Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/23268cde-899f-349c-bbd5-320f2e081d09.roa
File:                     23268cde-899f-349c-bbd5-320f2e081d09.roa (raw, json)
Hash identifier:          oqC/tkExwbpQ7YWW2S9Bo0rCxcsxtRXaWehHjXY0FWM=
Subject key identifier:   3A:9F:13:44:2E:94:3A:F5:DC:7D:A7:EC:7A:8D:92:AE:57:31:5E:1F
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584A15CA9108F18DF10E2D394000
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/23268cde-899f-349c-bbd5-320f2e081d09.roa
Signing time:             Thu 05 Jun 2025 01:00:51 +0000
ROA not before:           Thu 05 Jun 2025 01:00:51 +0000
ROA not after:            Wed 03 Sep 2025 01:00:51 +0000
asID:                     8011
IP address blocks:        159.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:15:ca:91:08:f1:8d:f1:0e:2d:39:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Jun  5 01:00:51 2025 GMT
            Not After : Sep  3 01:00:51 2025 GMT
        Subject: CN=8b08ef00-4996-4995-a351-ea8a1e5e60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:7c:8d:71:ef:4a:1b:98:46:26:66:5c:fb:
                    e2:6e:ab:e5:b8:22:46:4c:a5:71:52:20:87:ed:1e:
                    be:60:a1:e7:4a:a1:b4:ca:dc:11:01:76:b4:99:00:
                    70:26:69:87:fc:81:6d:87:0e:5d:f7:73:56:1d:2d:
                    e9:9e:cc:1f:6a:53:11:e2:e4:82:9a:4e:35:3b:f9:
                    2e:35:cd:3d:1d:96:77:bb:6c:b4:19:d9:f2:8b:55:
                    cd:c7:42:d1:41:02:49:e3:cf:bb:47:38:63:cc:5b:
                    11:8b:0c:76:94:db:cc:a1:56:29:7f:4e:a3:93:a9:
                    7d:61:5e:15:9c:0d:bd:af:73:a8:ea:60:de:fd:bf:
                    e8:d8:94:d4:b4:7c:af:d4:69:f3:28:b6:60:54:e2:
                    2c:2f:cc:0b:39:63:11:57:e1:c8:a7:d2:98:3a:f9:
                    3e:f6:2b:5d:3f:3b:c7:58:ae:3c:9c:48:3c:64:50:
                    4b:c9:3f:56:4a:52:56:22:ba:e5:6b:88:5a:d0:aa:
                    7f:c8:d6:9c:b7:32:89:1c:61:cf:09:79:cd:15:ac:
                    42:91:3f:b5:bf:e1:ed:d8:83:ea:04:ff:8c:54:47:
                    a7:af:19:6d:33:db:6a:5b:2b:2a:64:2b:3f:2d:ae:
                    ff:4f:7f:27:49:ee:1d:93:04:0e:5b:67:de:34:c7:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9F:13:44:2E:94:3A:F5:DC:7D:A7:EC:7A:8D:92:AE:57:31:5E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/23268cde-899f-349c-bbd5-320f2e081d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6c:42:d8:46:7e:07:ce:0c:c9:ed:86:89:b2:66:00:18:73:
         46:d1:56:20:fb:24:79:28:07:ee:a0:00:0c:46:ae:34:04:5c:
         0b:90:6a:20:be:b4:dc:46:a7:88:e8:5c:d3:07:c1:f4:4b:be:
         bd:df:81:c3:2b:58:9a:7e:57:ea:49:c2:0f:7c:bf:67:36:3c:
         1a:e0:4b:9f:ad:f5:8e:02:44:c8:89:07:2d:d1:ea:68:b7:df:
         a1:ae:d5:b5:25:39:04:f4:41:68:b9:73:7f:24:9d:88:5f:cd:
         ad:eb:58:57:75:6d:98:0f:ba:78:fd:2b:c8:c6:0e:56:9b:a8:
         39:3a:4f:c6:ea:0c:91:fe:00:9f:6d:78:3e:97:64:95:d9:14:
         7f:94:de:65:ce:53:6e:2d:bf:b6:09:96:ce:cf:0b:8a:c8:95:
         6f:03:b5:ba:75:a4:3e:e8:4f:43:76:f7:78:ac:90:12:2b:71:
         da:76:6f:44:99:ae:1d:26:16:1c:fc:5a:11:4c:8e:05:2f:97:
         aa:13:cc:69:40:5d:33:6e:78:13:f8:05:69:9a:26:82:2b:cd:
         30:47:68:0c:97:5b:1c:01:23:53:17:b8:c6:1d:48:dd:39:fc:
         95:9e:b3:21:f9:fe:da:fa:01:fd:4b:2c:43:23:8e:5f:c5:49:
         e0:ee:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:21:00 2025 by rpki-client