Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
File:                     2830edbf-9e71-3059-846a-67d31308418b.roa (raw, json)
Hash identifier:          zMJqRYqxui4TWTZvIPZjhMuQPwaHb80ofuXzu8AprI8=
Subject key identifier:   C2:B4:4C:B3:12:FD:3B:FA:F3:A3:C0:88:F6:D1:48:79:1E:F6:C3:18
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584AFC1C00EC75363363423FEE00
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     4213
IP address blocks:        23.130.96.0/23 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          45.45.240.0/22 maxlen: 24
                          162.253.212.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          209.160.96.0/22 maxlen: 24
                          2602:fe6b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:00:ec:75:36:33:63:42:3f:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=c7c6d3f6-0bcd-4c70-a91b-1c414f01ee14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:12:bb:85:66:bb:8c:65:5c:80:13:2b:e4:
                    2b:a6:4d:fa:14:3e:00:67:9d:ee:cb:66:e5:56:c6:
                    35:8f:b2:f8:7f:d1:a1:9b:4f:72:e4:6e:83:52:43:
                    ff:bb:89:96:2c:49:8e:1c:92:5d:35:c0:d2:e2:99:
                    9b:df:4e:27:33:1a:7c:2a:90:3b:64:1c:9b:34:20:
                    6f:f7:6d:c0:fc:84:ad:70:88:67:42:f2:4c:8f:32:
                    cd:e4:4c:0b:56:1f:44:cf:84:ba:ff:1c:69:b1:38:
                    b6:ae:90:8c:3f:ef:d3:0e:b8:a1:e0:20:87:9c:66:
                    bf:5b:1a:f2:05:5a:db:d4:b6:6d:9a:6e:92:38:af:
                    a2:1d:49:6b:25:41:55:d8:ec:64:8f:f0:89:af:d0:
                    a8:cb:55:96:c8:1f:71:a8:a7:8b:32:45:1e:3e:4e:
                    61:b1:d4:22:31:6d:91:7c:13:ec:e1:0a:ce:56:42:
                    34:48:f3:c6:9f:d2:84:b3:8d:ff:14:ee:d9:6f:fe:
                    60:06:dc:55:1d:15:f4:bf:22:53:b2:f5:e2:1f:9d:
                    59:c3:f6:5a:0f:de:1b:67:44:0e:6f:86:39:28:01:
                    ae:f9:f9:62:82:4a:a9:37:ed:79:82:a8:4a:1d:c4:
                    97:fe:bc:33:27:c5:81:2b:ce:99:d1:95:13:2a:10:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:4C:B3:12:FD:3B:FA:F3:A3:C0:88:F6:D1:48:79:1E:F6:C3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  45.45.240.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:57:3c:e0:c8:f2:6d:8a:d8:c6:2e:89:4d:b5:bd:7a:2e:86:
         a3:fc:dd:77:8e:5b:eb:d0:76:e1:b9:b0:8c:ff:45:4b:9d:f9:
         72:44:b5:d8:14:2b:94:fa:64:63:f8:d9:52:f0:45:8f:b3:92:
         4b:44:07:c8:8b:b2:1d:5b:06:6a:4d:ef:f8:f3:b4:c5:0a:32:
         b1:e1:d6:ba:c4:ed:25:68:e2:00:e4:e7:73:b9:48:19:45:8b:
         7b:48:51:25:42:b2:dd:36:8d:39:80:7d:b4:a3:f7:6b:4b:34:
         b7:6c:12:63:9f:1b:89:3f:61:ec:41:4e:12:3e:e3:93:dc:7b:
         1a:cb:d0:c7:00:59:e5:40:1a:58:28:33:fd:f8:7a:5e:56:77:
         2a:26:70:7a:5c:ab:5d:e5:06:f3:1c:6f:95:6a:04:d6:29:80:
         b5:f0:b0:dc:c9:66:2d:8f:d6:68:9d:4f:ba:25:16:c2:e8:2f:
         1d:c1:f1:bb:0f:5b:50:72:f5:7e:c8:5e:49:21:09:29:0b:03:
         03:a1:1a:f6:02:ce:5e:86:bd:aa:24:8d:b4:d4:2a:12:9f:71:
         cf:af:04:39:74:c7:65:26:a3:1a:44:8b:13:4e:7f:65:09:5b:
         2e:8b:08:f8:6a:62:3c:b0:c5:8f:a4:ae:c8:b8:dc:4a:a9:df:
         ff:d9:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:41:27 2025 by rpki-client