Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/78c69d26-5ab1-316e-9a91-295c01a41edb.roa
File:                     78c69d26-5ab1-316e-9a91-295c01a41edb.roa (raw, json)
Hash identifier:          WGI2cg4wuTmzG6Qt1daE3f01UQI684RZsVKTkCTMAfo=
Subject key identifier:   44:81:66:43:65:7B:F9:39:7F:26:BB:E6:43:B4:D3:6A:5D:EB:43:AC
Certificate issuer:       /CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2
Certificate serial:       010D0C9F4328584A74B5DAF1501AEB5B8E99BB00
Authority key identifier: 7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/78c69d26-5ab1-316e-9a91-295c01a41edb.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     394838
IP address blocks:        23.142.240.0/24 maxlen: 24
                          149.106.96.0/19 maxlen: 20
                          162.142.32.0/19 maxlen: 20
                          216.110.160.0/19 maxlen: 20
                          2605:6dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:da:f1:50:1a:eb:5b:8e:99:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=e572ca90-e70c-4230-ba56-a1f1b72e4841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:9d:b3:de:5b:5a:6e:15:1f:9a:5f:78:77:
                    3b:de:b0:84:fc:68:47:40:be:62:e0:77:c1:22:44:
                    6f:e6:f4:76:e0:16:ec:d7:48:c8:6b:8e:cc:cf:e0:
                    0b:03:23:dd:60:4a:19:77:9e:65:d1:43:6b:16:95:
                    c6:d3:03:ef:f0:f1:65:e5:70:31:fa:ee:0d:cf:3d:
                    50:7a:98:e4:d8:86:d8:58:b4:af:c5:92:79:63:49:
                    51:d8:dc:13:ca:8a:c3:96:cc:35:2f:fd:71:4d:2f:
                    68:33:5e:0d:e9:9e:64:b9:2e:b2:4d:3a:0d:0a:8a:
                    3f:a4:89:c0:b1:be:8a:de:79:87:c3:b3:f4:c2:7f:
                    f4:d0:56:16:bc:9e:07:c0:20:bb:dd:fa:90:51:a3:
                    f5:0a:a5:1a:88:3b:49:18:6b:34:f4:62:75:3c:06:
                    89:a7:cc:99:14:38:05:4d:9f:5d:26:af:63:47:a9:
                    23:7a:9a:d5:0f:5e:b7:19:c1:e0:fd:ca:01:6e:64:
                    e6:cd:a3:a0:fb:43:98:37:f9:30:6c:a9:a6:3c:61:
                    bc:2d:a3:00:8a:e7:a7:6f:49:12:70:01:ea:01:6c:
                    54:2b:c6:9f:b6:b8:93:3f:d4:03:15:df:f9:32:fc:
                    1f:1d:19:3f:65:c7:cd:04:3b:51:ae:1b:86:39:a1:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:66:43:65:7B:F9:39:7F:26:BB:E6:43:B4:D3:6A:5D:EB:43:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/78c69d26-5ab1-316e-9a91-295c01a41edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl

            X509v3 Authority Key Identifier:
                keyid:7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.240.0/24
                  149.106.96.0/19
                  162.142.32.0/19
                  216.110.160.0/19
                IPv6:
                  2605:6dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:59:5b:88:84:44:02:14:db:4b:d1:84:72:c6:b4:99:62:
         31:2f:14:3d:d2:f4:8b:c6:4a:aa:6e:c5:c5:f2:ac:46:e9:f7:
         aa:d5:2e:a2:9b:3d:e6:57:15:07:ac:37:4a:12:19:63:49:9c:
         9d:5c:1a:36:9e:d1:39:84:e1:75:a4:ae:88:d3:01:f4:2e:85:
         1f:b0:58:86:20:31:c8:57:86:25:2e:38:30:da:db:92:d7:f1:
         5b:b2:f4:39:88:4e:e0:f8:49:63:e8:bd:41:e6:dc:d4:9e:16:
         a7:f4:83:bf:90:85:71:53:0a:03:0f:1a:e9:01:a7:89:fc:34:
         79:7f:7d:80:f4:70:0c:ea:1d:4f:df:9d:47:f1:82:7a:d8:0c:
         2b:23:95:b9:40:f8:cd:94:ec:75:b0:53:fe:13:d3:80:9c:1f:
         7f:0c:58:ee:fc:96:69:f1:c7:f4:98:2f:ef:ed:b0:cb:de:81:
         87:dd:5a:3a:59:02:fa:a0:45:a6:c2:7f:89:3d:73:ba:e1:b1:
         90:6b:5e:01:8b:b6:83:ca:6d:58:2d:52:4c:26:3b:ea:88:32:
         06:cf:58:53:51:df:e3:73:f4:d7:9d:f7:43:94:63:1a:45:b3:
         c8:3c:bb:39:2a:01:fe:62:31:03:74:b9:52:04:10:2e:7c:a6:
         67:39:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 12:56:15 2025 by rpki-client