Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/e95b8906-144b-3f2c-b727-9a159f4296c3.roa
File:                     e95b8906-144b-3f2c-b727-9a159f4296c3.roa (raw, json)
Hash identifier:          DSkd5FHUSlOPDk1z7i9HsOjD4eolZEHUCXyUb5e1h2g=
Subject key identifier:   68:1A:CC:BE:EB:32:36:2C:82:46:70:3F:7E:A3:7B:FD:09:61:73:3D
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F4328584A62C7B8484545C89B81434E90
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/e95b8906-144b-3f2c-b727-9a159f4296c3.roa
Signing time:             Wed 02 Jul 2025 14:52:23 +0000
ROA not before:           Wed 02 Jul 2025 14:52:23 +0000
ROA not after:            Tue 30 Sep 2025 14:52:23 +0000
asID:                     20473
IP address blocks:        23.141.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:c7:b8:48:45:45:c8:9b:81:43:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Jul  2 14:52:23 2025 GMT
            Not After : Sep 30 14:52:23 2025 GMT
        Subject: CN=490e243d-fc27-46b9-88f7-c27825eecfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:7a:f7:e4:12:64:89:27:e3:ee:17:37:cc:
                    a4:4f:8f:34:3e:ed:da:3f:3a:f9:e2:bc:23:aa:ec:
                    3b:a4:e5:b1:57:c6:83:69:8e:f5:0f:2c:c5:66:a7:
                    ff:a7:49:1c:c5:54:1b:b7:42:20:bf:80:d4:96:25:
                    e9:7d:58:ee:c5:f0:2c:03:ae:3c:c9:46:d0:ca:90:
                    26:f1:e8:9b:e0:46:6f:6b:62:79:14:24:4f:ba:65:
                    cb:67:d3:38:b7:a0:4f:c3:a4:c8:ee:66:cd:3b:44:
                    7d:4f:b7:c3:8f:c6:6f:bc:2f:e6:69:fd:f4:df:e7:
                    42:fb:0b:f5:69:9c:0b:f3:e4:12:89:19:b7:0a:70:
                    83:83:15:6f:c4:25:23:8f:aa:34:53:e2:6d:a1:40:
                    af:bf:9b:2b:d3:b3:a1:08:28:ba:1d:a6:44:5f:92:
                    72:b0:6e:8d:39:69:3d:f6:ca:38:e4:8d:72:4d:ea:
                    32:64:b7:71:89:ec:96:27:43:c2:30:84:a7:45:5a:
                    36:f7:86:d6:f7:ec:dd:86:f2:0f:91:8a:d7:c8:09:
                    1e:26:82:4a:42:a1:a9:30:0c:7b:ad:d4:64:e5:56:
                    75:ed:81:9c:54:4f:ec:49:7d:c5:33:93:e7:34:ea:
                    ed:4f:7f:2a:40:05:ae:8d:ff:01:1e:28:50:a6:84:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1A:CC:BE:EB:32:36:2C:82:46:70:3F:7E:A3:7B:FD:09:61:73:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/e95b8906-144b-3f2c-b727-9a159f4296c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:b9:8b:f4:b1:8d:04:27:23:cc:e9:9a:0e:c2:b2:a7:bd:
         c1:0c:7d:93:20:cd:e8:e4:bf:2d:d1:6b:83:cb:11:35:3f:01:
         37:84:a9:7c:e0:dd:54:0c:61:26:8c:7e:c5:d9:50:09:e3:72:
         6c:89:5f:14:d5:ee:54:b2:bd:f1:09:15:aa:03:b9:d1:0f:d3:
         c9:25:7e:0d:35:79:58:d4:0d:68:d5:28:3c:59:51:c3:3e:36:
         2a:3c:b0:7c:b9:25:7d:89:90:03:7d:28:7f:9b:15:a3:cf:9e:
         16:32:e8:68:2a:9a:dd:68:76:78:5c:44:85:aa:27:75:61:87:
         dc:7d:fb:63:92:fa:1b:6b:28:b3:79:e7:ea:ca:ff:3c:8d:b4:
         65:47:6f:ea:f4:b0:fa:a9:ab:e6:58:2f:97:92:a6:9d:75:82:
         27:18:c3:da:9a:bb:f2:9e:c5:c0:e2:f5:ae:3a:70:b1:2c:b6:
         ff:a4:eb:3c:82:46:61:5a:39:11:81:31:d1:ae:ef:e9:de:e6:
         45:f6:17:89:c1:c5:75:ba:08:b8:6b:5a:03:47:bf:92:de:ca:
         1b:f6:04:b8:09:25:1e:7c:e2:41:6c:ea:95:7d:fe:6b:2c:88:
         74:c0:31:f3:83:df:64:9f:8f:84:3a:3a:19:23:ef:e2:a4:f0:
         0b:aa:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:19:09 2025 by rpki-client