Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa
File:                     cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa (raw, json)
Hash identifier:          IZFGCX8gZtsP1f5lbHb8zZepkZ2G/1yKNmYw2KrColw=
Subject key identifier:   62:7D:4E:7B:A0:7E:5A:D3:75:54:6B:21:73:50:DB:F7:AF:EC:17:2B
Certificate issuer:       /CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73
Certificate serial:       010D0C9F4328584A9D30D3AB410D7410D7006400
Authority key identifier: CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     400200
IP address blocks:        23.128.184.0/24 maxlen: 24
                          128.254.128.0/22 maxlen: 22
                          2602:80c:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:d3:ab:41:0d:74:10:d7:00:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=8aeb872e-b1ae-41ca-b679-3c19b420e9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:31:f5:b2:20:d0:3e:da:f6:d5:a4:4c:ed:
                    b9:82:76:c0:33:f9:94:1b:25:2a:3e:68:97:62:d0:
                    94:ce:82:70:63:8c:4b:d1:c6:97:d1:16:c4:1b:6d:
                    e4:10:9c:b8:52:7a:dc:1e:1e:00:8d:db:10:30:88:
                    44:4a:20:d1:04:17:6f:eb:4c:f0:fc:5c:c5:8e:43:
                    86:3e:33:43:37:44:1d:a6:84:df:dd:06:6c:a6:b8:
                    d3:87:1d:48:fc:b7:6b:d3:76:7a:f2:74:83:e4:fd:
                    30:f0:92:98:13:d4:e0:68:39:84:ff:14:88:da:fd:
                    fc:45:9e:0a:dc:ed:54:b5:bf:48:3e:1a:72:59:92:
                    f0:8f:af:f4:0c:ff:88:28:7f:08:59:dc:c9:c4:52:
                    0b:59:aa:39:57:98:02:51:df:26:1e:95:c6:1b:59:
                    7e:b4:4e:f4:ad:51:b4:8e:8c:6d:8c:ed:7e:9a:61:
                    b8:c2:b9:bc:bc:2b:e1:af:5a:08:ef:a8:0d:ac:ce:
                    35:cb:5b:96:5c:35:66:86:d5:17:62:81:56:16:e8:
                    00:ec:e0:da:5f:f3:20:6b:00:46:b7:27:e9:0b:43:
                    89:a0:5f:de:c8:67:c0:f1:b9:d2:ef:7e:18:5f:4e:
                    45:9e:b4:e6:48:8e:44:d8:c6:2b:10:60:7f:ad:cf:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:4E:7B:A0:7E:5A:D3:75:54:6B:21:73:50:DB:F7:AF:EC:17:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.crl

            X509v3 Authority Key Identifier:
                keyid:CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.184.0/24
                  128.254.128.0/22
                IPv6:
                  2602:80c:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:82:de:08:42:8a:19:02:9a:d4:41:fe:46:74:f0:23:05:c4:
         d1:e4:af:6c:0e:2d:36:57:ab:a8:32:94:76:75:59:fc:ea:78:
         ae:23:f3:9c:17:45:80:b6:00:66:89:2c:dd:f2:6c:76:24:3d:
         b4:11:0a:b6:2d:4c:3e:79:9b:1a:b5:6c:d8:41:df:c5:32:58:
         87:1d:ab:e0:0c:2b:62:6b:6f:55:1d:2a:7d:58:15:08:ff:83:
         b1:e0:4b:36:65:2e:c5:83:fe:a7:42:c1:23:bd:42:a5:b5:55:
         2a:9f:8a:35:23:8b:1c:98:2f:9b:d7:2d:87:b1:ff:1b:56:6a:
         59:b8:bd:c1:41:aa:b1:8b:af:23:84:0f:05:71:fd:bf:04:fb:
         e0:6f:17:9d:0a:ce:9a:8a:25:15:73:75:40:a8:1b:fb:30:b2:
         80:24:c2:50:b5:49:a3:c4:32:fe:e3:e8:b5:ea:48:00:d7:98:
         6f:53:ef:07:a6:5d:e1:88:ee:a5:71:71:6e:e3:08:94:43:93:
         fc:97:bc:1c:83:07:b8:a0:9a:57:93:78:cf:44:f4:80:40:df:
         63:88:e9:42:ee:09:94:04:eb:26:8c:60:1b:9b:4e:14:36:a2:
         ac:23:59:89:41:f0:c0:c4:71:00:d7:37:ac:05:4d:2e:a7:dd:
         c6:45:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:55:35 2025 by rpki-client