Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/7fc23211-29f6-3306-a2b4-954fbff386e7.roa
File:                     7fc23211-29f6-3306-a2b4-954fbff386e7.roa (raw, json)
Hash identifier:          rSSDLLZGKcL23wrbg746Ez86gFPEJ87JyvmPPDdrn88=
Subject key identifier:   6C:7E:12:89:A5:A2:FE:83:96:B2:7E:82:1C:88:B8:43:A5:43:C5:57
Certificate issuer:       /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial:       010D0C9F4328584AFEE6A07587D93146BA92A080
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/7fc23211-29f6-3306-a2b4-954fbff386e7.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     21700
IP address blocks:        23.157.160.0/24 maxlen: 24
                          172.82.22.0/23 maxlen: 24
                          2602:fe2e::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a0:75:87:d9:31:46:ba:92:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=ae603e58-e180-4533-9c7f-33f9b4d5d530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:a2:fd:91:ef:50:8a:b5:af:e8:f6:8a:af:
                    07:b8:e9:e2:4e:3c:dd:ff:8c:0b:21:34:89:d4:d7:
                    8d:27:c2:7b:09:4c:33:78:5e:35:c9:45:d4:a0:25:
                    7a:87:8f:99:d7:8c:22:46:ea:3d:c9:9a:b2:35:e1:
                    58:ad:90:42:a8:e8:6f:76:b6:1b:36:4c:e7:2e:cf:
                    5e:9d:ae:41:d4:03:9d:1a:1c:fe:5d:e9:ea:19:0e:
                    43:e9:64:98:7f:24:09:8b:f7:a2:8e:77:aa:bf:c1:
                    05:84:db:e5:38:06:00:61:48:2f:25:72:61:f7:6d:
                    81:c2:a4:ff:4e:06:0b:58:6b:1f:34:23:5f:c8:05:
                    1b:a5:d9:87:79:a3:bc:01:be:43:6e:6d:45:8e:d1:
                    28:cd:50:86:1b:02:bf:0e:aa:34:07:bf:d1:ab:8f:
                    94:21:70:68:e3:77:4a:4f:a9:ef:4e:e1:17:d6:16:
                    7c:33:44:6c:6d:95:a9:46:b9:56:e1:70:c7:1b:9c:
                    31:74:dd:04:09:99:b2:75:29:e5:e7:e7:3c:f2:9e:
                    42:3a:00:76:fb:44:4a:89:9a:4c:40:fa:c5:94:57:
                    00:e1:47:20:ad:5f:ce:53:e9:8a:89:cc:8c:22:02:
                    69:64:a9:52:44:6c:01:3b:5d:65:8f:a1:f9:c5:94:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7E:12:89:A5:A2:FE:83:96:B2:7E:82:1C:88:B8:43:A5:43:C5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/7fc23211-29f6-3306-a2b4-954fbff386e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.160.0/24
                  172.82.22.0/23
                IPv6:
                  2602:fe2e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:32:a8:10:26:f3:0e:12:e9:de:3a:29:bc:91:0b:2f:91:
         a1:e3:bd:ad:a9:dd:0d:a6:b1:73:2d:07:f8:c0:34:32:7b:23:
         37:b2:61:f9:27:1f:c9:75:d2:65:30:c2:39:00:8f:ef:6c:ca:
         37:3c:0b:72:0c:73:7b:d8:12:ef:70:5f:7a:24:9b:01:38:57:
         0d:f9:95:d5:73:cb:0c:5a:72:fd:a9:5d:8d:31:31:07:55:41:
         36:b6:3a:fb:91:3b:9b:d4:32:a0:04:b9:ec:3b:90:f7:5e:94:
         46:8d:06:a7:5c:fa:f5:e5:c2:a6:27:7e:e9:8b:5f:67:b0:07:
         2a:61:73:ac:22:1e:3f:ca:6f:bb:97:c3:dd:37:8d:d0:e9:5e:
         33:4e:7f:7e:0d:a6:34:ba:67:08:88:aa:d5:de:a4:35:9d:00:
         80:d4:23:87:4a:4a:bc:21:c3:9b:3e:7f:0e:a3:3d:e2:89:2f:
         42:a6:a7:4d:5c:03:43:71:ce:9d:37:0e:f3:82:04:21:5d:a1:
         57:44:ad:ab:65:42:d5:f6:2f:6f:00:44:42:d9:aa:95:1a:26:
         e0:63:f8:e0:b9:f1:d7:c9:26:4f:21:84:45:23:8e:50:1f:78:
         78:bb:29:cf:b5:6c:03:ba:4f:4f:8e:26:f7:3e:10:bc:2b:46:
         41:1a:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:52:32 2025 by rpki-client