Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e230f006-0bc5-35ce-acc5-b83877354f5d.roa
File:                     e230f006-0bc5-35ce-acc5-b83877354f5d.roa (raw, json)
Hash identifier:          sE5frtvz9xfM8Os9jcfAYJ/ogot9cl6gF9fhAx5gQFs=
Subject key identifier:   65:28:DE:53:3D:32:83:E4:2D:1F:0E:36:F1:84:D0:91:EC:5D:DA:46
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0CDC211CA7821ED8007108D0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e230f006-0bc5-35ce-acc5-b83877354f5d.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     11232
IP address blocks:        24.124.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:21:1c:a7:82:1e:d8:00:71:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=dafc3f82-1357-4975-b857-f450d536f981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:37:04:73:31:3c:06:e6:69:0c:66:ab:b6:
                    06:2f:49:e0:06:bd:87:89:1d:17:b7:ae:64:ca:71:
                    dd:b5:d1:a0:21:65:2d:9a:69:cf:c7:e8:9e:b9:23:
                    6f:4d:f7:49:4e:0f:19:d1:ac:6e:91:a2:56:f8:bf:
                    8d:3e:e3:7f:15:bc:bb:04:1a:5c:73:d1:a9:78:02:
                    87:a8:c1:49:10:dd:5c:ff:d6:63:db:6f:f2:bd:f6:
                    02:b9:91:0c:c9:26:44:40:2a:7e:f0:63:fa:ad:a7:
                    3c:c1:c4:ab:5d:3e:68:1b:b7:90:73:fc:a9:3c:52:
                    03:f2:6e:c6:4e:b3:45:0d:20:e7:d4:66:19:a2:be:
                    b2:8f:b6:bb:90:ed:b2:14:06:da:78:33:61:1a:49:
                    b1:d8:dc:28:96:c0:c9:bc:bb:30:b6:ea:84:48:39:
                    6b:8b:2b:4d:54:4c:79:c1:e7:69:70:86:a8:a2:9a:
                    82:f9:e2:7c:57:0e:b7:34:d9:a8:b7:8b:0a:1f:73:
                    64:0e:3d:5e:0a:07:cc:2d:e1:3b:f1:c6:3c:2c:ae:
                    98:14:47:c2:4d:83:8f:f1:c7:d3:07:47:14:46:da:
                    95:0c:36:0e:ce:66:56:49:ec:c0:88:6d:49:61:83:
                    2c:3d:5f:6a:a3:b6:c5:fa:24:91:f1:d3:d8:41:04:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:28:DE:53:3D:32:83:E4:2D:1F:0E:36:F1:84:D0:91:EC:5D:DA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e230f006-0bc5-35ce-acc5-b83877354f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:2c:51:59:a3:dd:60:7d:32:37:40:06:aa:25:cc:36:71:
         14:b8:e0:dd:8b:1f:4c:07:a7:c7:cf:42:50:75:18:b1:b6:ea:
         4d:9e:67:02:30:98:80:e3:94:e5:e4:09:ec:e5:c7:95:58:5a:
         3b:91:0b:5d:7e:11:e9:bb:d6:17:97:64:a5:2e:8f:f2:8e:4c:
         7e:e4:06:04:06:d0:af:65:83:cf:d6:d9:a2:d8:d1:b6:9e:15:
         95:78:6b:bc:a8:65:14:38:fa:4a:21:85:f7:c6:c9:12:e0:fd:
         5d:d5:2a:91:24:7c:2c:08:79:61:e3:39:cf:bf:3d:89:09:57:
         47:0a:1d:ab:c0:9b:e9:5e:dd:b7:2a:22:43:fa:49:d5:c8:5e:
         38:9a:84:57:5f:9d:ed:04:d4:8a:3c:cf:39:84:69:3a:f3:26:
         e4:ab:67:1e:77:4f:16:e5:bb:47:44:b9:8a:5b:c1:c4:42:df:
         93:0c:59:c8:93:4a:dc:72:fd:ce:c5:61:20:84:e9:9f:54:c8:
         e8:09:a0:28:e6:a8:64:5e:d8:de:7d:a5:77:ec:a2:b4:c0:2e:
         f3:94:0a:54:c3:b7:62:0c:5d:56:9a:75:c5:2d:f9:6f:1f:8f:
         b9:0a:93:4e:3f:d7:43:b8:c0:6b:5d:78:7f:de:29:40:35:49:
         01:e2:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:44:29 2025 by rpki-client