Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
File:                     7d789fe7-d176-37a2-ba55-fe1a9a434262.roa (raw, json)
Hash identifier:          Z9pJoRA/d9tjKajBTn6Wk0Eh3byCtlSpk9VSjb8qmrg=
Subject key identifier:   D0:0B:C3:53:3C:8D:36:67:33:30:FB:6D:8E:F0:15:D4:9B:FA:95:B8
Certificate issuer:       /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Certificate serial:       010D0C9F4328584A00DAC33DC3F6EA532D734A80
Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     398065
IP address blocks:        23.145.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c3:3d:c3:f6:ea:53:2d:73:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f7124a8e-06c3-4c6b-baa0-527f470c82a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:4a:c9:36:7d:50:34:ee:c4:5a:f0:ed:39:
                    03:cf:a1:c5:b1:a5:06:42:30:57:b6:b4:e0:df:1f:
                    6f:01:d1:60:35:0e:4c:60:5b:2f:5a:a9:a3:33:ab:
                    ee:47:bd:56:89:00:bb:87:c4:cf:1d:6c:1f:4a:77:
                    d2:a2:a2:56:54:f3:d6:ab:dd:8a:61:ea:ca:d2:fc:
                    19:d0:ad:44:b2:95:27:d6:9a:3a:ea:8e:8a:c7:3e:
                    54:64:ad:24:3c:c8:02:33:f2:38:7d:f7:24:fb:73:
                    88:bb:28:2b:a4:28:e1:7d:0d:6d:d4:cf:17:d1:49:
                    1f:6d:13:51:ef:ba:aa:66:e0:ee:42:3b:7b:70:17:
                    1d:2d:12:c1:49:63:07:4d:b2:a9:e3:2e:6f:ce:35:
                    5e:0e:46:fe:a8:98:5a:ac:43:dd:83:8f:1b:c2:9c:
                    86:c6:15:1e:47:22:19:ac:62:74:2b:6f:be:86:10:
                    e9:09:fb:51:33:c0:2d:19:16:44:1b:fd:e4:69:69:
                    fb:81:ad:df:f6:7e:81:8b:a7:5f:4c:3b:0a:84:b4:
                    2c:98:38:c2:37:b2:70:ea:d0:20:c3:73:8b:a1:c6:
                    4b:fd:40:04:94:d2:5f:2e:ef:5d:9d:19:53:21:2d:
                    fd:45:16:85:a4:7b:42:5e:9c:e6:bf:2b:10:44:12:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:C3:53:3C:8D:36:67:33:30:FB:6D:8E:F0:15:D4:9B:FA:95:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl

            X509v3 Authority Key Identifier:
                keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:40:59:60:8f:2b:97:54:56:a1:26:89:32:55:3d:2c:46:
         c8:7b:37:9e:6c:ab:3a:65:02:e1:4e:61:fd:52:e2:b8:5c:fb:
         f5:2e:8d:17:b5:34:52:92:98:08:c8:d6:83:96:14:de:2f:93:
         75:62:4a:6c:93:9f:93:ab:6f:b5:cd:04:f3:dd:87:75:3a:71:
         9e:b5:cb:37:cd:b8:6e:9b:31:66:6c:e4:46:2c:17:c3:82:c3:
         e2:73:19:28:2f:7b:a0:d4:05:6e:b4:87:40:fb:f5:14:b6:8e:
         dd:7d:59:d0:ee:14:8a:f7:6c:dd:a6:cd:45:33:4b:73:02:64:
         ca:e6:6c:17:d5:f6:38:1f:62:c8:11:53:46:37:ba:e4:15:e8:
         6e:6e:08:b1:73:69:7a:5a:9c:d8:d0:28:1a:86:07:8a:90:26:
         9f:5f:73:d8:85:ff:6e:a2:57:4f:cb:64:92:03:8e:9b:d5:3d:
         3f:75:d5:73:ac:1f:f2:e0:21:a7:98:be:a6:1b:1c:f6:4e:ee:
         cb:98:bf:dc:29:1c:9a:f2:75:b4:e6:6b:30:69:b7:d7:0d:9d:
         c8:ed:02:c5:c2:11:11:69:5d:9e:7e:74:d8:49:99:49:36:d0:
         08:5c:cc:bb:fb:ae:58:e0:be:e9:60:61:2c:ee:1c:d7:8e:12:
         c5:c5:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:51:09 2025 by rpki-client