Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/5bb0756c-2988-3c65-8d58-8b05f578dc77.roa
File:                     5bb0756c-2988-3c65-8d58-8b05f578dc77.roa (raw, json)
Hash identifier:          P3wAk5JVdXmy0ykfSiRgRt4i1ue42pa+0doLAwilBxk=
Subject key identifier:   1A:FA:88:4B:DB:98:45:83:33:B0:F6:9A:B8:7D:BD:43:DB:D0:6F:D1
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584A7BB0B7A481492ACF4E527000
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/5bb0756c-2988-3c65-8d58-8b05f578dc77.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     18013
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b7:a4:81:49:2a:cf:4e:52:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=09b70eec-4e1e-4cc7-81cd-1abdabfbf95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:27:25:61:a7:4c:30:4a:0e:55:75:cb:59:9e:
                    22:d2:ce:aa:02:01:3b:bc:96:0e:1c:62:04:13:48:
                    76:cc:04:ac:82:97:7f:8c:11:a2:d2:3e:62:0f:91:
                    3c:ec:a8:6b:d4:11:dc:9f:44:0d:75:7b:65:20:34:
                    b5:d2:54:31:7d:29:c1:c6:a2:9d:0f:e5:72:28:7e:
                    7e:e9:78:e5:7e:63:ec:a6:04:7e:2d:dc:86:aa:5e:
                    c8:76:d6:90:e6:91:26:62:f6:47:be:63:dd:8c:d1:
                    4a:08:f7:68:54:43:81:50:cb:09:71:d7:16:bf:23:
                    56:1a:b1:5c:91:9c:02:14:bb:95:14:67:37:5e:63:
                    6d:16:a2:c2:af:c0:19:7a:d7:07:70:ba:db:44:e6:
                    f4:84:fb:49:97:fb:42:6d:d8:f3:dc:01:01:4b:cf:
                    08:6e:09:d1:ce:3e:10:06:4c:75:09:ae:d1:db:2c:
                    3d:82:f1:1a:a4:cc:25:30:5a:18:d5:90:d6:2c:83:
                    84:b8:00:ff:49:68:22:14:68:c5:d6:66:92:bc:b1:
                    21:0a:30:aa:1b:17:5d:bb:6c:09:88:40:2a:45:97:
                    d4:83:ef:73:ba:89:e3:ad:e9:38:4f:9d:13:12:cf:
                    69:50:5d:ee:13:5f:0d:58:fc:92:9e:0d:96:3f:81:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FA:88:4B:DB:98:45:83:33:B0:F6:9A:B8:7D:BD:43:DB:D0:6F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/5bb0756c-2988-3c65-8d58-8b05f578dc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:ba:0e:00:b7:1d:81:ad:93:48:a4:d6:24:f8:4d:32:ec:
         9b:60:9c:55:ac:46:a1:54:de:44:a4:d9:e1:9f:af:54:78:05:
         b0:ac:4e:ef:d1:13:79:0e:c3:51:bb:50:46:34:60:83:09:90:
         da:9f:f6:61:a9:67:cf:9d:67:b4:96:f2:51:68:ea:fe:8f:93:
         20:68:65:f5:51:90:b6:2a:70:7c:d6:cd:c1:fc:da:a5:dd:5b:
         9c:71:dc:07:73:f6:c0:20:b6:e5:37:2e:6f:6e:f1:a6:ab:a5:
         dd:14:51:fb:fe:d4:ca:d9:62:64:e7:80:f5:6b:c7:09:80:79:
         77:50:57:ea:37:82:e8:f7:31:88:4c:9f:fb:a4:c7:2c:dd:ba:
         45:9f:93:55:61:50:e4:e8:e2:1b:ef:d3:76:6f:d2:04:d7:f8:
         13:03:22:56:31:81:54:b5:40:72:af:12:64:13:50:a2:6d:20:
         a0:de:52:89:4f:56:9f:c5:7b:06:ca:3c:d3:a4:1a:ad:77:89:
         91:c5:ad:4b:f5:2a:85:f0:ba:91:5a:df:e7:ea:9c:b3:11:d4:
         78:59:1b:a1:d4:29:a7:e2:a6:38:87:f4:1f:ef:d4:f1:1c:bf:
         c9:51:ad:e5:d1:04:37:c3:e7:fa:68:4a:4d:4e:fe:52:ed:e6:
         fa:d0:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:47 2025 by rpki-client