Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
File:                     7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa (raw, json)
Hash identifier:          ZBrI/5Pow5XoFeZ/CF5wmKWVz4bsQ4XdaMDW3iM9HBo=
Subject key identifier:   7D:A5:3B:2C:A4:EB:E3:2A:82:0F:4E:2B:CD:7F:88:5E:48:53:07:6E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A7BB0B28B1ADC752972260BC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     32043
IP address blocks:        173.232.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b2:8b:1a:dc:75:29:72:26:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=21ac9e31-5a5d-4058-9392-cf6691fbe21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:a2:e0:c8:cc:ed:b4:19:8d:c0:37:1d:69:
                    b4:2a:14:07:7b:33:29:b0:a9:6a:80:67:92:f3:72:
                    f4:1e:5a:50:3a:86:85:53:47:90:44:3a:0e:fd:7e:
                    80:4c:d8:5c:d5:cd:26:55:7c:c9:ae:6e:c5:36:90:
                    f6:b8:41:45:9a:a1:04:b8:27:4c:f2:16:02:bf:43:
                    bf:28:d4:3e:91:1d:3f:73:8e:f7:55:8c:89:68:0c:
                    a0:e7:36:0b:91:e5:cd:46:a7:57:59:7f:81:76:73:
                    1e:c4:b2:8a:2b:06:98:0b:d6:28:ea:56:90:a9:7f:
                    5d:5e:b7:9a:0b:3f:2c:3a:55:0d:75:6c:3d:ac:cf:
                    fd:b0:2f:3b:1e:5d:10:6a:67:87:63:32:53:c3:2b:
                    90:73:27:99:67:b8:1f:91:4c:aa:36:8c:f3:cb:49:
                    48:f3:a7:bb:de:94:e0:22:5c:d6:08:dd:8d:b2:f3:
                    23:df:42:81:ca:f1:29:da:4f:c9:a4:ec:01:5d:a3:
                    0f:c1:e0:23:06:94:80:d2:5d:1d:c8:a6:8a:d2:b4:
                    e0:fe:aa:5a:fb:38:42:8c:c5:ce:32:0f:57:27:d9:
                    7c:bd:36:98:03:a7:97:1b:01:7f:8b:2a:b4:47:10:
                    2c:55:87:88:d6:29:68:16:f8:3a:29:4f:e1:af:72:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:3B:2C:A4:EB:E3:2A:82:0F:4E:2B:CD:7F:88:5E:48:53:07:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d1:c0:34:b3:2b:ff:0c:f6:cc:af:91:72:44:d5:a1:a8:42:
         46:1e:bd:39:89:aa:9c:76:03:3a:d3:a5:84:3f:0c:74:73:5e:
         e7:41:b5:d9:ed:3e:9e:24:49:ef:24:65:c0:20:b8:cd:d5:e7:
         1a:1c:68:8f:b8:21:38:64:2a:45:93:31:26:a3:b3:95:fe:c4:
         9f:86:85:e7:d1:ec:c5:4c:2c:45:9b:ac:7c:9b:75:c2:80:2b:
         9f:92:9a:43:1f:2b:3f:90:89:c1:7c:47:e4:06:b1:3a:3b:6b:
         eb:c7:c1:3e:c5:8b:0c:a7:8e:87:04:d5:f2:9d:4a:0d:77:d6:
         ff:45:0d:74:f0:75:fb:2e:1e:96:e1:a4:3b:81:3f:10:96:7e:
         aa:78:fa:3c:23:2b:cf:97:0e:cf:b0:a3:a8:e5:f7:4c:52:98:
         b1:3a:a0:46:d3:35:d7:5c:cc:4f:54:1b:dd:3f:27:e5:f4:7a:
         67:36:74:a9:97:28:69:78:85:d8:d8:6d:91:1b:37:c7:c0:1f:
         1b:99:e4:61:7e:2a:da:8c:12:1e:bc:e0:d0:71:87:14:c1:63:
         22:60:c3:7b:58:59:f6:f6:71:fa:37:79:7a:2c:1a:00:76:9a:
         5d:a2:8f:2b:e3:e3:bf:a7:00:01:e3:67:40:69:4a:75:06:fd:
         ac:8d:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:00 2025 by rpki-client