Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa
File:                     7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (raw, json)
Hash identifier:          cNKIVR3ZK3UkcfhSrVKjqaqWdiL+AGvuwZ8nwTYFvoM=
Subject key identifier:   B9:B5:B5:5E:59:95:62:0F:DD:05:EB:51:9A:C4:48:FC:F4:E2:A3:85
Certificate issuer:       /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
Certificate serial:       010D0C9F4328584AD50672A7A93765C2D9217D40
Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     401731
IP address blocks:        23.139.60.0/24 maxlen: 24
                          64.32.50.0/24 maxlen: 24
                          2620:d7:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:72:a7:a9:37:65:c2:d9:21:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=e3083919-6fbd-4eed-a147-541ce5f49f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:26:55:6d:ac:16:5c:8c:9f:04:6a:36:a6:
                    36:07:01:30:dc:b7:df:e3:48:24:52:d0:a4:00:d8:
                    38:5e:fd:b7:75:a9:65:2d:e7:4e:7c:9e:21:73:df:
                    0c:c4:50:dc:f5:c4:c6:13:07:2d:24:51:a3:ce:63:
                    9d:0c:93:bb:d8:bb:4c:e3:21:95:4a:b6:9b:7e:aa:
                    28:66:fe:88:bb:92:8c:8e:b4:e0:ae:67:58:10:c8:
                    a5:97:18:0b:d3:e3:73:e9:78:ce:79:6f:2e:0e:2d:
                    f6:bb:09:67:2d:c1:d5:5c:a1:6b:76:c5:81:1f:d4:
                    bd:25:7a:b0:d5:71:23:ff:4e:db:62:7b:71:68:2a:
                    bd:90:3a:07:d5:c4:e0:47:cf:82:dd:24:b7:ad:6e:
                    7a:1a:a4:3a:bc:b6:6b:14:62:2e:73:42:d6:02:c6:
                    79:8c:ca:62:56:e5:a6:29:c2:0c:76:a3:96:76:85:
                    0e:19:32:48:a2:b3:0d:0d:62:e6:f3:3b:6c:d0:6d:
                    21:f6:46:a4:56:c1:8c:b5:5d:90:6b:49:7e:41:87:
                    1d:53:39:38:26:38:23:c9:13:3a:b8:69:00:88:54:
                    12:57:72:39:7a:b2:87:d4:00:54:1c:37:9b:37:c3:
                    d8:6a:d8:2c:90:5e:ed:e1:7d:ca:18:1d:1b:d8:12:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:B5:5E:59:95:62:0F:DD:05:EB:51:9A:C4:48:FC:F4:E2:A3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl

            X509v3 Authority Key Identifier:
                keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.60.0/24
                  64.32.50.0/24
                IPv6:
                  2620:d7:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:36:67:ef:0e:64:2d:ed:71:3f:fb:1b:74:c6:5a:fc:cc:
         69:5e:d3:6a:86:a5:f0:18:73:79:4f:9d:c3:81:5b:83:0c:3b:
         ee:95:ed:74:29:8b:32:6d:0e:ea:29:d9:f4:a3:38:9e:70:d1:
         f1:b5:f9:39:e5:3a:25:32:56:86:8d:6c:30:8a:fd:f3:54:d5:
         f2:1d:71:ac:25:81:7a:9d:eb:fc:d4:55:12:3f:57:e0:80:7e:
         ed:05:d4:50:5f:a8:ad:46:cb:4e:42:5e:c8:74:79:b9:ea:c6:
         fb:cb:d6:67:61:ce:e7:2e:cc:3c:32:96:95:f6:a5:fd:f4:da:
         2a:ec:65:2d:60:98:63:04:1d:30:5f:46:df:d4:75:ff:19:d7:
         6f:d0:e9:0a:f9:0d:e4:9f:56:4d:38:31:cd:5c:10:a8:38:a3:
         b1:28:bd:60:6f:ae:f4:4e:ee:70:d2:c3:b7:5f:f6:3e:74:62:
         5f:1f:a8:37:36:9d:87:d4:92:13:b9:c7:23:72:32:43:2a:70:
         51:bc:b5:90:0c:ab:3a:fc:47:3c:36:42:77:e7:18:a9:d3:bc:
         06:81:e9:17:2e:55:cb:34:a2:f8:9b:e7:73:c6:3f:89:5a:ca:
         8a:0f:03:f4:07:a7:e8:a9:01:3e:34:4a:c5:65:c2:00:26:e0:
         5c:72:ff:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:40 2025 by rpki-client