Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c7807d34-874d-3153-ae5f-12515b5003a7.roa
File:                     c7807d34-874d-3153-ae5f-12515b5003a7.roa (raw, json)
Hash identifier:          D4IbINHfbrWxW8OfP6IBotzCr+Um7fUCcgbRmxKXcPU=
Subject key identifier:   B6:25:AE:95:3D:69:C7:69:54:09:D8:E3:47:DC:22:15:78:5B:DD:B7
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849D85FAC4D1EEB69FA128B2180
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c7807d34-874d-3153-ae5f-12515b5003a7.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        143.223.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ac:4d:1e:eb:69:fa:12:8b:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3fcda530-1736-4389-b255-83b0b02e02d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:60:dd:9a:09:25:1c:2b:32:b4:28:b0:20:
                    e4:44:aa:c4:7e:54:77:11:73:8b:c6:a4:fe:8a:34:
                    59:ba:37:41:24:07:af:d3:3b:df:0b:e7:3a:f0:ba:
                    0a:a1:3b:4d:c0:92:99:94:f0:9a:86:5c:b1:24:ae:
                    f7:30:dd:a2:a2:ec:31:2c:e8:cd:88:43:81:4f:de:
                    06:50:ea:18:78:c4:48:54:c8:6d:e0:c3:cb:c0:77:
                    a2:3b:25:97:b4:de:c1:f8:56:7d:26:57:17:1e:1a:
                    0c:67:39:21:e3:29:71:3b:89:4f:99:f5:e9:02:fc:
                    9d:7e:e6:23:5e:26:0e:06:d6:85:6d:74:5f:e4:fa:
                    ea:8e:de:69:99:ba:f0:79:3c:a2:f1:dc:d2:b3:bc:
                    01:b3:ed:8e:83:4c:f5:2c:84:9d:3a:cd:94:0d:cf:
                    56:d8:b1:a6:5b:ec:7f:ea:a0:28:67:16:68:5a:b9:
                    2a:2a:e8:fd:1d:c9:c6:23:21:ac:a4:5d:fe:34:a4:
                    ba:b5:43:c2:04:64:ff:43:ec:90:71:55:80:8f:f8:
                    01:73:e4:78:2e:1f:e5:0a:cc:6e:c9:ae:78:b7:88:
                    39:95:61:44:9d:30:c8:2a:86:ce:76:13:ec:12:3e:
                    bc:81:9f:4d:0e:19:27:5a:4a:b6:8d:29:50:34:35:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:25:AE:95:3D:69:C7:69:54:09:D8:E3:47:DC:22:15:78:5B:DD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c7807d34-874d-3153-ae5f-12515b5003a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:b0:6e:b3:a3:75:54:7c:93:07:06:c9:38:49:ef:b5:fc:
         00:54:53:b4:ae:18:2a:bd:7d:dc:45:11:1b:5f:b3:0a:56:07:
         30:26:03:69:47:2a:54:38:25:ee:23:a4:9b:b2:87:77:22:72:
         4e:26:a3:a4:13:59:bb:c9:e8:67:08:dc:bd:81:c4:b0:e8:9a:
         dc:bb:2c:98:eb:09:ee:6c:17:5b:78:f9:27:21:93:4b:2a:48:
         8f:5b:6b:fb:84:8e:ae:08:30:2a:c6:1b:a1:ca:71:56:6b:5e:
         82:64:31:dd:08:81:f2:b5:33:bc:e2:75:d5:31:a7:91:ef:b6:
         97:7d:06:dd:36:9b:5c:41:54:49:0f:7f:42:9b:64:9e:c2:0e:
         e7:e8:51:c9:28:71:2f:7c:b1:d4:75:02:1b:93:ce:06:ec:e8:
         3c:a3:51:da:f7:da:2b:ef:9f:37:e1:62:9c:c0:b5:bb:58:f6:
         d5:0b:98:26:44:d6:d5:b5:8a:9b:91:a4:4b:8e:2a:4c:89:bf:
         2a:77:9d:4f:53:67:09:8c:7f:1b:1a:ea:45:a2:2e:8d:a4:ed:
         a3:19:89:89:1c:aa:5c:cc:e9:3a:b7:42:ff:76:f8:29:59:ef:
         13:8a:4d:d2:a5:e4:ab:38:6f:6a:74:e9:b1:61:eb:12:bf:63:
         94:0e:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:44:12 2025 by rpki-client