Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa
File:                     3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa (raw, json)
Hash identifier:          qtU3DKW1FbCPOd2PXwjGRrXRJkdXJFxu20ZIVTTrKew=
Subject key identifier:   70:14:FC:29:33:9A:F6:C3:56:F0:1B:DB:F1:08:29:6B:C7:2A:1B:D8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA5852F70D686A9938E80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        24.244.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a5:85:2f:70:d6:86:a9:93:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f8a6af75-ca76-45f2-82ec-060a14972d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:87:84:7f:fe:a0:64:85:d5:f4:e6:0b:47:
                    95:fc:54:08:5f:3b:37:47:23:68:6f:8f:83:0f:39:
                    44:49:57:5c:aa:79:26:ba:70:7b:62:77:f0:7e:ca:
                    26:a9:f1:dd:fa:02:ca:93:7e:31:6e:33:e1:8e:d9:
                    76:b6:56:39:41:88:37:00:37:9e:1f:dd:5c:9f:2d:
                    d1:14:9d:62:66:8a:13:94:98:97:3f:c4:36:ed:16:
                    23:89:03:6d:aa:20:ba:41:99:7a:85:d7:0d:e6:da:
                    48:4a:53:0e:94:7d:22:59:9c:50:6d:63:1e:06:3e:
                    48:47:2b:98:11:fa:e0:25:95:6c:03:96:c8:dc:05:
                    c8:33:42:7b:2c:68:1a:15:8a:77:1c:f9:32:af:2b:
                    46:35:8d:cb:d7:51:66:64:b6:92:5a:2f:79:9d:94:
                    fe:f4:d3:dd:79:3f:8d:45:29:13:d1:0a:24:45:4b:
                    f9:1d:53:30:10:47:81:d3:10:3f:c8:52:84:89:72:
                    de:64:43:06:66:0d:bf:48:a9:c1:95:fa:8a:90:4c:
                    bd:5c:76:28:4d:10:2a:35:91:16:59:f5:29:44:dd:
                    8b:33:ce:a4:6c:27:52:ae:3a:d9:52:a5:29:af:59:
                    54:97:a1:be:f2:4a:ab:db:47:1c:e0:d8:1d:5b:52:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:14:FC:29:33:9A:F6:C3:56:F0:1B:DB:F1:08:29:6B:C7:2A:1B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:51:7c:b2:bb:5c:34:6c:b1:02:30:31:7b:2e:16:10:12:89:
         cb:5c:c5:d3:a7:4a:af:09:63:35:01:2c:c7:6e:ae:b7:6f:c8:
         47:72:c0:d0:a5:1a:0a:95:79:4e:10:0d:1e:0d:a7:dd:55:82:
         7f:16:9c:1d:4f:e6:b2:20:83:4e:bc:eb:59:60:fe:2b:3f:4a:
         01:45:53:8d:7b:1d:45:cc:54:65:a8:87:43:2f:05:c6:23:20:
         13:0a:45:5a:51:fe:bf:df:c8:ea:7f:d5:cc:3a:a7:af:99:6d:
         7b:12:10:6f:e5:b4:55:fe:37:c8:a8:4b:9b:3e:ed:b2:dc:61:
         44:a1:6f:4d:9a:11:31:ee:7e:43:21:43:b5:89:ac:fd:66:cd:
         66:13:98:2b:04:d3:9b:97:c1:88:fb:fe:1a:f4:d8:91:fb:4d:
         4e:34:4c:7f:9d:1f:e3:c8:a8:62:96:1a:bc:ff:b8:79:fa:1c:
         19:1a:4a:e6:a4:cd:71:e8:39:f0:1a:4e:0c:26:98:65:6d:dd:
         2a:5f:fe:96:d2:08:8c:9b:fd:9b:cb:8e:7f:cd:62:71:5a:d4:
         bf:56:fd:54:23:0e:0c:dd:bd:e8:38:9c:c0:0f:28:8b:0a:8c:
         1b:98:6f:16:6b:5e:c5:a4:95:64:75:97:79:52:16:e9:7e:96:
         b9:fb:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:33 2025 by rpki-client