Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa
File:                     1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa (raw, json)
Hash identifier:          ZKEeWfBZuXx//ubgLVXcGvjZkleEk3Waoa4AO7VkMv4=
Subject key identifier:   9A:80:AC:55:16:B5:31:32:48:0D:EA:2B:D5:9D:8F:46:36:64:87:13
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F43285849E7BA835F92B5F6267AC29E80
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     398646
IP address blocks:        23.130.96.0/23 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          162.253.212.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          209.160.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:5f:92:b5:f6:26:7a:c2:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=861d945b-d722-46e4-942c-85998982c674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:1a:bb:a7:4f:dd:20:ee:f8:82:ef:f6:2a:
                    9e:02:d1:06:18:e4:ff:00:bc:38:b1:19:46:66:f1:
                    68:a4:ca:76:69:33:e3:e9:75:25:a9:25:2f:0d:c0:
                    ab:c8:df:4b:05:63:38:30:8e:50:99:2f:79:f5:ea:
                    aa:3c:88:ef:b4:07:ee:5f:37:e4:6d:1f:f7:ba:48:
                    0f:87:c5:b7:b1:40:99:e7:37:75:6c:74:8b:16:a5:
                    b4:2d:d3:93:ef:14:f7:10:f4:6c:43:e7:3d:6f:0d:
                    10:3d:7f:5d:e5:44:fb:2c:33:6d:aa:12:ec:b9:e7:
                    b8:2c:9e:e6:21:bd:9a:c1:ea:54:5f:4e:6a:0c:6a:
                    02:0e:34:10:9e:5f:64:ba:a0:ed:a1:68:23:6b:bd:
                    22:ad:21:f1:8e:f2:0f:e9:4e:86:8a:e2:3e:16:8c:
                    81:5b:6c:7d:0f:0d:b3:1a:13:f5:d4:4a:92:fb:29:
                    02:86:05:d5:ef:45:50:02:3d:ad:0e:78:26:d0:95:
                    bf:5b:20:9b:b7:ea:fe:d6:71:7a:e7:5e:cc:8b:2f:
                    10:7c:84:7d:18:39:4e:99:82:69:18:f2:84:7f:c7:
                    b3:d8:64:d8:cd:14:ae:c2:0c:a5:a7:10:21:d9:e6:
                    0b:16:8d:35:26:b7:56:8e:09:93:38:3b:61:96:ec:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:AC:55:16:B5:31:32:48:0D:EA:2B:D5:9D:8F:46:36:64:87:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:aa:4c:0f:33:f4:33:8f:9a:2f:26:a0:e5:73:c6:47:31:
         01:ee:01:df:5f:87:06:32:9d:c4:6e:9b:5d:be:e2:85:10:5b:
         5d:d4:c0:66:5a:5a:93:c6:dc:bb:f4:e7:ad:77:b9:61:d6:3e:
         c6:2d:1e:36:76:e2:2b:54:72:3d:b2:ff:1f:58:12:6f:cc:26:
         50:ea:b1:61:ba:d7:0d:42:df:01:ff:52:7b:76:c9:e8:1c:5e:
         09:e6:8c:28:1c:52:b7:80:47:c6:b4:b5:01:82:2f:52:28:23:
         d2:ba:16:e6:c7:50:0f:9c:2c:b8:28:4c:c2:0a:72:79:ab:7c:
         a3:4f:28:0b:eb:d2:44:74:57:97:62:de:af:f8:51:08:77:e1:
         74:98:9b:fb:c2:f8:bf:f6:fe:3d:d9:f6:b1:b0:25:be:81:9a:
         18:1f:09:38:02:83:f0:ca:3b:3e:c4:5e:8f:97:76:09:2b:23:
         3e:86:5f:9e:33:cd:04:8e:10:9d:d1:da:6d:94:fc:ba:f1:a3:
         4d:20:55:e9:7c:42:bc:37:13:a6:ca:47:e0:30:1d:dc:d0:fb:
         d7:97:b1:b9:93:ce:f1:e3:a8:3b:7f:9b:d4:5c:b6:76:ae:0b:
         e0:be:cb:97:8d:60:41:29:7f:d1:50:a4:a6:50:6c:b3:1a:cb:
         53:dd:87:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:56 2025 by rpki-client