Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa
File:                     4f328c30-9c44-33ba-ad3f-f36534bc620e.roa (raw, json)
Hash identifier:          0jBn7fHnQbyplFL9kyqgmlVbCwAKiDJgiadkipdArmg=
Subject key identifier:   A9:53:73:63:B7:55:E8:52:58:FA:DC:E5:6D:1D:77:01:AC:56:59:59
Certificate issuer:       /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial:       010D0C9F4328584AB650F32FCDEC5C335F468480
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30671
IP address blocks:        23.160.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f3:2f:cd:ec:5c:33:5f:46:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=fd9fca31-0b73-40e9-8598-78d225c182c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:46:1a:0c:1d:63:c0:ba:e5:ea:24:33:52:
                    be:4f:8f:6f:ee:81:86:67:73:bd:77:fb:15:e0:c4:
                    cf:98:7f:0e:4c:b3:a4:c2:71:db:80:8d:3c:5a:16:
                    70:27:9e:4d:57:88:2a:54:3e:78:99:33:7d:97:09:
                    b8:29:04:09:1f:9f:1f:e9:53:53:e0:df:60:71:2a:
                    c1:66:c2:c1:b0:5f:93:a4:0a:b5:67:ac:a5:d4:43:
                    b5:d7:da:98:c1:33:2b:30:b5:e4:ac:18:db:07:3b:
                    8b:1f:a4:4e:0a:49:cf:78:86:0d:20:f0:3d:54:73:
                    b9:17:3a:44:ed:d4:2f:39:42:73:c9:a2:47:2c:39:
                    fe:41:b1:45:98:ce:78:51:11:b1:ee:7b:0d:a1:61:
                    21:08:f0:c8:1c:1c:33:90:77:c7:f8:95:e3:1d:6a:
                    09:c7:ed:51:ff:88:b3:6f:96:ed:3d:49:53:be:f4:
                    50:69:62:d1:ba:52:47:47:5d:fc:e7:d9:cd:e9:e7:
                    da:2c:5c:a3:f8:18:5c:33:bf:c7:0d:fa:18:84:30:
                    53:93:44:d9:8f:01:78:5e:8a:83:f2:d5:fa:65:0e:
                    75:74:0f:83:53:59:bb:e0:b7:81:8f:18:cc:bb:6b:
                    88:75:61:7b:8c:18:fd:42:ff:66:52:1e:3f:a6:1d:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:73:63:B7:55:E8:52:58:FA:DC:E5:6D:1D:77:01:AC:56:59:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:21:46:7a:e6:a5:d7:2d:45:58:06:e1:c5:27:13:e9:7d:3c:
         94:e3:c8:b5:5c:44:ef:c6:80:27:2c:ab:9e:a3:46:1b:b3:57:
         2a:6e:0f:e2:00:ad:c8:d8:e2:ce:95:9d:f8:ec:bc:29:8b:f1:
         b2:94:44:af:be:60:96:21:f1:32:15:eb:8c:35:69:b4:db:f9:
         ae:ab:e4:da:73:34:59:37:05:51:a9:31:38:a6:8d:1e:e6:ef:
         83:d7:4c:8c:b6:5c:cb:51:36:e0:ee:82:de:27:91:72:11:d2:
         ec:57:c9:d1:6a:23:98:fb:51:e7:4b:84:3c:8d:58:8e:73:25:
         78:7e:c4:57:c1:ba:ec:21:2a:8c:0d:89:7b:f1:c1:25:1e:1f:
         8a:f3:6d:e6:5c:96:01:47:06:07:0f:f2:79:79:8e:1e:74:4c:
         c7:ff:10:9b:96:21:5a:3f:8b:50:fc:49:a5:38:65:f2:86:42:
         10:dd:b2:f8:f0:c0:ae:82:a6:6c:a5:2b:10:73:cb:ff:3c:6f:
         c6:39:0d:15:a8:a1:5f:61:91:95:27:2d:0a:07:e3:28:ae:62:
         34:dc:85:46:d1:81:93:d6:df:7c:05:b3:eb:5f:6c:28:ca:7c:
         2b:50:a7:10:a8:4b:a6:65:49:ae:90:ae:f2:c0:7f:1c:b4:a9:
         14:86:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:31 2025 by rpki-client