Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/bcc008d5-a982-389c-9549-dd2b0e4dc60d.roa
File:                     bcc008d5-a982-389c-9549-dd2b0e4dc60d.roa (raw, json)
Hash identifier:          BM3hIiavWiw1p0hBouHngEjDCPIZd9idczKY2iaCrjc=
Subject key identifier:   22:F7:02:C5:6B:2F:FD:FE:A0:1E:CE:77:D4:59:22:E7:F2:9C:CA:34
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584A256E6F07C15174287546F4E0
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/bcc008d5-a982-389c-9549-dd2b0e4dc60d.roa
Signing time:             Tue 10 Jun 2025 15:28:11 +0000
ROA not before:           Tue 10 Jun 2025 15:28:11 +0000
ROA not after:            Mon 08 Sep 2025 15:28:11 +0000
asID:                     31898
IP address blocks:        143.223.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:6e:6f:07:c1:51:74:28:75:46:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jun 10 15:28:11 2025 GMT
            Not After : Sep  8 15:28:11 2025 GMT
        Subject: CN=f4ace572-9fa6-46ab-9c6b-de4bc68cf0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:55:49:53:38:6f:6b:a9:53:42:d1:00:e8:
                    28:5e:25:3c:e7:c6:da:b6:90:cb:df:c2:5d:3b:a8:
                    ac:b9:af:ee:94:ca:f1:59:cc:7e:9c:dc:f4:47:d1:
                    f4:63:32:72:34:61:5f:b3:b6:b9:d2:02:62:00:f7:
                    30:98:b2:6a:fd:0c:ae:7c:eb:2d:14:a2:49:c5:ea:
                    3a:12:46:b3:57:69:8c:4d:13:f8:7d:27:54:51:ce:
                    03:ee:c5:0e:37:5c:2a:b4:0b:44:e4:66:55:8a:4d:
                    15:cc:14:ce:f6:58:8b:2a:a0:27:9e:6c:28:98:2a:
                    38:fa:77:f5:71:f8:9b:b4:20:0e:ff:6c:ef:ff:c2:
                    ff:88:70:ba:a2:9a:be:40:24:87:8b:90:23:ce:6c:
                    95:70:d5:d9:89:1a:fa:dc:2b:76:d5:8c:c7:2d:a3:
                    a1:ce:80:4b:7a:b6:5b:24:fb:9e:73:93:a6:b5:ef:
                    90:d2:6a:31:d6:b7:53:d7:bc:d2:08:61:aa:46:c6:
                    99:53:34:03:26:f1:eb:a9:ed:da:ba:b5:b4:fb:3e:
                    66:d1:bb:33:8c:11:40:2c:40:c4:d1:06:70:bb:f1:
                    fe:e9:3a:75:79:85:65:93:d1:bb:28:7b:6f:c4:83:
                    8f:0d:09:2b:51:a3:43:e3:4c:ef:11:3f:99:53:6b:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:02:C5:6B:2F:FD:FE:A0:1E:CE:77:D4:59:22:E7:F2:9C:CA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/bcc008d5-a982-389c-9549-dd2b0e4dc60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:a8:9f:c2:63:0a:73:a2:c9:e3:84:16:bf:4e:e2:0e:d2:
         65:f1:ee:0b:6f:e4:16:69:a2:55:b0:0e:1a:d3:7a:07:aa:2c:
         29:a4:7b:a4:d0:2f:1b:7f:ae:9e:65:30:f0:08:ba:b2:f4:15:
         c9:96:e4:8a:c0:73:e5:63:37:5b:e4:51:e4:04:f4:e7:bb:02:
         4c:b1:ff:9d:9f:20:46:7e:e0:91:0c:6d:7a:5a:a4:c6:fa:d6:
         38:f8:96:6f:10:9b:0c:15:11:e8:23:50:9e:80:97:15:81:11:
         c7:b3:ce:1f:e8:ad:19:d8:40:c7:e7:9e:50:5b:c0:3d:0f:e2:
         f8:83:f4:c1:a8:6a:de:6b:ce:85:7b:9d:a3:54:cd:f5:3b:94:
         55:96:38:8d:db:c7:20:d0:5a:cd:6b:f5:80:f7:43:a3:3a:b7:
         1e:69:48:55:0f:9b:84:d0:cd:98:ae:e7:2b:ef:41:8e:1e:4a:
         18:c6:08:fd:ea:75:2b:80:f2:ba:3b:54:13:88:e5:3e:f8:6e:
         ca:41:41:88:8b:62:32:70:7e:fb:85:b0:c8:62:ba:fe:cf:98:
         76:87:b6:6b:63:67:a2:c0:13:07:82:6c:25:b3:a0:22:8c:fb:
         37:ae:51:44:46:1b:5f:6e:e3:b3:31:d5:2f:69:bd:40:5d:27:
         1f:9a:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:39 2025 by rpki-client