Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa
File:                     c783bf70-960d-3de3-8058-484ab957d62d.roa (raw, json)
Hash identifier:          hdYC9vlqjTKi6EeA0oiRivjBLur6BHw/oHEioJWF18w=
Subject key identifier:   D9:00:8C:E8:1D:EE:DA:00:6B:AE:BE:79:F5:6D:BB:30:6E:CE:8B:B2
Certificate issuer:       /CN=4f12be01-5f55-4434-8f8a-921808f7c306
Certificate serial:       010D0C9F4328584AB0C1F3472590759E3A9FAD00
Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa
Signing time:             Wed 30 Jul 2025 13:13:49 +0000
ROA not before:           Wed 30 Jul 2025 13:13:49 +0000
ROA not after:            Tue 28 Oct 2025 13:13:49 +0000
asID:                     62582
IP address blocks:        23.177.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:c1:f3:47:25:90:75:9e:3a:9f:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306
        Validity
            Not Before: Jul 30 13:13:49 2025 GMT
            Not After : Oct 28 13:13:49 2025 GMT
        Subject: CN=14286a36-babe-470b-b576-08519b320abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:e1:ef:0e:8a:9d:a3:e1:81:b7:88:11:7b:
                    3f:a0:53:50:c1:a4:19:95:5c:30:bc:a2:6e:4c:8f:
                    d7:af:f7:1a:83:1a:58:54:38:ee:14:83:88:b9:e3:
                    e3:62:7e:aa:5a:1f:8c:96:4d:e0:a7:cd:f8:6a:44:
                    f1:9e:ff:9d:9a:6d:29:44:cd:70:97:74:b2:8a:88:
                    e8:d2:6b:bc:c7:59:92:ee:4a:9a:b3:99:5f:89:0e:
                    0a:ed:3b:94:10:a9:c4:8e:f9:33:c5:a0:3f:67:4f:
                    8e:ef:da:31:3e:7e:3f:08:f7:ed:1a:a8:9e:c3:7d:
                    d7:76:65:2c:77:82:da:0b:83:8e:90:af:b1:b5:38:
                    e1:ec:a3:78:0b:59:e2:e2:f3:74:cf:01:5c:bc:36:
                    91:21:93:1c:46:19:96:ad:fb:12:3b:eb:e2:5c:06:
                    f8:31:aa:af:87:f2:87:99:7e:3b:ff:d3:3b:d2:71:
                    97:a3:35:a1:89:94:f4:18:eb:c5:38:bf:8e:0b:1f:
                    e3:c3:28:d4:74:ff:57:f4:17:44:6c:08:19:05:81:
                    a2:3d:59:e8:61:8c:dc:c4:bf:f3:5f:d8:3c:73:6d:
                    8a:9e:21:63:87:71:75:01:c7:0f:8d:f9:a1:a6:81:
                    37:07:ba:f7:dd:5f:0b:f9:37:9d:14:87:ce:76:78:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:8C:E8:1D:EE:DA:00:6B:AE:BE:79:F5:6D:BB:30:6E:CE:8B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl

            X509v3 Authority Key Identifier:
                keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:1b:5b:2f:4b:0d:38:1e:32:d4:33:a9:a5:63:2e:04:7b:
         1d:1d:d9:45:87:2f:b8:25:13:3f:79:13:a5:6d:ad:40:61:87:
         f7:7c:05:88:e5:c4:34:fb:05:4d:78:ae:7a:81:6f:43:25:9c:
         c9:da:ed:27:47:6a:5c:bf:26:d2:b5:02:14:af:e1:f3:60:f1:
         38:47:2d:f4:cc:a5:1d:85:ef:b8:73:72:5c:b4:ff:3f:24:71:
         3f:d8:1f:27:b6:24:71:f0:a1:87:9e:1e:63:93:42:0d:a6:72:
         e0:72:59:0d:cf:17:d6:fc:81:b2:97:c2:1b:c8:5a:ec:e6:53:
         e2:d7:76:a0:96:10:cb:ed:f9:cd:9a:b4:fa:5c:59:4a:d9:2a:
         19:e6:6b:f8:c8:8a:da:a7:93:47:d8:81:cb:ac:aa:48:4d:74:
         2d:45:35:20:39:01:c8:80:11:f1:6a:20:66:0c:bd:36:07:cb:
         97:fb:b7:12:69:b7:b3:2a:ba:24:37:6c:c9:82:25:a6:c2:9f:
         a9:43:a9:db:ee:4e:61:61:c6:b9:81:91:a0:ef:c5:aa:a6:37:
         ae:db:68:3a:f5:19:f8:73:e4:40:ff:94:f1:6d:42:4e:f6:86:
         37:33:44:6e:d3:d5:c5:0d:dc:1e:a8:29:a1:0a:fb:2f:52:27:
         30:6b:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:44:31 2025 by rpki-client