Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
File:                     41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa (raw, json)
Hash identifier:          dwSSPRiDllebikcMMWotf7cH/n2Cyf12/fpwAWrGsl8=
Subject key identifier:   3B:93:1C:59:B0:67:72:9A:2B:FB:1A:73:59:5A:C1:FA:14:B0:57:91
Certificate issuer:       /CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
Certificate serial:       010D0C9F4328584A51D0717450F2122C4751C5FC
Authority key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     25737
IP address blocks:        23.162.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:71:74:50:f2:12:2c:47:51:c5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=61b5f49e-2a0c-47c0-a618-68a7031cd223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:93:40:5a:c1:60:d5:67:46:26:d2:15:7b:
                    a0:5e:8d:f1:10:6f:e7:0b:6e:18:7f:7d:5b:5b:5f:
                    a8:d1:b1:ce:1f:52:35:4e:9c:e2:a9:62:61:92:1d:
                    d7:20:bc:16:09:90:a9:cc:e8:c9:e4:f9:21:a2:6f:
                    3b:49:90:e8:f0:01:06:45:0a:1b:9a:b8:39:cf:0d:
                    23:33:01:60:eb:f1:b0:f1:ab:60:37:14:d1:2c:c6:
                    ba:1b:56:c4:5d:e4:d3:0f:40:46:43:ab:40:f3:31:
                    fb:be:49:77:32:46:19:8b:18:6c:32:4b:5e:ef:b2:
                    9f:c5:3e:75:11:30:dc:a4:67:c6:fe:1c:dc:f9:23:
                    99:ec:ce:89:a8:aa:42:73:28:d0:60:04:db:30:d0:
                    9a:b9:cf:16:2c:29:68:b3:55:3f:34:3f:22:9b:c6:
                    1b:da:96:ff:24:eb:e5:9a:c5:d0:e5:88:e5:a3:fa:
                    44:3c:44:8d:d4:6c:3b:db:aa:6e:65:a3:f9:6d:7c:
                    96:04:67:f6:93:e0:9d:6e:50:c9:aa:0b:55:e1:59:
                    b9:7a:53:03:6a:67:cb:f8:19:de:02:1f:1c:f8:c5:
                    8c:47:60:a7:5f:fd:68:f1:28:c5:e0:27:ed:2a:08:
                    0e:b6:4b:3f:51:cf:55:1c:ab:78:c9:c9:3d:29:01:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:1C:59:B0:67:72:9A:2B:FB:1A:73:59:5A:C1:FA:14:B0:57:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:63:8e:e8:10:ba:8a:28:dd:90:16:98:67:82:d4:0b:5f:88:
         b6:b3:e6:e0:cb:d7:fb:14:36:1c:de:25:de:7c:4a:45:ef:7f:
         96:51:5b:9e:44:aa:2a:59:fe:44:0f:3d:80:90:90:9a:59:63:
         d5:49:93:6d:72:03:4f:ed:19:db:be:10:e4:0e:bf:eb:05:8e:
         c5:17:40:82:0b:7d:27:4a:ab:44:45:e2:2c:a6:70:97:63:ed:
         da:5a:29:75:99:51:01:64:ec:9a:2b:09:4a:cb:4b:3d:af:87:
         5b:cf:f9:39:6d:ad:9b:97:29:10:80:a3:32:c2:e8:0f:d7:cb:
         95:06:c8:94:4b:02:65:5d:be:69:bc:2c:94:f7:04:36:07:94:
         0c:6c:0f:4c:72:f1:6c:46:60:78:10:d2:8a:d2:e7:dd:44:a9:
         d7:f4:54:9c:ef:4c:94:eb:63:c2:b2:41:4b:3f:52:4c:79:a3:
         63:a6:eb:0e:04:af:13:58:0d:1c:8f:43:fd:dd:08:a4:78:ca:
         1a:34:91:d5:bb:e1:dc:73:d7:27:e7:b1:9a:f9:c3:c7:93:7c:
         ee:86:9f:95:a6:92:6d:ed:4a:0a:fe:47:ec:84:cd:fd:15:e8:
         54:b3:bb:88:96:5d:89:be:22:f3:4e:8d:6b:8f:5d:73:5a:cb:
         64:48:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:31:48 2025 by rpki-client