Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
File:                     3482c56b-a68f-3216-b18d-c6952ef07146.roa (raw, json)
Hash identifier:          lHRq5khFl7pDSTVeZ+tUFOZSPP330h64B8byLTr9z7M=
Subject key identifier:   D8:90:C1:EC:F0:D7:66:3F:1B:3A:68:CF:B3:CD:9A:49:8B:38:78:E5
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F4328584B25FC3DCA413ED5D521F21840
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     2650
IP address blocks:        204.68.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3d:ca:41:3e:d5:d5:21:f2:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=85449484-90ea-41c3-b5e5-0ed09449217b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:25:60:7a:d8:aa:ca:0d:ed:54:c6:af:16:
                    80:24:26:e7:8d:13:c7:72:fa:97:e7:b6:7a:dd:e5:
                    fb:b7:c2:2f:7a:9c:54:08:e2:3f:dd:b0:36:d2:31:
                    d7:1b:15:ed:93:e7:1d:4d:be:05:b3:26:af:78:14:
                    95:97:ac:58:0e:df:ce:0f:da:11:d2:e2:80:6f:74:
                    af:d9:bc:b2:03:59:f9:1c:0f:9e:32:52:36:57:05:
                    c3:3c:e8:c0:c3:64:98:12:6b:ff:a3:0f:7c:c7:65:
                    18:43:f5:d5:4a:5a:42:ee:da:04:be:80:26:fc:08:
                    b5:4e:bd:a3:54:46:38:02:0c:47:a7:90:50:17:5e:
                    c8:30:f0:76:1b:44:fb:eb:54:9c:ff:d6:a8:57:9b:
                    14:25:70:c5:75:7a:b8:9b:75:47:47:7c:eb:86:6c:
                    c3:b1:87:3a:07:44:e1:c4:39:29:14:63:81:f4:ab:
                    2a:a8:48:4b:fd:34:04:f1:91:4e:fc:80:60:03:17:
                    d1:94:30:86:70:6c:a3:aa:ed:00:2a:35:d8:ad:5c:
                    ad:0a:95:ed:0d:71:46:61:f4:d2:88:9b:61:65:49:
                    19:58:9c:5e:34:8b:91:e0:88:7b:4f:db:d9:c5:74:
                    70:7c:9f:17:aa:93:04:cb:f0:1f:49:40:d7:20:d3:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:C1:EC:F0:D7:66:3F:1B:3A:68:CF:B3:CD:9A:49:8B:38:78:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.68.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:5a:d7:e0:d6:87:ad:a7:46:78:44:45:ca:90:fe:fa:fa:
         22:2d:dd:04:76:cd:8f:50:9b:97:e4:6e:8f:69:a0:8a:64:c6:
         fb:a6:08:c6:36:cb:21:55:b6:c2:f0:27:a2:2c:e3:41:b7:b1:
         5f:44:78:7c:6f:cc:4d:14:55:ee:31:82:f5:1c:21:04:b2:29:
         2d:45:e4:17:a7:36:0e:bf:e9:56:c1:01:0f:16:53:3f:e8:21:
         3d:38:ee:91:6a:a4:bc:42:51:01:ce:13:79:ae:69:d0:0c:04:
         bd:92:e0:a6:3b:e4:07:9f:2c:2e:81:42:d9:40:27:51:15:6e:
         e4:96:98:54:8c:45:40:24:41:66:c9:d4:b2:d2:7a:92:88:47:
         c9:0a:05:c7:45:bd:f1:84:b9:01:8a:54:ee:43:18:99:cd:0c:
         12:ec:77:59:36:b4:51:b6:00:77:9a:c2:f4:f7:25:62:9b:76:
         8e:28:8f:ae:2b:bf:9e:68:42:db:db:24:b4:27:d6:86:aa:d8:
         24:73:48:ed:8b:8c:20:ae:57:54:e7:5d:4a:9e:e1:90:7d:98:
         01:19:8c:0a:a5:5e:8c:c0:02:f1:f5:b8:d6:60:07:9c:a1:fe:
         b7:00:ca:c0:45:93:5c:7f:8e:96:0a:e9:2d:47:f1:ae:17:08:
         fb:7c:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:24:31 2025 by rpki-client