Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa
File:                     7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa (raw, json)
Hash identifier:          zUfDL3g+S7eXjO5bnkNnAZFMRWZgclJZ5TyvEc3s+gI=
Subject key identifier:   A0:7B:E9:E7:57:14:96:78:BD:86:41:BD:99:75:0A:29:4C:9C:DC:4B
Certificate issuer:       /CN=68b39235-773a-4108-9528-465304a966b3
Certificate serial:       010D0C9F4328584A4110553E2B4B45F0F7E25AC0
Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     63296
IP address blocks:        23.174.240.0/24 maxlen: 24
                          52.129.120.0/21 maxlen: 24
                          104.245.72.0/21 maxlen: 24
                          107.178.20.0/24 maxlen: 24
                          107.178.28.0/24 maxlen: 24
                          107.178.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:55:3e:2b:4b:45:f0:f7:e2:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b39235-773a-4108-9528-465304a966b3
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=013d5ae7-690b-4683-8cb5-081e4e37e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:ec:55:e5:89:2c:dd:92:d1:ae:41:7a:3a:
                    fb:3f:8d:a7:c9:f2:6f:85:1e:ff:6b:1b:32:17:d8:
                    c7:a9:1a:14:b8:b2:c8:2c:55:3c:7b:47:1a:77:b7:
                    0b:ad:1e:fa:fa:7d:b3:5d:c2:ce:db:b1:d6:ac:f0:
                    c8:9f:c3:77:ce:ef:36:7e:77:b0:b1:22:b3:56:c2:
                    80:47:1d:b7:e4:a1:fb:bc:c6:3d:4b:ea:7c:3a:5a:
                    2f:c2:ef:0d:87:ee:28:9c:14:41:c5:26:0e:20:bc:
                    5e:ea:bf:7d:f4:92:af:65:a4:ac:29:8e:ad:d0:30:
                    a2:80:a9:d2:f2:42:75:c7:f0:dd:a4:91:29:ab:c5:
                    57:93:d8:41:58:21:65:2a:12:6d:86:f5:94:03:52:
                    6b:c7:12:69:73:bd:b4:46:0e:f0:15:25:f1:41:5a:
                    4a:21:7c:29:2b:d5:43:34:40:0f:dc:2c:96:4c:d8:
                    ab:fa:01:24:ba:be:f4:0f:e1:79:61:42:00:17:c4:
                    12:5a:4c:ca:93:34:fc:de:0f:5c:8f:04:02:70:5a:
                    d2:c4:d3:1a:db:da:8e:1f:7c:ba:de:e4:ae:36:dc:
                    52:da:5b:f7:3a:36:a6:02:41:9e:33:be:f2:7c:b5:
                    27:a5:47:10:ac:c7:b3:12:8d:f6:07:a7:c9:5b:74:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7B:E9:E7:57:14:96:78:BD:86:41:BD:99:75:0A:29:4C:9C:DC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl

            X509v3 Authority Key Identifier:
                keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.240.0/24
                  52.129.120.0/21
                  104.245.72.0/21
                  107.178.20.0/24
                  107.178.28.0/24
                  107.178.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:a3:12:e2:d0:cb:53:57:e5:47:b4:e9:92:2e:ff:1d:00:6b:
         26:20:52:98:85:5c:21:09:64:15:36:c6:26:c0:b0:f5:2e:9d:
         9a:36:33:7b:bf:fb:d5:d5:bd:d9:13:08:e1:f0:17:37:90:80:
         75:be:a7:f2:a1:f0:7f:51:92:69:01:8d:ad:01:09:fb:27:c7:
         c5:b8:2b:19:c5:70:45:81:d0:ba:9d:c8:a2:ed:8f:49:0d:3e:
         0b:46:c1:5f:f3:0e:43:72:58:35:5a:44:77:6e:33:a4:ae:a9:
         47:46:b7:b5:29:db:ea:86:9c:cc:d6:d6:93:e9:cd:86:af:01:
         24:d7:fa:1a:54:32:70:6c:af:99:40:63:d5:3b:98:e5:74:e6:
         9c:78:38:3a:bf:a2:0c:58:96:0a:68:e3:4a:fe:48:af:0f:a4:
         44:7c:c6:a4:d9:10:2f:d8:db:e4:cb:25:d1:aa:a1:c5:c3:3b:
         8e:a4:f3:7a:60:9e:6d:db:4b:03:e1:e9:64:7d:e0:69:60:00:
         b1:0b:40:06:2f:c2:c7:8b:47:38:10:ac:e1:04:c8:f8:9e:b2:
         db:30:63:d0:09:b6:f2:2c:8d:a9:04:30:5c:a9:e6:70:a3:e9:
         e4:a4:70:c6:32:49:d7:9d:9f:90:a9:31:9b:53:5f:27:27:f2:
         d3:af:6e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:25:43 2025 by rpki-client