Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa
File:                     6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa (raw, json)
Hash identifier:          yayq8dHCnyt0g+JG3J20qUWHT6JhTpZ+GMvRNAlKxU8=
Subject key identifier:   29:93:C4:F6:5F:A6:B1:1F:A9:79:33:F1:EF:3C:8C:C1:55:E5:9F:C3
Certificate issuer:       /CN=7df7e023-145a-4cd7-8721-998050ab91e2
Certificate serial:       010D0C9F4328584A90A0BE8DBDF11937DA4BD980
Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     11848
IP address blocks:        170.199.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:be:8d:bd:f1:19:37:da:4b:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=6c4aa5c2-25b7-4055-b490-ec1099786363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:1e:9f:62:61:70:bc:cc:90:36:28:f7:46:
                    d4:09:ea:17:26:1c:9c:5a:a1:be:22:a8:c1:1d:c5:
                    15:59:c4:69:a2:07:5f:f1:cb:20:22:87:9f:dd:b6:
                    31:69:05:f3:92:f9:5e:f8:bb:dc:f8:3d:05:09:1b:
                    71:e3:36:8a:7e:77:95:f8:9f:79:27:f9:98:06:72:
                    61:e4:45:2e:04:5c:6e:99:38:e3:f6:b4:30:40:a4:
                    11:79:9e:61:6e:23:c4:5b:d2:dd:e4:88:53:21:65:
                    3e:68:3b:e2:43:2d:ca:d4:b0:07:e3:eb:05:13:f1:
                    0c:97:d0:5a:25:8d:ad:86:de:cf:52:60:97:0d:6e:
                    d7:07:72:f8:8a:ab:a3:45:f2:c7:f6:5e:a0:38:1a:
                    33:f3:33:21:32:77:58:a5:7a:1e:c1:fd:81:c1:7d:
                    ac:01:df:aa:31:e2:90:a1:b5:53:74:ce:2d:62:e5:
                    e1:f6:8f:25:6f:be:c7:c6:2c:ac:c2:6f:3b:a1:4f:
                    72:8e:e4:05:83:60:bb:8d:15:0a:fd:98:64:fe:f9:
                    55:9a:b2:db:bd:a2:00:0b:4d:50:ed:bf:4e:ba:4c:
                    96:4f:57:b9:c5:e2:93:55:e1:5f:b0:8e:70:32:36:
                    38:ca:d4:10:c0:41:78:6e:77:9d:51:4e:0d:7b:e8:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:C4:F6:5F:A6:B1:1F:A9:79:33:F1:EF:3C:8C:C1:55:E5:9F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl

            X509v3 Authority Key Identifier:
                keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:d3:0e:34:5c:e8:d7:91:b1:04:e9:e9:ee:c9:44:45:87:
         c0:b1:d8:90:be:34:db:ad:9c:cc:42:0b:db:b5:b1:6b:82:55:
         86:49:09:71:fd:08:2f:18:2f:77:75:a7:b4:b4:99:f5:cc:8d:
         3d:cb:2e:96:85:d7:d7:d2:c7:99:20:82:22:57:00:9e:3f:48:
         5a:1a:da:e6:36:da:49:49:30:ac:54:da:dc:d0:2f:54:dc:77:
         2b:b8:c3:18:aa:e9:b0:9f:2c:26:d9:45:e7:07:f9:bf:4a:51:
         12:a8:68:31:78:2e:f1:b9:eb:85:77:de:50:e2:12:3d:5e:5f:
         c2:0d:ce:1e:c8:15:ff:16:69:66:2a:7d:d1:ad:e9:92:ff:08:
         34:55:23:4e:f6:cd:d8:04:31:43:21:51:f7:1b:ae:8c:16:70:
         a9:a9:d8:91:d9:d5:b0:b6:2e:77:ec:24:02:cd:7c:25:7f:a6:
         8d:dc:97:f5:2f:7d:48:9f:6b:db:54:a4:70:fe:ac:59:81:66:
         8c:5e:ae:c6:7c:be:63:1a:f8:39:e3:66:c1:dc:d3:49:d8:f8:
         a0:c4:53:a1:36:0d:ed:93:b9:53:36:ea:42:40:96:3f:2e:97:
         d3:6a:70:28:a1:ee:30:31:0d:8c:01:8d:a3:ea:17:0b:84:e6:
         35:b5:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:15 2025 by rpki-client