Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/82bb7845-6126-3714-8f98-3ed53f082b9f.roa
File:                     82bb7845-6126-3714-8f98-3ed53f082b9f.roa (raw, json)
Hash identifier:          na8pFPItXqNZZhJ5dHOOCctWsqTIjzl/M73oPKTl/zI=
Subject key identifier:   DA:79:D5:FF:16:8F:6B:15:C2:08:A8:2A:A9:7B:55:E0:35:30:47:2F
Certificate issuer:       /CN=fa477642-e4af-4ff3-96bf-ada919ef1284
Certificate serial:       010D0C9F43285849ED4FCAD125C33B516B49B460
Authority key identifier: E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/82bb7845-6126-3714-8f98-3ed53f082b9f.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     394743
IP address blocks:        23.167.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:ca:d1:25:c3:3b:51:6b:49:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa477642-e4af-4ff3-96bf-ada919ef1284
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=d13613e2-1d94-48e7-90dc-533e0c860420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:50:cf:1e:5d:75:3e:05:39:bf:02:dd:0c:
                    e2:d3:85:b3:7b:37:d2:bd:c3:42:3f:8d:d5:a1:2e:
                    36:fa:1a:fa:13:33:23:12:0f:f5:5b:3c:48:a4:f8:
                    3c:00:8b:c1:5f:04:80:ae:fd:30:e0:45:a8:c6:e4:
                    c8:9b:7b:21:a8:f3:cf:c8:a8:66:1a:08:3b:c7:89:
                    02:c9:5c:f6:18:27:9d:8c:4c:6a:ab:76:e1:3a:71:
                    a4:86:6e:d6:14:20:41:fc:a2:f4:51:ed:fa:41:98:
                    c4:ab:81:98:ef:34:dc:f2:89:4c:c8:6b:8c:bf:2e:
                    eb:aa:cf:6c:97:5a:6b:34:a7:82:52:49:65:ae:f5:
                    9d:50:69:d4:b3:c8:f3:bb:be:94:24:00:15:ab:bc:
                    ee:a2:d1:c2:3d:76:6b:45:1a:c8:b1:f2:59:e6:7b:
                    96:f3:9b:4f:63:e5:72:71:a9:1b:b9:0f:00:f1:d7:
                    20:5c:10:7c:88:76:79:3e:ed:7c:eb:0a:38:1d:92:
                    5d:32:5c:3a:bb:f4:96:1f:05:6c:91:4a:a2:41:7e:
                    26:3a:07:7f:2c:b1:f2:46:69:24:15:3a:52:9e:cf:
                    3c:e4:00:e6:3c:4d:cf:22:c9:7e:e3:da:59:b5:ed:
                    e3:fa:13:56:01:76:21:6c:64:e6:a5:e4:63:b9:14:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:D5:FF:16:8F:6B:15:C2:08:A8:2A:A9:7B:55:E0:35:30:47:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/82bb7845-6126-3714-8f98-3ed53f082b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl

            X509v3 Authority Key Identifier:
                keyid:E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:34:94:23:60:dc:43:e9:28:dd:17:f3:2c:54:ba:69:93:
         57:ef:02:9c:48:5d:05:6b:c1:c1:fc:3c:95:bd:a2:10:75:9b:
         60:a1:fb:33:90:c1:cc:4a:f8:9e:73:a9:c1:8e:fc:3a:04:b5:
         ac:4a:a4:c4:5e:91:96:03:00:cb:a1:a4:f4:e6:9f:a3:db:d9:
         a7:f1:49:91:d1:72:ad:b0:58:b9:96:26:c6:78:0a:44:a0:dd:
         57:ee:36:9a:ed:42:2f:3a:35:4d:87:14:5f:b0:85:0e:df:39:
         83:4d:9e:3a:1e:0a:c5:c5:d7:5e:59:41:79:fb:35:b1:88:fe:
         74:9f:1b:27:49:a7:7d:59:47:62:59:91:6d:4f:85:a2:6d:cb:
         2a:70:c5:f9:9c:33:92:44:3e:7b:94:3d:54:a7:c9:ca:31:60:
         93:b3:b5:3a:dd:b2:6f:1e:0d:47:33:29:2f:66:02:c1:43:7c:
         5d:34:79:97:7a:e0:b1:04:ca:8c:f7:8b:63:fa:04:64:ac:cf:
         6e:51:d2:05:06:22:64:10:67:7f:43:22:64:61:98:a8:4f:e7:
         79:0b:f9:09:58:5e:0f:03:b7:65:88:83:f2:99:8f:d7:cf:3d:
         fe:85:fd:62:24:96:e9:76:80:0c:09:af:8d:3f:29:67:28:db:
         71:42:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:34:46 2025 by rpki-client