Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4b151190-7308-34e2-904f-6a126416a463.roa
File:                     4b151190-7308-34e2-904f-6a126416a463.roa (raw, json)
Hash identifier:          H3COs29HnYCE1voeyYxYna22L15Vg03OA3ch8qgK6Z0=
Subject key identifier:   2B:F0:E6:C2:95:52:FB:6A:4D:77:AF:89:E3:67:A2:A7:7E:B2:AE:2F
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584A1283004933BF41E145F87A00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4b151190-7308-34e2-904f-6a126416a463.roa
Signing time:             Tue 03 Jun 2025 20:49:16 +0000
ROA not before:           Tue 03 Jun 2025 20:49:16 +0000
ROA not after:            Mon 01 Sep 2025 20:49:16 +0000
asID:                     29802
IP address blocks:        208.123.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:83:00:49:33:bf:41:e1:45:f8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jun  3 20:49:16 2025 GMT
            Not After : Sep  1 20:49:16 2025 GMT
        Subject: CN=899baa1d-c926-4937-b89a-47780b82e83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:21:fd:33:e4:0b:f9:c9:f2:21:55:17:1c:
                    62:34:6e:9f:e8:06:6c:25:4e:72:f9:9c:ae:f6:94:
                    55:99:5c:0a:49:2f:73:d0:1b:2f:26:27:6e:ed:e0:
                    0b:cd:f6:e4:83:14:f3:0a:71:39:52:95:3b:23:ec:
                    70:1a:f2:1a:b9:90:37:18:8f:5e:5a:3b:5b:cc:4f:
                    77:28:03:a4:07:93:d7:3e:6d:55:6f:aa:88:e7:a4:
                    b8:6c:06:74:bc:5a:4a:bc:63:b3:f6:7b:02:e5:f2:
                    5d:e8:ba:40:04:cf:f0:f2:9f:7a:42:37:28:a4:22:
                    19:18:23:1a:12:7e:f5:0e:2d:55:8c:03:60:23:db:
                    75:75:f4:11:a1:fc:0d:27:51:7a:58:3d:a7:1c:92:
                    8f:30:b2:1f:41:40:a7:61:c6:ea:ce:a9:bb:05:0c:
                    35:da:93:95:03:45:95:82:da:28:9b:ff:9c:d4:b5:
                    7e:f2:04:0d:8b:12:8e:65:42:36:5f:35:e9:81:53:
                    e3:a3:6a:55:e8:86:2c:10:7a:f7:31:02:8b:bd:fa:
                    ba:f1:ab:d8:82:c5:3f:0e:7f:85:84:6d:45:4c:fd:
                    26:e4:6a:c6:4e:c9:f3:72:1f:31:f1:dc:6d:ea:2e:
                    43:e5:33:8b:18:e0:2d:71:3f:6d:69:50:f5:bc:70:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:E6:C2:95:52:FB:6A:4D:77:AF:89:E3:67:A2:A7:7E:B2:AE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4b151190-7308-34e2-904f-6a126416a463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:af:cb:bc:38:f4:56:3c:bb:88:3e:fd:c3:cb:44:27:31:
         b6:69:d9:d8:16:48:82:6f:c2:3c:ae:8c:5c:23:8f:a9:61:0c:
         97:2b:e5:89:dd:5b:8a:7a:ea:4c:60:87:30:f8:08:3c:c6:92:
         4d:3a:cd:15:21:0d:9c:17:2a:6d:70:33:53:e6:b0:46:5f:19:
         68:39:09:ae:e3:b5:34:65:e5:8d:aa:3f:86:37:7d:fc:ac:df:
         05:50:f1:d7:ee:d3:ca:bf:a2:d4:6d:91:80:f1:e6:5d:70:62:
         1c:ec:7d:f1:e4:2b:45:cf:8b:7f:52:2c:68:28:63:89:2e:76:
         bd:18:2e:81:90:da:30:4e:86:05:25:49:63:fc:b8:7f:b1:b3:
         b6:9c:ae:f1:7e:5e:52:f7:e3:99:b4:9d:82:16:b0:c7:72:67:
         58:9c:52:61:f9:1f:f1:84:3d:36:70:77:76:f7:05:67:8e:82:
         ef:29:7c:81:41:60:57:2d:75:aa:10:23:fe:59:a0:7d:df:a6:
         95:73:5d:e7:e6:0d:d1:b2:e7:40:42:55:3e:2c:f6:79:35:9d:
         34:32:9e:37:06:c1:19:5f:0e:fa:9a:e2:38:67:be:a7:c9:e0:
         c0:a6:6d:ef:67:f9:54:e2:33:18:bb:6d:11:76:c2:a3:b9:23:
         a2:06:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:51:49 2025 by rpki-client