Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/31c00b44-9aa8-3c18-8e6e-1436e7bb5d3f.roa
File:                     31c00b44-9aa8-3c18-8e6e-1436e7bb5d3f.roa (raw, json)
Hash identifier:          MJksw4Dkh0LsFJLk49nk9rQGcYkTD7ILYW5URxbuS0U=
Subject key identifier:   DF:49:83:07:A7:8E:E1:DC:8F:16:F9:3F:1F:75:56:61:E4:50:37:AE
Certificate issuer:       /CN=cf262e73-14ca-479e-ada6-8dbbce9b5d5c
Certificate serial:       010D0C9F4328584ADF6105E83432BCF9D5E58080
Authority key identifier: 68:C3:7C:49:84:71:93:E8:B6:39:3E:9C:AD:71:0C:78:42:49:8B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/31c00b44-9aa8-3c18-8e6e-1436e7bb5d3f.roa
Signing time:             Sat 16 Aug 2025 06:01:31 +0000
ROA not before:           Sat 16 Aug 2025 06:01:31 +0000
ROA not after:            Fri 14 Nov 2025 07:01:31 +0000
asID:                     16509
IP address blocks:        143.223.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:df:61:05:e8:34:32:bc:f9:d5:e5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf262e73-14ca-479e-ada6-8dbbce9b5d5c
        Validity
            Not Before: Aug 16 06:01:31 2025 GMT
            Not After : Nov 14 07:01:31 2025 GMT
        Subject: CN=851a67bb-7dc5-4171-9146-5056fa003a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:6f:5d:7b:43:d8:db:87:f9:fc:ab:41:5a:
                    e5:61:84:c7:15:7c:6a:a4:5e:b1:6e:cb:36:33:ae:
                    63:76:8c:79:0d:85:26:71:46:81:ce:e9:37:1c:3a:
                    e7:78:0d:a7:13:19:e5:b4:11:20:f1:20:42:14:03:
                    37:ca:82:12:c4:70:1b:20:19:9c:b1:a6:af:43:9c:
                    14:db:b0:ed:99:a9:89:c0:b4:53:bb:2f:07:de:33:
                    d0:53:b4:e9:40:a4:7a:42:45:7e:43:71:17:25:b2:
                    1e:ae:ce:dd:d7:1e:93:e8:59:b4:d1:d3:ff:20:fd:
                    20:fe:bd:67:50:7b:5e:9e:76:51:54:2b:b2:49:61:
                    bc:a7:f6:ca:5d:b3:7f:6b:34:c6:9a:89:06:04:3a:
                    52:5e:98:a5:97:c4:91:b1:08:d5:00:ce:57:24:ec:
                    ae:10:c9:c0:4f:d0:12:9e:f7:30:e7:ce:d5:91:e3:
                    c0:13:6f:ad:b6:bd:eb:0e:62:57:9b:fe:b3:cc:67:
                    1b:e7:d1:f1:cb:9e:71:e1:45:de:25:8a:2f:76:de:
                    fe:77:1d:c9:d3:dc:c7:f6:0e:f1:7f:a8:83:f8:1f:
                    ea:0b:05:52:f0:22:7f:20:b5:0c:c1:71:54:80:f9:
                    c2:a3:02:c3:53:ac:64:1a:0c:d2:2d:76:f7:41:ea:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:83:07:A7:8E:E1:DC:8F:16:F9:3F:1F:75:56:61:E4:50:37:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/31c00b44-9aa8-3c18-8e6e-1436e7bb5d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.crl

            X509v3 Authority Key Identifier:
                keyid:68:C3:7C:49:84:71:93:E8:B6:39:3E:9C:AD:71:0C:78:42:49:8B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:d6:4d:b4:ac:6b:90:d4:8f:fc:6e:dc:98:81:d5:4d:32:
         c3:d9:77:af:dd:f5:00:91:b5:44:75:0f:09:7b:2d:d6:f0:ae:
         c1:1f:48:dc:95:df:b0:a1:15:96:e8:a2:4b:d7:a5:8f:14:c3:
         71:f1:20:d9:83:ee:67:43:bb:fb:7e:bc:82:29:5f:93:a9:6c:
         5d:ea:75:e8:10:8d:24:40:bc:e2:10:3f:d8:da:19:31:2d:fe:
         d4:24:6d:c7:3c:fb:5f:1b:e8:ec:9d:04:46:95:e8:7f:e9:7d:
         20:e5:21:c9:8e:8b:63:db:0c:a6:5d:ce:7c:c0:29:f2:ca:1d:
         4e:5d:da:95:58:af:ab:28:f9:f5:c9:c8:9a:be:c9:03:e0:ff:
         c7:5e:4c:56:50:17:c0:55:34:c1:a3:89:fb:b7:cf:4c:0d:95:
         3a:f6:e4:03:66:54:4f:04:e2:00:8f:39:d7:6c:ee:7c:28:f5:
         12:be:34:04:45:82:9f:f1:fe:95:bc:32:bb:fb:7f:da:ac:7a:
         2a:da:16:50:78:9d:5f:04:81:1a:d5:e3:48:c8:e9:a3:d1:f0:
         d0:38:2f:c4:24:28:b6:19:b9:29:b8:93:be:39:a7:22:d0:88:
         11:7c:b6:8a:e2:84:32:09:6e:ca:46:e1:cc:b4:36:78:a3:25:
         14:f8:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:44:33 2025 by rpki-client