Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
File:                     fed315c7-e9df-35c1-b17c-1e75b08b0642.roa (raw, json)
Hash identifier:          k33TSjRLfKhybMogPwrhFsH0TZzySp3vSrsL75a+Yos=
Subject key identifier:   1C:C1:D3:B0:55:0E:8C:EC:2C:AE:02:B5:A8:13:B5:2C:67:C0:AB:38
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584A2D858AA8FEF28B4BEAAB0A80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     399471
IP address blocks:        163.123.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8a:a8:fe:f2:8b:4b:ea:ab:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=01b32787-bb65-4144-b049-4e2a61f7d41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:fc:47:8d:d6:fe:3d:14:ce:9f:c4:54:d4:
                    a3:da:74:8e:b7:88:c9:bb:79:0a:91:22:0d:ed:d0:
                    f9:2c:ea:f0:61:d3:59:17:9f:6d:0e:4a:cc:88:e3:
                    27:6e:7e:3d:bc:48:6e:09:00:e1:7e:0c:09:5a:7f:
                    3e:5c:4e:af:37:f2:23:f0:fa:7f:5a:2d:77:08:9e:
                    fa:b5:fd:14:d2:09:a4:0a:7f:c4:e6:e1:4e:1e:b6:
                    ac:20:89:1b:3a:fe:eb:97:e1:23:49:46:99:b1:92:
                    e5:fb:af:a0:46:ac:e9:72:de:56:84:e5:d1:40:c8:
                    e6:23:2d:07:ad:06:ba:13:e7:d3:97:1c:6f:5d:f9:
                    d4:70:14:29:79:4b:61:04:c5:72:14:30:30:9d:83:
                    f6:00:78:96:83:ba:9a:e5:70:64:41:71:80:ad:95:
                    5d:e3:51:5d:b4:51:b9:38:32:f1:8d:5e:a5:10:60:
                    be:09:c1:5a:e8:ae:fe:c0:57:68:b4:fd:b7:ad:cc:
                    fd:5e:0a:95:f3:55:20:f3:d9:42:a1:9d:fa:4f:89:
                    a0:75:d5:e2:49:63:bb:d7:d4:f8:eb:d1:08:3a:83:
                    27:a1:f3:2b:6c:36:70:ba:10:2a:b9:a2:22:16:4f:
                    95:2d:e9:59:95:8c:93:fa:b0:13:1b:3e:40:e0:81:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:D3:B0:55:0E:8C:EC:2C:AE:02:B5:A8:13:B5:2C:67:C0:AB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:58:f4:50:86:39:a3:c6:fa:9b:1e:87:5f:99:d9:dd:03:
         64:b2:9d:0f:70:9a:48:a8:28:b0:fc:16:f2:21:c9:9e:94:fa:
         b1:ed:e9:80:c3:5f:69:17:30:94:30:fa:3d:55:c4:52:a0:2a:
         3c:8a:a1:e9:37:09:4e:5e:cc:30:7d:af:5d:55:0d:e3:93:35:
         b0:81:26:51:e8:50:18:b5:a8:59:3e:65:1b:52:e1:b5:ae:eb:
         72:ce:26:8f:e7:1a:31:f6:60:5c:c9:a5:e4:cd:3c:6d:77:6e:
         b1:91:ce:9b:27:11:c6:8e:e4:35:17:da:94:b4:42:8d:97:67:
         8d:95:0c:a4:f2:0f:b5:1c:08:ae:8c:5f:d9:d7:17:fb:29:3a:
         31:94:ff:d4:04:f7:57:97:b5:4a:0a:4d:1a:11:b2:c9:d8:5d:
         8a:46:b5:d0:2b:07:8f:6d:7a:14:91:42:5b:43:ba:d3:59:8b:
         f8:8c:d5:bd:72:fd:22:ae:6c:6d:6d:30:a9:ca:f3:d4:0e:46:
         96:2d:9c:4b:63:2f:92:ab:6b:e2:1c:fb:54:a4:0b:52:1b:d7:
         d1:59:95:72:05:89:69:b7:a9:2a:94:b0:e7:d6:54:0f:7b:9e:
         eb:76:57:f4:6a:a6:24:91:08:1e:89:68:17:57:27:ce:ce:b8:
         4b:e5:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:56:09 2025 by rpki-client