Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
File:                     0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json)
Hash identifier:          V1H8anOJV8d3OvaMLki3I+MWIu41nbnKkO3e7rquPg8=
Subject key identifier:   94:81:7A:77:22:31:B4:09:58:A1:EA:AD:B8:DB:70:F6:7F:96:EA:F2
Certificate issuer:       /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72
Certificate serial:       010D0C9F4328584A90A0C3D7E81623F3C4ADB080
Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     32673
IP address blocks:        23.170.104.0/24 maxlen: 24
                          2607:7c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c3:d7:e8:16:23:f3:c4:ad:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=0a116088-e32f-4662-a099-fd14b9f01832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1c:43:7f:ea:4d:35:40:2f:cd:6d:38:d4:c7:
                    c0:ad:f1:54:13:e6:1e:51:92:b2:49:44:b9:ef:44:
                    61:cc:2c:0b:2c:5d:3f:0f:63:5b:8d:92:e7:05:65:
                    e3:02:36:dc:72:c1:c4:4b:e2:7f:9c:c2:71:7a:41:
                    3f:e4:07:00:38:08:6c:37:45:79:72:2f:a6:f6:c8:
                    2d:18:20:63:5b:81:fb:f9:40:c0:2c:2c:c1:af:01:
                    e4:6d:a9:eb:0b:74:1a:aa:fb:94:b2:bc:21:71:fe:
                    93:0f:ed:aa:76:3a:15:03:84:6b:3a:1a:d5:99:4d:
                    a2:ae:15:9b:3d:eb:9b:86:99:22:4d:4e:3c:24:43:
                    76:d3:4a:a7:6e:7c:67:ff:9a:27:78:73:3d:4b:96:
                    9e:aa:1e:46:f9:b0:47:52:15:fc:22:dc:6e:b8:94:
                    03:91:05:e1:d8:68:d1:04:94:9a:58:d3:ec:41:31:
                    11:4c:8d:d3:98:2c:fc:6e:6a:8c:08:00:c2:eb:38:
                    d5:9c:5d:ad:cb:ac:b2:81:bd:b4:77:10:69:cf:a3:
                    e9:fe:50:f7:0e:64:e7:fa:df:24:79:a4:cc:f3:37:
                    3d:28:a7:52:56:cf:6a:00:60:05:0e:f7:d6:8a:82:
                    b3:fa:4b:bb:24:60:e2:25:40:d3:e6:84:d9:9c:ca:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:81:7A:77:22:31:B4:09:58:A1:EA:AD:B8:DB:70:F6:7F:96:EA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl

            X509v3 Authority Key Identifier:
                keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.104.0/24
                IPv6:
                  2607:7c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:0f:2a:9b:ff:b5:33:37:a3:f1:5d:06:68:c5:c3:4d:29:
         c1:c1:fb:f6:df:e1:07:10:56:dc:7c:a9:c6:60:14:cd:ab:84:
         93:14:c1:b8:7d:ad:1f:e9:20:d5:38:14:54:4e:2c:63:12:17:
         bd:0f:fa:5a:d1:11:3e:7d:54:2b:2e:9d:ee:7e:de:bf:4f:51:
         d2:cf:b0:46:49:14:4d:da:ed:a6:ef:b9:c9:bd:ed:38:b0:46:
         55:76:5b:84:2b:97:3d:4f:c1:62:24:4a:39:53:93:50:be:be:
         7d:26:52:18:70:75:c8:99:78:47:44:88:c9:f6:62:3c:d3:3e:
         f3:8d:5e:58:ae:eb:3d:ee:5d:0d:75:a0:52:8d:2a:fc:51:2c:
         f0:55:25:18:15:2b:cd:76:30:7d:4d:a6:98:63:69:c4:d1:45:
         2c:02:db:c9:12:d2:43:38:f2:80:fb:fa:fa:fd:c0:12:de:cd:
         30:93:83:7e:28:bf:f0:c8:94:f3:f3:5b:56:e3:87:78:3a:27:
         1e:6d:b7:75:74:7c:00:98:5f:2a:8b:e4:bf:d7:d8:d6:c7:96:
         7e:39:94:18:04:f7:02:db:0d:60:13:bd:89:1b:94:dc:2e:79:
         33:aa:c8:b2:59:7f:89:21:88:0a:fe:d0:4f:45:c1:13:23:ce:
         60:68:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:18:06 2025 by rpki-client