Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b02ccec-3ed8-372e-b2dc-588730de2a67.roa
File:                     8b02ccec-3ed8-372e-b2dc-588730de2a67.roa (raw, json)
Hash identifier:          WVOjmmPE/R+bn8CdRnGKvPUWF3E7ccLCaUB5UpNmSDk=
Subject key identifier:   0A:F4:59:56:2F:DB:CC:79:1C:EF:B8:9E:E6:A8:53:A5:5B:18:1D:F4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584ABBE6363E263B6EF8689B0580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b02ccec-3ed8-372e-b2dc-588730de2a67.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     23473
IP address blocks:        173.230.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:36:3e:26:3b:6e:f8:68:9b:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=0b9f6909-5cfb-4d8b-afcd-f8ee03b4b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:99:66:fb:02:67:20:d1:3a:68:cf:30:f9:
                    8f:e6:95:15:d2:39:c6:93:12:b8:67:f8:85:a9:36:
                    0f:44:ea:c0:5b:b6:d7:34:7b:01:90:0e:62:3b:1d:
                    df:4d:db:d0:21:93:16:6f:91:08:a1:0c:77:d1:ca:
                    c8:2d:23:e4:37:b2:f9:5e:31:2f:a7:48:b7:52:4f:
                    da:d3:76:19:86:8a:1a:8e:6d:47:c7:a3:3d:5f:42:
                    96:63:7b:b2:55:9e:ef:1e:da:73:f2:f7:88:85:c1:
                    b0:36:06:98:2f:c9:75:3a:3e:81:e2:01:eb:3f:91:
                    51:23:97:f1:06:05:d0:5d:d0:86:22:75:61:9d:28:
                    bd:91:76:e3:c2:c0:fd:56:50:ef:3f:4c:d0:93:d4:
                    54:05:0b:63:6b:40:a5:09:4f:f8:96:a5:f4:78:ac:
                    c8:05:5a:82:2b:26:88:2e:05:36:82:5e:82:68:ca:
                    12:57:18:ad:fb:91:4c:ed:55:51:f6:ba:17:6f:09:
                    5c:93:de:6e:ba:95:6f:77:ea:21:38:08:b4:71:27:
                    63:cf:be:66:3c:c7:10:70:ca:f9:26:67:18:53:17:
                    e6:e3:b4:2f:c7:c0:b4:23:42:a5:e9:86:3a:44:51:
                    3e:9c:ff:c5:17:ee:02:fb:06:b9:71:66:18:d4:a6:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F4:59:56:2F:DB:CC:79:1C:EF:B8:9E:E6:A8:53:A5:5B:18:1D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b02ccec-3ed8-372e-b2dc-588730de2a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:dc:6c:8e:60:db:f0:01:7f:ea:7a:52:37:81:23:27:b5:
         f5:86:f6:67:b8:97:51:6f:ac:fe:4c:63:3b:c3:8a:83:56:a2:
         5c:8d:d9:c2:87:13:3a:c2:e8:3f:46:ab:59:56:04:6f:01:54:
         04:b4:57:bc:51:09:db:1f:8c:7a:70:43:30:13:52:93:a9:33:
         66:6c:af:fa:8d:3e:de:04:b5:30:48:a0:8c:57:cd:f2:a1:ea:
         7f:e0:6f:38:bb:ea:3b:85:94:dc:36:3c:02:73:a8:96:ab:1d:
         02:91:78:1d:0a:ec:98:6f:9a:c9:c9:c8:c1:46:8e:55:54:0f:
         35:09:5d:22:a1:7e:6e:a3:33:7c:07:8b:af:1d:91:ba:55:54:
         94:ff:83:28:a8:d8:c6:a0:65:f1:3c:6b:c5:5c:dd:c5:40:dc:
         9b:c8:80:7e:72:e7:25:d9:15:6e:f4:57:4f:93:ea:80:1d:2f:
         54:3e:36:d8:d7:db:dc:0f:e0:f4:45:1c:41:f7:bd:bb:c5:7b:
         ce:7e:cf:58:f4:b8:22:c5:39:bc:99:f6:e3:4f:53:73:5d:99:
         e7:41:09:2c:22:2f:48:bf:46:a5:19:1a:f0:dc:20:51:d0:c3:
         dd:3d:b1:77:b1:82:f7:51:c9:4e:a6:c8:92:74:5b:d9:e1:29:
         62:fa:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:29 2025 by rpki-client