Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/be4e27a4-68d9-3512-b3d8-871a5da67a78.roa
File:                     be4e27a4-68d9-3512-b3d8-871a5da67a78.roa (raw, json)
Hash identifier:          3Y+ss3B/oQ5Q1s+BdyISzkgSwp5QwUzMqinM030iNrQ=
Subject key identifier:   77:78:E8:AE:A9:AF:DE:E6:70:84:26:4B:29:65:27:D4:03:90:EB:EE
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F4328584AC2E0E84577D2FAECD6EE4780
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/be4e27a4-68d9-3512-b3d8-871a5da67a78.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     22697
IP address blocks:        141.193.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e8:45:77:d2:fa:ec:d6:ee:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=ae28a51b-3699-47bd-8454-cb019430fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:af:ed:62:81:22:58:b6:fb:d2:b3:63:42:
                    06:be:44:93:71:f7:f2:67:a2:78:8c:2e:e2:f4:8a:
                    f0:ed:fe:cc:5c:7f:4f:b0:c5:17:4e:24:48:8e:77:
                    a4:a1:28:13:ba:c9:85:04:20:c8:c9:ed:ee:20:44:
                    35:6b:24:c7:dd:10:1d:97:d9:a3:72:55:64:36:2c:
                    13:19:25:fa:87:6f:b2:45:ef:10:cd:c2:11:19:e1:
                    fd:ac:6d:fb:c6:fa:41:15:45:72:67:5f:a2:94:22:
                    bf:67:05:6b:de:aa:de:cb:53:71:95:3c:dc:cd:bd:
                    a6:0b:5a:a0:6f:23:a4:c1:d0:b3:56:78:13:be:b4:
                    c3:f7:93:af:83:46:25:7e:8e:62:54:f1:f3:cb:c2:
                    c0:12:d8:c1:4e:c9:1a:d0:8f:29:c0:b0:b7:bd:54:
                    42:bb:33:67:c5:c8:20:21:83:fa:be:4a:b7:02:69:
                    70:13:4a:d9:09:6a:31:40:36:68:9c:a9:13:bc:bc:
                    29:3c:2a:ad:00:19:10:9e:75:d0:e0:03:c2:30:59:
                    7b:84:cd:12:74:ef:c1:ae:48:bd:4b:56:99:af:c6:
                    76:ae:76:4c:b6:b7:33:7f:94:f5:08:d4:85:f4:20:
                    f4:68:b9:37:f4:e9:19:55:f8:f5:98:fc:ba:64:1f:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:78:E8:AE:A9:AF:DE:E6:70:84:26:4B:29:65:27:D4:03:90:EB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/be4e27a4-68d9-3512-b3d8-871a5da67a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:cb:56:c3:ef:ff:67:42:42:aa:51:84:82:65:35:95:3e:
         f2:cb:4c:bd:0f:4c:8a:5e:dd:8a:4f:af:2e:6b:73:60:95:5f:
         8c:50:67:67:5b:71:72:6d:8b:d2:e8:a0:06:b1:a1:f1:b4:ad:
         40:d4:6b:87:cb:bd:9b:b6:6f:7a:e5:30:c8:e3:56:72:a7:e5:
         43:a6:b4:8f:1f:bb:cc:ae:3a:78:48:96:58:1e:4f:5d:dc:40:
         8e:d7:92:0f:30:8c:5b:da:4b:59:4c:45:c8:e5:20:7e:f5:10:
         34:85:7e:38:c1:26:75:ce:09:90:10:7f:39:c5:81:8b:1f:3a:
         3d:35:10:bd:bb:fc:ec:1e:f6:15:fd:5d:89:6b:97:97:ec:d9:
         73:94:ed:22:00:12:5a:67:8a:85:bf:dc:05:fb:7a:3c:4f:ab:
         a0:24:44:a4:da:8f:09:d5:d4:a4:58:e0:33:df:5d:54:39:94:
         82:e5:1d:26:18:4d:d2:9e:dd:15:c9:2f:77:43:dd:c0:4b:0c:
         56:2f:88:44:bc:9d:ea:d6:d3:4f:50:b2:f9:7b:8a:28:36:5a:
         70:dc:4c:24:07:a0:4f:6d:2c:b7:b6:d2:48:66:f4:cc:72:20:
         33:57:b3:cc:71:ef:08:bc:69:8e:86:a9:ff:9a:7a:e9:11:28:
         2d:9d:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:49 2025 by rpki-client