Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File:                     7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier:          Jqu7oU5nhQmXDuz6suQIiA7jc6CWzAGHkOMVIbioYEA=
Subject key identifier:   2D:69:7E:C6:96:3B:B1:FE:1C:13:64:AB:1D:9F:AC:31:85:26:0A:42
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584AADF0FC44303DF4E1D60F0300
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     7034
IP address blocks:        23.152.160.0/24 maxlen: 24
                          2620:13b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:fc:44:30:3d:f4:e1:d6:0f:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=1d7e061d-2667-4367-b435-071feccfde5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:1b:50:ef:62:61:36:c7:27:3c:8e:02:14:
                    e3:c5:bf:41:c1:53:5c:26:83:cd:e4:cb:28:02:b7:
                    d8:54:eb:16:e0:2a:dd:88:a8:30:fb:79:a0:d9:32:
                    86:e7:36:1c:76:eb:bc:7f:68:e5:a7:6b:bf:5c:da:
                    ab:bd:0b:4a:2c:92:87:3c:a7:28:71:45:54:d6:e8:
                    bf:d0:c3:ca:b6:a0:29:2d:af:bc:0d:0a:da:a9:fc:
                    95:53:e9:b6:72:5f:e7:1d:85:83:9a:2b:16:8c:e7:
                    ca:bc:10:11:9f:84:80:ea:03:68:66:8a:ca:5f:73:
                    bc:ac:f9:2f:74:50:24:31:c1:51:37:ea:0a:74:23:
                    dc:58:26:d1:49:c0:02:59:a3:03:af:de:cf:b6:f2:
                    e4:fc:b5:bb:39:0a:ac:0b:7e:71:5f:0e:e3:09:9f:
                    6e:79:16:00:24:00:f3:5e:a6:30:57:ad:88:0a:64:
                    8b:05:a1:57:b8:0d:1e:bd:69:02:28:12:92:e7:25:
                    14:13:aa:b0:86:9b:82:2a:84:a3:da:6e:15:7f:01:
                    2e:c2:90:ca:c9:6f:c5:2d:35:50:5d:6e:98:0e:b0:
                    67:16:23:64:51:e3:4e:4e:d0:5f:02:85:32:9f:d2:
                    a7:f0:41:c0:b3:71:77:a7:e9:67:5c:74:06:0f:57:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:7E:C6:96:3B:B1:FE:1C:13:64:AB:1D:9F:AC:31:85:26:0A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.160.0/24
                IPv6:
                  2620:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:3e:fe:5c:29:7d:3c:3c:b5:68:6e:e0:1a:57:bb:3d:e9:
         e8:33:96:97:61:f8:83:19:a6:b2:2e:bd:9c:2e:8e:03:d1:22:
         3b:b0:ec:75:09:00:54:7a:e0:99:e0:fe:b4:89:c0:9a:0b:3f:
         d3:c3:bf:33:08:0f:98:15:87:7e:f1:01:5b:f2:18:d1:51:1b:
         bf:f5:76:7d:c3:ab:84:7c:90:05:a4:e7:73:c4:a2:c0:2f:a5:
         f9:5e:c5:66:07:f2:63:f2:ed:e0:7b:97:ca:4e:be:77:3e:02:
         c6:2e:9d:6e:a5:03:8a:a3:46:91:5f:93:79:71:4b:d0:ba:4f:
         5f:6e:5e:dc:00:75:1b:83:9c:ff:9e:9c:11:58:7a:92:dc:c8:
         3d:30:ce:6a:a0:f3:5b:83:c1:4c:4d:ec:d6:0f:00:bb:11:28:
         b8:8d:48:6f:10:c9:ec:31:77:a1:fe:bd:b3:87:de:9b:1e:57:
         43:14:64:eb:a9:15:61:0a:a3:71:01:e3:17:33:4f:44:ce:2b:
         43:d7:ce:90:d4:b4:3e:0a:65:2e:e6:71:93:73:ec:0e:5a:bf:
         5c:81:78:64:17:b4:39:90:db:3b:20:87:51:f1:49:50:80:9f:
         f6:c1:17:ae:1d:42:6a:91:6a:99:b6:da:4b:07:ec:6f:08:46:
         9f:b7:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:55:36 2025 by rpki-client