:24:5c:3f:26:bf:1c:17:fb:8e:43:b6:f6:
                    ac:fb:c5:a8:f7:ed:78:53:00:b6:74:5a:13:49:fd:
                    9b:36:2d:4f:9d:13:51:3c:d1:5d:24:c2:fa:22:1a:
                    de:12:36:a5:37:8e:42:5e:66:e3:aa:20:bb:65:3e:
                    80:f5:8c:b3:bc:6e:15:5f:9c:1d:ab:12:b7:a7:45:
                    31:f8:b4:f9:88:04:6d:14:3a:8b:31:05:d8:57:f0:
                    12:fe:d5:44:dd:3f:20:3d:91:bb:dc:d6:04:13:73:
                    2e:17:02:e9:8c:03:06:71:b9:5f:ed:c4:8d:0c:c6:
                    f9:98:a4:3a:fc:ad:b3:a6:f9:d8:57:89:ab:4f:ec:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:FB:B3:88:A3:87:65:03:B4:74:08:A4:62:BC:4D:D5:6E:F9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.crl

            X509v3 Authority Key Identifier:
                keyid:E0:D8:1B:F6:4D:3E:35:A6:CE:33:3A:A0:D6:B3:D8:2F:90:11:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.80.0/24
                IPv6:
                  2602:808:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:69:ba:61:4a:aa:ae:ec:a4:58:e0:8e:d5:b5:bf:54:95:
         0e:86:34:e6:cd:80:20:8b:d4:57:88:19:95:f1:46:ab:ce:b5:
         6a:06:ab:1f:31:fb:16:de:91:1e:3a:1f:52:3d:6b:a9:e9:2c:
         1b:81:3e:fc:15:de:e3:06:c6:e9:7d:19:2d:ad:7e:51:4e:1d:
         e6:7e:05:7c:65:ab:5a:e9:e7:8a:55:87:45:4b:1e:10:92:d2:
         34:1b:e9:5b:ff:ef:d2:ff:9b:fd:5e:25:a7:f1:49:e4:90:21:
         7c:a3:cf:6f:ca:31:68:82:93:b0:49:61:12:9e:f1:d7:c4:91:
         23:17:67:98:ef:9d:ec:cc:11:3e:2f:c7:9c:80:9a:07:8c:07:
         b5:45:ff:3a:00:97:ef:ef:56:58:2b:f1:40:72:8c:d8:66:1d:
         39:ec:f3:75:84:cf:38:10:12:8a:0c:b3:84:7e:cb:76:96:ac:
         39:d3:c3:ad:09:09:0d:82:7b:5a:67:92:ae:b0:ca:b3:2c:71:
         9f:ab:fa:f2:91:ce:5d:9e:61:cc:1e:a2:e4:2e:85:01:4e:9e:
         a0:07:e6:70:02:9d:fc:d9:bd:6e:bb:20:f5:4b:92:99:24:61:
         04:20:2a:71:74:2a:d0:55:c9:25:b8:a1:8a:51:fd:84:8c:16:
         ed:19:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:33:40 2025 by rpki-client