Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
File:                     9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa (raw, json)
Hash identifier:          W6KhW+bEYZ6Bz2/VEQQ1Q1arQSyWUu1F/9/8W4qvXj8=
Subject key identifier:   0C:4A:15:30:95:F2:BA:13:A6:36:A1:19:4C:BA:75:EE:97:78:91:02
Certificate issuer:       /CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
Certificate serial:       010D0C9F432858498B99D105A2F8E04CC45C5580
Authority key identifier: FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     20091
IP address blocks:        23.132.64.0/24 maxlen: 24
                          2604:6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d1:05:a2:f8:e0:4c:c4:5c:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=44df66cb-dc51-4e22-b309-d18429c47707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:49:44:35:2a:d3:bd:9d:30:44:18:c3:1b:
                    64:f4:03:64:10:3f:d3:74:4e:bd:8c:78:5c:f7:bd:
                    a2:25:4a:85:16:f1:11:98:10:d9:9e:d1:e0:69:c4:
                    2e:2f:d8:ae:35:57:09:d1:e1:41:a1:22:b4:32:1b:
                    8f:0e:3a:f7:c3:e3:e8:f7:3c:ca:eb:c7:bc:db:80:
                    35:bf:f3:17:60:66:88:b7:5d:4f:ff:d3:15:45:02:
                    9e:67:8b:2c:e6:9f:37:60:71:00:d7:81:75:e0:8b:
                    32:a6:f7:0e:70:fe:64:6f:24:4b:16:e4:15:05:a3:
                    51:57:ae:00:ba:ac:61:54:3f:02:03:b5:d6:2c:1a:
                    1e:36:86:69:50:b7:81:e1:22:21:24:e6:be:12:63:
                    87:00:c3:f4:02:00:9d:88:52:c8:17:f4:21:f5:c1:
                    57:84:c4:74:d2:5b:be:32:78:61:d3:e6:47:af:fc:
                    dd:9e:ca:e8:fc:39:9a:dc:50:6d:a0:8a:c9:db:cf:
                    ac:1c:c3:d6:94:08:28:fa:4c:cf:10:1c:c0:ca:ea:
                    fe:95:d0:68:10:c3:4e:68:1e:36:9a:54:59:98:a7:
                    d1:59:e5:74:0b:64:1e:9c:a3:04:96:fb:48:6a:c4:
                    3c:ee:d1:64:77:92:f7:de:4f:f5:72:54:7b:fd:5e:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:15:30:95:F2:BA:13:A6:36:A1:19:4C:BA:75:EE:97:78:91:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl

            X509v3 Authority Key Identifier:
                keyid:FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.64.0/24
                IPv6:
                  2604:6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:22:16:9c:22:c3:e8:d0:c9:62:03:78:b0:1e:d3:4b:1a:
         9d:78:d3:47:08:52:51:ac:51:5d:af:15:5b:d9:cd:9e:bc:80:
         a2:33:ce:1d:2e:6a:28:17:5b:5a:87:c8:cf:7f:74:92:fd:4b:
         a1:58:f7:1a:5e:c6:84:99:e5:b5:fe:8b:91:74:0d:57:f6:78:
         70:f8:07:47:ad:c3:88:dc:4a:d8:d2:ca:e8:29:2b:40:bc:9e:
         c4:c6:99:ae:ba:a6:bb:7e:6e:a2:a1:48:b4:95:5c:e7:72:36:
         7a:01:92:71:38:88:a1:6f:31:79:70:27:37:3a:a0:7e:88:af:
         d3:9c:a3:c5:81:a6:9a:b3:6a:f8:05:6f:02:ee:84:93:9d:14:
         91:5c:14:30:79:b8:84:06:f3:eb:30:ca:8e:3e:da:58:4b:8b:
         2c:9c:77:31:27:eb:1d:35:74:2d:65:37:4a:5f:55:31:68:7f:
         9a:37:de:2b:bf:6c:a0:e8:aa:2f:ae:f8:34:1d:5e:ea:c0:c3:
         97:87:03:62:66:a6:cf:39:d9:58:03:f4:2a:c6:52:8e:4d:ae:
         69:66:f9:b4:d2:1e:1a:f5:da:43:19:2e:98:30:67:48:6a:8d:
         c1:f9:65:8c:1b:74:3b:e6:1c:53:f0:ba:b4:f4:44:0e:37:f0:
         20:0c:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:15 2025 by rpki-client