Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa
File:                     7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa (raw, json)
Hash identifier:          NeNMW9DF7uoHeLItLIEIIGR1Hbu46ZsiPSa/O/Sy3Eg=
Subject key identifier:   F9:4A:57:F7:3C:2B:08:34:51:9D:D8:AE:50:14:13:26:DE:D6:AE:F0
Certificate issuer:       /CN=1aea854c-b5a0-4772-a924-0abe91b36c2c
Certificate serial:       010D0C9F4328584A8576029E677C4B7AAC81BD00
Authority key identifier: DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     17387
IP address blocks:        23.167.72.0/24 maxlen: 24
                          2602:fa46::/36 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:02:9e:67:7c:4b:7a:ac:81:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aea854c-b5a0-4772-a924-0abe91b36c2c
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=5b0beab0-88fe-4b90-b5f5-ca0173fdb87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:48:4d:20:26:2e:a0:e0:09:bb:86:bd:47:
                    d4:c9:45:f9:9f:0a:27:3a:c2:b0:11:f6:bd:f9:7f:
                    ba:ea:ee:79:ca:11:34:7e:a8:57:87:d6:7f:90:39:
                    81:d8:4a:7c:af:63:d1:0d:2a:c7:31:2f:48:0b:51:
                    29:cc:cf:e6:ed:d5:6c:f2:9c:15:e9:b6:fa:17:11:
                    51:f3:3c:13:23:15:67:73:27:07:c1:dd:b0:67:f0:
                    5e:aa:d5:b2:4a:12:90:dc:3c:0f:3c:67:71:96:d7:
                    56:ef:78:c8:43:0f:d7:58:56:4b:c2:1a:f6:fa:8a:
                    8a:77:47:a3:53:a0:97:4f:a7:60:0a:14:b7:fa:d6:
                    6c:f0:34:27:8e:14:d2:4b:33:f0:0d:8b:df:cd:8d:
                    d6:8a:84:fe:57:5a:96:cf:26:bd:41:20:d1:eb:62:
                    69:60:15:b6:6b:0c:53:90:a4:71:38:8f:57:30:b1:
                    33:fe:e3:df:7a:5b:cb:52:4e:83:93:1a:58:4c:22:
                    1d:60:86:cc:88:8a:78:b9:3a:75:ed:bb:97:06:d3:
                    47:5a:df:01:6f:30:50:33:7e:17:90:91:08:57:96:
                    6c:34:d7:da:40:c6:0c:41:6d:91:3a:97:13:18:7a:
                    5f:5d:37:6b:48:c5:c1:d4:7a:29:35:01:bc:31:40:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:57:F7:3C:2B:08:34:51:9D:D8:AE:50:14:13:26:DE:D6:AE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl

            X509v3 Authority Key Identifier:
                keyid:DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.72.0/24
                IPv6:
                  2602:fa46::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:10:ac:35:2f:3d:d7:a1:68:ba:df:84:0d:ed:96:bb:ba:28:
         e4:9d:3b:f6:c5:d6:e7:49:d0:be:4f:4e:8d:1e:f8:5b:11:64:
         90:8d:05:70:fb:d5:74:2d:2c:52:fe:16:f2:6c:ee:f2:08:ef:
         dd:a7:e2:46:93:68:96:61:86:80:e2:b2:39:ee:c3:b2:c2:cd:
         58:25:7d:23:ae:fb:db:23:bd:24:d5:ee:6e:83:63:b0:ac:23:
         41:9e:59:33:b9:3d:4e:be:25:5b:42:dc:54:ff:15:17:c8:02:
         66:d9:ed:c8:94:3d:25:db:4f:02:48:54:d6:03:a8:22:47:c6:
         9f:74:38:c3:b6:1e:d0:9d:e1:4e:57:e6:55:85:2c:7d:73:fb:
         7f:c9:a0:0e:35:77:78:8e:b7:44:3d:86:50:04:cd:25:46:a7:
         c3:fc:86:4b:22:7c:97:91:0e:5d:61:60:c0:4e:10:96:dc:b9:
         55:66:eb:d2:26:ad:45:cc:48:e7:d2:24:4f:87:04:92:07:31:
         d7:6d:1c:c7:7f:34:02:fb:34:45:2c:85:0f:86:e9:db:5a:6a:
         20:f4:19:97:48:2d:a0:19:2c:3b:14:83:ec:0c:5e:0a:e2:58:
         60:3a:26:1c:f8:2b:b3:d3:b2:36:7f:28:3e:02:18:6e:7e:ef:
         f6:30:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:37 2025 by rpki-client