Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
File:                     50306751-11fe-35d4-a81d-4a58fc0ec16c.roa (raw, json)
Hash identifier:          sQ+PFSopVd+Rmjj7wegQSPimyxQBS0avfH09lciTcSg=
Subject key identifier:   C4:56:81:A9:A4:55:B5:E6:B4:59:87:0D:11:7A:57:01:27:AA:3F:6A
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584A90A0BB5982078F8BDE38CD94
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     23428
IP address blocks:        23.147.72.0/24 maxlen: 24
                          2602:fb68:140::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bb:59:82:07:8f:8b:de:38:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=8d61d0f8-7d91-4c1c-b942-e607d4a2ab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:58:b3:d9:25:f1:ea:d7:91:5e:34:28:39:52:
                    f7:3b:b4:7b:24:5c:89:eb:77:ed:9d:e2:09:c0:ab:
                    01:e8:6d:34:71:e0:88:f4:cf:1e:77:b9:b7:50:54:
                    35:e6:0d:c7:22:b9:5e:8a:0d:4b:bd:82:25:d4:c5:
                    79:84:0d:ad:1d:d9:a5:5f:cd:34:c2:f8:08:3b:f1:
                    73:ac:a9:c6:d3:6f:19:e3:65:53:d9:d4:cd:41:51:
                    30:20:77:f8:f8:43:6e:0b:cf:32:c8:7d:58:1b:ca:
                    63:24:eb:4f:8f:99:7b:c3:ef:4c:e0:7b:b6:60:90:
                    f0:56:de:98:48:1b:76:27:00:c0:4e:e4:47:33:2d:
                    2a:5b:2b:aa:78:56:40:27:20:05:04:12:76:d1:95:
                    15:1a:bd:c6:19:3a:93:1c:3c:e9:e9:b2:5b:63:2c:
                    6f:7b:27:8d:c1:9b:ac:b5:d7:a9:b2:19:fb:94:42:
                    2a:5c:02:84:c2:f4:38:bd:3f:f9:58:86:14:55:f2:
                    5b:2d:c8:f1:d4:00:1c:52:c4:67:39:bb:56:74:ba:
                    19:b7:b7:b8:44:b7:75:d4:02:3b:66:a3:80:53:dc:
                    aa:e1:16:b6:86:91:97:6f:57:48:0d:fd:7d:8c:61:
                    18:28:a8:5d:cd:f0:18:a3:84:d3:f7:a4:a8:0b:09:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:81:A9:A4:55:B5:E6:B4:59:87:0D:11:7A:57:01:27:AA:3F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.72.0/24
                IPv6:
                  2602:fb68:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e5:82:ad:48:74:bc:3b:eb:e0:3c:c9:f1:70:3c:5a:23:67:
         c5:f9:d9:50:18:58:8e:d7:c5:6a:55:55:f0:5a:bc:f0:0a:34:
         14:89:20:7a:3f:80:a5:61:f4:d5:34:c7:fa:3b:eb:75:90:5e:
         d3:a3:4a:a1:16:0e:e2:28:f1:2d:f9:5a:aa:62:e7:d7:63:77:
         35:37:53:b8:d0:be:75:7b:16:c9:e1:20:42:d7:ad:de:4a:e0:
         06:90:92:5c:6d:5e:01:c2:83:03:ad:26:45:87:5d:aa:d5:d0:
         c8:c7:ee:e4:4d:16:d9:c8:44:20:34:bb:57:07:93:94:6b:6d:
         5e:01:4d:66:aa:5c:1e:30:70:d4:66:77:bf:e3:84:4f:ac:7a:
         ee:a0:91:08:29:d1:33:72:61:25:b1:fc:42:23:8b:58:23:2c:
         d7:e4:0b:4a:1b:a5:c8:21:93:4b:dd:07:df:39:f5:28:f7:61:
         87:aa:6e:58:4f:44:97:a8:78:ca:3f:0f:e0:d5:5f:cf:cd:00:
         a3:9d:c4:28:6c:68:08:e0:6a:a5:2f:8a:7f:a1:d5:14:d1:34:
         f8:f3:b1:b4:e8:13:dc:5b:1d:e1:73:58:b6:00:db:18:02:33:
         95:b2:9c:7b:a5:37:f4:4a:54:bf:b4:b2:0c:ed:4c:23:8f:82:
         a3:1c:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:02:54 2025 by rpki-client