Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa
File:                     0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa (raw, json)
Hash identifier:          GXlJnmZdEDsHV57RfanRkJge5BPnpUJWRUA8Lend6BU=
Subject key identifier:   24:E7:3F:34:D5:2F:57:38:80:4D:4C:B1:77:1A:21:97:B9:E5:C2:F8
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F4328584A7D15F3B9A399B1269D038E40
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     38008
IP address blocks:        23.143.8.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f3:b9:a3:99:b1:26:9d:03:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=7fe4b368-4f65-4e33-ac35-58c54ff148a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:8e:2d:5a:e2:58:ea:d4:25:05:90:a2:a2:
                    8e:49:d8:c6:da:10:6f:0a:40:a8:cd:8b:7d:f4:b4:
                    1c:49:93:39:dd:f1:e6:6b:4b:89:be:3e:2b:7a:9b:
                    ed:c1:89:2e:a4:42:e8:14:01:d0:1d:8f:df:39:4f:
                    88:d6:24:f9:c0:07:23:55:f4:51:b3:0d:88:14:a3:
                    d1:c9:15:03:d5:43:f6:8e:b1:49:b2:59:c1:a0:d7:
                    3e:a9:11:33:a9:eb:47:ec:34:00:e2:63:f3:cb:a4:
                    b1:2e:3c:c7:e5:ae:77:66:50:e8:17:08:ed:d2:58:
                    a6:64:56:df:5e:02:3f:f5:c7:22:d9:7c:90:da:84:
                    dd:e1:22:2f:92:68:43:62:21:b9:8c:eb:fd:92:03:
                    86:f6:bf:76:31:c2:5d:67:bb:3c:c8:96:3d:09:95:
                    db:5a:56:5a:f2:7d:93:f8:20:97:f5:30:92:b5:0e:
                    1a:3c:96:be:20:05:41:dc:60:65:77:8a:67:e1:d3:
                    c3:79:d4:cf:17:a3:44:70:1a:2d:ac:0c:37:1a:ef:
                    3b:f0:79:0b:a1:f7:9c:5e:4c:12:f6:60:88:f3:07:
                    6b:11:f2:42:30:3f:2e:1c:78:a0:ae:6b:71:68:14:
                    8b:7f:4f:40:0a:8f:ad:18:0a:47:93:d7:a2:9d:e1:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:3F:34:D5:2F:57:38:80:4D:4C:B1:77:1A:21:97:B9:E5:C2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:4a:f3:d9:8d:c7:f7:e3:b5:90:f7:24:fc:d6:ff:e5:f7:
         5d:94:81:98:e3:19:53:c2:4e:75:ce:70:ed:39:c8:b7:62:b5:
         5f:74:a8:30:b3:86:b5:26:4a:d4:01:22:cc:69:16:de:f9:e8:
         70:85:bb:3f:b2:13:83:34:ae:66:d4:ab:fa:44:3b:1a:de:6c:
         05:00:59:8f:74:4d:d7:3f:55:37:89:e1:66:4c:a3:54:f3:a1:
         0d:4d:e2:37:a2:39:9a:f5:70:fd:79:39:14:30:b5:a0:fe:0c:
         6f:f3:6e:15:93:50:81:00:c8:28:bd:bd:fc:df:9b:67:e8:90:
         18:13:b2:a2:be:9f:d5:e2:0b:f2:2c:37:5e:2e:78:44:76:ef:
         10:7b:06:fe:b0:97:86:85:06:42:ec:c7:34:e4:69:ad:68:a3:
         2e:16:88:6f:78:b5:fa:02:f0:7a:4c:99:83:cf:68:2f:ef:b1:
         57:bf:31:0a:0e:79:db:e0:4e:8f:20:ed:7b:06:48:14:08:38:
         a2:82:dc:c8:0a:03:af:d4:87:54:9b:4a:7f:c4:56:9c:4a:1a:
         69:9c:f5:9a:ff:69:c6:db:25:29:61:5c:fb:23:ad:fa:6b:1c:
         63:29:87:79:d9:f3:b9:b3:7b:05:dc:05:71:94:f0:cb:d5:7a:
         87:ac:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:38 2025 by rpki-client