Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
File:                     861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa (raw, json)
Hash identifier:          9AFr1f8Y6pL2krMtFDlB/sShwxmUxRlVENgsRuvslhc=
Subject key identifier:   AE:67:67:3D:51:B5:DA:6F:51:AA:60:1B:4A:CE:59:E7:07:86:FF:79
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584A7BB0B7CAF818F3B4D2D8BB80
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     137443
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b7:ca:f8:18:f3:b4:d2:d8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=9e89a9f9-d6a3-49c5-ba5b-a58086cb35b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:eb:36:58:4a:bd:e5:34:da:f6:08:c5:20:
                    84:16:ae:61:7c:d7:2a:83:9a:35:08:f6:3f:6f:8b:
                    60:fd:b6:5e:43:5c:96:5f:8b:55:90:65:4e:fd:f9:
                    1b:75:c6:84:07:9c:e3:6d:71:05:87:07:d6:f3:cb:
                    13:39:e5:e6:35:47:a2:12:33:c9:84:99:a4:9f:1c:
                    c2:87:66:59:09:94:fc:74:3c:d6:7e:0b:bb:a6:15:
                    a4:e3:5f:0a:99:b4:f6:ee:3f:9e:ed:04:77:47:cf:
                    5f:62:a3:91:28:5d:09:66:36:82:36:95:a7:1d:dd:
                    35:c4:42:fa:64:71:48:2b:c6:72:95:51:61:29:85:
                    a6:57:0b:3d:80:8b:ee:2f:07:08:a7:be:ff:8e:04:
                    c0:04:8a:cb:30:67:d4:f4:bf:28:32:5b:e2:3e:73:
                    cc:41:aa:9d:5e:8b:80:d7:f7:d0:4a:b2:d8:22:17:
                    2e:33:be:12:f4:d3:9a:18:a9:38:60:8a:e2:86:2e:
                    c7:f4:c7:7a:fb:a8:e1:34:80:3c:06:8a:72:1c:ae:
                    fd:81:66:78:9b:aa:75:0b:cb:24:37:c6:26:54:e0:
                    e9:3d:5b:82:35:57:7a:54:15:3c:3d:fa:35:d8:7b:
                    93:c1:c4:30:f2:f1:fc:61:9c:4c:39:8d:ba:d2:c5:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:67:3D:51:B5:DA:6F:51:AA:60:1B:4A:CE:59:E7:07:86:FF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:a5:25:2a:c0:dc:32:1f:60:d7:13:1d:e3:c4:6a:cb:d0:
         ec:a9:c2:15:34:e0:6f:bb:41:9a:1c:cb:65:c4:d1:c9:50:ca:
         6e:01:77:ff:af:c3:11:85:48:46:59:29:78:01:b2:11:94:c1:
         b1:bf:5c:e8:49:72:36:5b:da:84:18:80:11:67:5e:4b:93:1b:
         ba:39:66:12:a3:70:39:bd:d7:8e:68:4d:5c:5c:a2:f6:83:97:
         ad:47:4e:65:bf:cc:9d:2c:52:db:b8:ea:89:6a:0c:dc:da:75:
         fe:0f:92:93:9a:1e:bc:36:82:a7:6f:60:73:8a:3a:3b:0d:0d:
         48:ab:ae:ed:7d:8d:34:31:fc:ad:65:b8:88:65:14:3a:ca:3e:
         50:ea:6b:67:22:cd:2f:83:b2:13:cf:00:cf:7f:4d:12:7c:75:
         dc:ea:7e:21:50:c7:23:bb:83:f2:c1:27:ed:ac:84:1a:ae:dd:
         4a:b8:13:c0:f8:95:4d:f1:d8:93:1f:0e:77:f6:3a:9d:29:1d:
         3a:97:c9:3b:fa:79:06:0a:ae:88:bb:77:fc:78:35:e7:af:ff:
         40:a0:07:c8:b5:7c:75:c8:5e:54:c2:f3:05:36:bd:96:61:9c:
         0a:09:66:7a:96:e6:bb:ff:24:c2:7a:24:3f:37:dc:6f:d1:0f:
         6d:3a:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:53 2025 by rpki-client