Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/6b029d67-c0be-3cd6-be53-2ff6741141f1.roa
File:                     6b029d67-c0be-3cd6-be53-2ff6741141f1.roa (raw, json)
Hash identifier:          sQ+REdGJSaWCE0vZxDGsjsMWueVWZo+tGrE6I5CEz2g=
Subject key identifier:   FD:48:3F:3E:43:8D:9A:51:05:F3:81:AE:2E:62:48:28:9F:02:9B:1E
Certificate issuer:       /CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511
Certificate serial:       010D0C9F4328584ABF956EAD48AE43E6ABBF2000
Authority key identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/6b029d67-c0be-3cd6-be53-2ff6741141f1.roa
Signing time:             Mon 04 Aug 2025 20:41:15 +0000
ROA not before:           Mon 04 Aug 2025 20:41:15 +0000
ROA not after:            Sun 02 Nov 2025 21:41:15 +0000
asID:                     401896
IP address blocks:        23.143.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:95:6e:ad:48:ae:43:e6:ab:bf:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511
        Validity
            Not Before: Aug  4 20:41:15 2025 GMT
            Not After : Nov  2 21:41:15 2025 GMT
        Subject: CN=b9a91dbb-0cfb-4fec-97af-9c4cb949c21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:e4:8d:77:c9:6a:27:4b:27:d8:14:32:09:
                    b1:62:7a:73:44:d6:27:00:36:33:10:ce:3b:2c:90:
                    e3:05:e8:bc:26:4e:41:04:42:d8:94:a3:58:83:2b:
                    e3:ce:de:6b:10:62:6e:a4:d3:3e:d8:e0:cc:44:71:
                    82:87:55:ae:83:3d:a7:99:21:81:ad:48:55:72:b5:
                    3f:d5:b5:f0:d7:3f:20:ee:f8:75:ac:2a:7b:dc:8b:
                    f3:5c:ed:53:5f:3f:ee:7f:b9:d2:b2:12:87:94:6a:
                    a3:a8:a4:f9:f2:94:d3:3b:4f:10:29:89:98:d6:3d:
                    9b:ae:d1:69:4f:79:60:5a:79:a8:fd:b4:2e:89:b0:
                    23:34:67:1f:a4:2e:5e:37:83:1e:75:df:fa:19:c1:
                    67:68:dc:ec:a3:c2:9d:e8:32:b1:94:93:aa:70:fb:
                    96:ef:0d:b4:3a:a6:89:f0:87:e8:9b:01:c8:20:22:
                    db:99:58:d8:36:71:08:c0:4d:73:c4:ae:03:99:c3:
                    a0:93:a2:f9:fb:b3:06:d9:68:48:4e:81:b3:7f:4c:
                    e7:b6:64:24:37:dc:93:9a:f7:a4:c0:9b:64:12:37:
                    bc:fe:a5:b2:a8:df:fd:4e:44:45:a7:19:cb:02:45:
                    ed:bd:80:9d:06:41:8f:ca:3f:71:d4:30:39:6f:fd:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:48:3F:3E:43:8D:9A:51:05:F3:81:AE:2E:62:48:28:9F:02:9B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/6b029d67-c0be-3cd6-be53-2ff6741141f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.crl

            X509v3 Authority Key Identifier:
                keyid:B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:54:ce:f5:a6:d8:04:06:1f:0c:64:a3:56:0a:7f:6d:7e:82:
         ce:23:89:92:fb:64:fd:66:47:78:50:63:3d:17:44:f5:4d:f8:
         fc:02:a3:cd:14:04:b9:6d:57:65:50:6a:82:71:a4:da:36:87:
         6e:cb:f5:2f:cc:c9:ec:3f:89:24:ef:52:93:79:88:20:da:25:
         64:2e:43:c5:c9:df:02:96:2e:27:9d:5b:b0:85:de:1a:95:28:
         bc:8c:8f:e9:8b:3b:ac:8d:0b:4c:99:e6:02:b4:d1:ff:be:af:
         86:76:90:d1:36:fd:4a:8b:67:14:d2:6e:23:f6:dc:b8:5b:2a:
         a9:d2:37:e6:3c:58:55:2e:0c:93:2b:e0:f8:fc:30:cc:01:27:
         81:bf:21:7a:9e:07:56:0f:41:e5:e5:c4:49:5e:95:e0:e4:5e:
         87:aa:57:b8:3a:35:6f:5d:58:92:fa:66:35:a2:c4:19:39:70:
         25:b5:c0:3d:73:a4:8b:02:ed:1c:ef:88:fc:fa:39:c6:0f:49:
         71:21:b6:34:7c:fc:02:e0:4c:65:49:ad:a8:43:ea:2b:2c:bf:
         e2:1d:14:df:43:85:52:ab:47:af:6a:39:70:c7:d9:2f:c5:56:
         ba:37:fc:b7:5b:ef:ad:1b:56:c6:bf:ae:cd:93:d0:71:91:f2:
         aa:09:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:59:53 2025 by rpki-client