Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/0111369a-cdc2-348b-8c1d-4ee3e5971357.roa
File:                     0111369a-cdc2-348b-8c1d-4ee3e5971357.roa (raw, json)
Hash identifier:          FS5Xw0V7KBEXhZGnlKuC5geLciFavB5BAtKllpHs0DI=
Subject key identifier:   10:6D:70:D2:B5:7F:86:9A:0E:2C:A1:E6:85:76:B3:E8:B7:55:47:3A
Certificate issuer:       /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Certificate serial:       010D0C9F4328584AA160D9DD81C94C4A28B4F880
Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/0111369a-cdc2-348b-8c1d-4ee3e5971357.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     13737
IP address blocks:        23.169.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:d9:dd:81:c9:4c:4a:28:b4:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=ebad4403-cc5a-4207-946a-dde8cfb707ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:29:33:d2:7b:8c:cc:d5:42:da:d7:7b:af:
                    ad:b2:0d:1b:22:65:31:44:c2:62:33:fa:40:4b:a3:
                    02:51:5c:d4:13:cb:51:27:e7:86:40:c8:d9:83:4c:
                    83:d7:7b:84:ee:28:a4:a8:ef:17:0a:eb:6a:6b:cc:
                    fa:ab:ec:cd:c7:2b:08:a4:bd:36:b1:3f:50:0d:56:
                    0c:a2:8c:1d:9d:ea:d7:d0:ba:6b:d5:99:ea:76:1b:
                    5e:ae:78:8b:95:27:3d:fa:ec:66:2e:f2:9f:f7:a1:
                    56:2a:1e:e9:b8:05:37:aa:8f:a0:de:6b:19:c2:75:
                    d4:f9:21:25:4a:86:14:c0:f9:22:61:41:b2:46:64:
                    70:a0:58:c5:10:90:5e:18:c9:c9:ed:e3:f3:f5:e9:
                    6c:cb:71:c2:58:be:36:c6:c6:d7:3f:96:d8:cd:4e:
                    b5:95:f5:76:f8:27:5a:a0:1e:dd:ba:29:54:7b:f7:
                    f2:ce:8f:d4:b0:84:6a:71:97:cf:3d:d3:6e:7f:46:
                    fd:1d:dc:6e:be:bf:67:fb:ab:d7:a3:ec:fe:d9:0e:
                    b8:94:71:7c:b4:70:77:4d:1c:39:d9:cf:6c:7c:f9:
                    8c:28:fd:34:40:c9:2b:dd:4b:6a:44:0a:e7:c0:82:
                    e5:50:a3:72:28:a4:40:65:2a:b3:35:c5:8b:87:48:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6D:70:D2:B5:7F:86:9A:0E:2C:A1:E6:85:76:B3:E8:B7:55:47:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/0111369a-cdc2-348b-8c1d-4ee3e5971357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl

            X509v3 Authority Key Identifier:
                keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:60:3d:74:e6:50:1e:7d:59:fe:24:1c:d9:23:59:3c:7d:
         5e:d0:12:4f:a6:c4:61:86:8c:2a:d1:94:ef:ee:e4:34:ad:6f:
         c3:1c:18:8b:64:c5:d3:0c:ae:0d:77:af:3c:58:44:a2:97:e1:
         6a:ae:56:81:21:fe:c4:b0:7b:a4:8c:88:7e:0a:10:97:5b:bf:
         dc:b8:6e:ab:35:85:40:72:05:74:5d:f2:71:4b:4d:dc:dc:39:
         23:ed:26:96:c0:f6:cb:ec:af:9e:07:33:7c:48:7b:3f:3c:38:
         3e:2a:6f:f9:34:d4:fb:b6:7c:9a:9d:0f:21:2c:cc:39:63:67:
         79:fa:96:28:0e:74:f0:92:0a:5b:59:a8:0c:92:f5:9d:f6:d7:
         ac:7a:2b:d3:a3:db:cd:83:bc:a4:63:f0:27:72:bf:7a:fd:52:
         d1:67:c4:02:93:56:40:a4:73:7c:45:76:83:45:16:5e:b0:24:
         8f:38:06:75:ca:a2:e2:ee:78:6a:0f:d8:2a:e9:75:a6:25:78:
         47:c4:bb:ba:9d:e7:f6:30:54:00:e0:96:35:58:3e:ec:e9:45:
         82:46:eb:61:41:13:b3:bf:51:d4:84:f3:6b:75:44:a3:dc:e8:
         2a:22:0a:c7:3c:f5:be:88:e3:0e:1b:15:11:91:28:32:90:cb:
         af:37:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:53:07 2025 by rpki-client