Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa
File:                     10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa (raw, json)
Hash identifier:          uQC03WHfHu1pzGsgMYRu6pltgUPstfmzvTcm1lcAS4Y=
Subject key identifier:   38:4E:A6:58:6A:EC:B0:EF:B2:CF:02:7C:A8:04:DF:9A:99:36:09:18
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A9E961CFE29C7A38DA5F61040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     204670
IP address blocks:        168.143.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1c:fe:29:c7:a3:8d:a5:f6:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=9fcc57a7-e123-4a27-a5d7-958e6e8181f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:c5:01:35:17:65:48:44:82:30:7d:35:f9:
                    88:b4:70:12:9e:e2:ba:8e:c1:13:13:64:a7:69:d7:
                    41:2f:68:94:a9:91:5c:0a:e3:ac:81:d9:aa:37:59:
                    35:92:37:c7:fc:ff:2c:d6:a3:be:95:b3:d0:09:06:
                    21:2b:ab:82:a7:98:71:50:50:66:06:73:68:3d:40:
                    55:57:40:5f:b7:ca:db:09:39:8b:20:35:f6:f9:fb:
                    18:ed:4a:fa:19:19:10:79:0b:ce:b0:9a:c4:6d:ff:
                    ae:f2:cc:17:03:7f:3c:fe:e0:ba:2d:7c:41:ea:dd:
                    8b:56:cd:d9:04:25:a0:f6:a8:06:31:a7:90:38:97:
                    d7:d8:05:7e:b7:ea:ba:0c:52:ef:8f:12:27:ca:0d:
                    32:26:49:2c:81:48:8f:60:e2:d8:9d:2d:84:0c:29:
                    ad:6f:dd:ba:d7:d9:8d:4c:91:10:6f:60:d7:d7:29:
                    10:0f:17:a0:f9:40:88:ee:9f:b9:08:72:ee:bf:38:
                    b9:c7:28:3b:f0:47:aa:f5:ae:c5:96:f9:9f:71:6d:
                    ae:cf:bb:36:5b:7c:5a:92:8d:36:f2:be:12:55:85:
                    77:e8:72:69:bd:ad:52:38:87:a4:6c:4c:5e:cf:ca:
                    a5:6f:47:6d:f9:d9:a5:6a:61:71:30:81:a9:38:07:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4E:A6:58:6A:EC:B0:EF:B2:CF:02:7C:A8:04:DF:9A:99:36:09:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.143.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:e6:1c:38:c6:ce:92:53:c2:26:da:7e:bf:d4:d9:53:a5:
         84:e6:e6:06:86:76:dc:d4:c9:d4:19:ee:45:c5:19:e3:7a:d4:
         bb:46:26:23:46:0e:f2:db:f6:2f:98:24:8f:d7:2e:d1:3a:fb:
         3a:1e:3f:93:6f:5f:41:8f:d5:2c:70:a4:a4:ee:04:e1:78:ff:
         e3:7a:05:44:71:b0:d2:6d:44:7c:6c:72:61:2d:8d:ac:40:3a:
         f2:84:82:cb:3f:d9:28:2d:ae:34:5a:64:12:24:5b:78:be:79:
         0e:93:52:89:3d:10:0e:c8:7a:19:10:c2:7b:29:f7:31:21:d6:
         11:c6:17:27:55:94:b3:f3:5f:94:dc:21:c4:45:56:5d:07:da:
         fc:ad:04:ce:96:ba:39:c6:c8:30:19:ef:11:96:9d:61:f6:65:
         aa:34:d2:20:2e:1c:cd:be:32:c8:4c:9a:b7:90:33:ba:37:34:
         de:e9:1f:8d:3e:a5:37:1d:a0:da:15:be:2d:d3:be:af:10:05:
         58:e0:44:86:8e:e9:4d:bc:83:6d:f7:7d:8d:c0:08:a7:70:cf:
         c3:c0:29:b1:b8:67:a0:92:ed:d5:bd:b9:45:3c:02:f7:e3:8b:
         5c:df:33:e6:18:0c:5e:18:55:59:e6:27:57:dc:be:ca:74:2d:
         45:fd:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:54:24 2025 by rpki-client