Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
File:                     23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa (raw, json)
Hash identifier:          VNYQeRDS0rPoN63ZvHHDl0nkCOMGdziKsMsUbKnbIRU=
Subject key identifier:   75:69:58:CF:C6:B6:6F:18:C5:7B:D8:26:A5:EC:20:20:75:EF:DE:BE
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285849FE0FEC59A4D863633B0EC980
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        85.113.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:ec:59:a4:d8:63:63:3b:0e:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=971b29f4-b29d-4e28-9c73-4efa09c4d3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:82:a0:cd:75:a6:d0:39:74:47:93:e8:79:
                    97:e9:b4:f6:dc:96:bf:8d:6e:29:e0:0c:ec:e9:4b:
                    3a:c2:01:f4:65:60:1e:f6:94:6f:80:b4:14:84:ee:
                    83:61:14:af:2b:e7:cf:d6:5c:2e:c8:b4:43:91:78:
                    a5:3e:46:2f:d4:a5:a5:62:fa:79:18:58:49:de:4e:
                    d4:ca:a4:82:19:f0:d8:ed:c9:fc:f2:c4:9d:ed:b4:
                    98:40:f0:cf:42:5f:8f:99:46:6e:84:e2:d2:9e:23:
                    9c:eb:a1:be:74:d0:ea:e9:1a:47:d8:80:7f:93:7a:
                    7e:2b:46:34:30:aa:ba:3f:03:cf:53:84:a9:d9:67:
                    c9:43:62:17:2c:a9:65:62:28:99:2e:d3:64:d9:c9:
                    af:e0:26:35:15:c3:29:f2:62:7a:53:2e:88:f9:54:
                    03:3d:98:97:75:4a:02:14:f4:e5:03:73:d7:71:68:
                    d9:31:36:c2:bd:91:be:23:ad:42:49:e2:4c:35:13:
                    76:b3:df:e0:0a:c6:3a:75:bc:83:ee:1a:e4:c3:eb:
                    d9:0d:31:f4:0e:50:79:fc:77:73:02:97:af:f7:0c:
                    07:2a:1c:99:f8:f9:60:cc:a8:12:5c:e8:a4:cc:46:
                    12:58:3f:50:e6:58:1e:71:32:19:26:fc:45:15:bf:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:69:58:CF:C6:B6:6F:18:C5:7B:D8:26:A5:EC:20:20:75:EF:DE:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:a6:37:11:42:cb:47:fd:87:7f:82:11:0f:da:8a:26:c6:
         e4:c6:95:9a:36:f3:b4:a1:d4:8d:c5:6c:ff:17:ae:79:e5:1f:
         1a:c2:60:5f:0e:44:68:e0:2e:ba:9c:b1:d6:85:b4:3d:f7:b2:
         67:71:f7:d7:2c:c4:98:62:2c:d1:53:c9:10:1f:a1:fb:2e:3c:
         da:f8:4a:42:d1:f4:05:2f:57:fd:40:18:7d:a3:1a:a2:22:84:
         37:c7:bc:96:b5:39:ed:e7:4e:c0:6e:71:2f:bf:63:88:4b:bc:
         11:7d:85:73:be:b7:5b:1b:26:a2:ff:04:93:6b:cd:84:e8:8b:
         8e:39:bb:28:19:7a:22:46:c5:27:12:66:55:6a:ee:7d:8d:88:
         6a:45:f5:a7:0e:1f:a9:14:90:af:70:c3:22:57:2a:eb:4e:a2:
         80:e8:05:a2:5d:a4:c1:1a:61:c7:96:6a:38:a5:cb:f8:3c:99:
         20:f7:60:bb:7f:5a:6b:99:de:ff:39:b1:e7:47:e9:5d:45:3b:
         87:b2:b5:3a:4a:d0:cc:68:d1:1a:a9:3b:dc:7b:df:a0:12:2b:
         d3:e8:b3:98:19:b9:b2:bd:93:67:31:fa:03:68:f6:1a:da:6b:
         12:b7:ed:bc:d1:7b:aa:e1:a9:8a:b8:26:f0:c1:5a:9c:33:41:
         99:eb:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:32 2025 by rpki-client