Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/80391595-86f3-31c6-bccf-05075d5c246d.roa
File:                     80391595-86f3-31c6-bccf-05075d5c246d.roa (raw, json)
Hash identifier:          eLoPrXIKkT/tJzcrDcMDQ5d4uRUZxue+iOeJrRSP9wU=
Subject key identifier:   D3:F7:02:02:69:96:D7:FF:E2:D7:C7:5D:1D:79:87:11:74:95:6F:03
Certificate issuer:       /CN=9c3c60d3-2280-4c4e-a6f4-bf16d96b4896
Certificate serial:       010D0C9F4328584AC31353AD5A3BFFBE2612AE00
Authority key identifier: D4:35:F9:45:84:B6:D3:39:4B:FA:A3:31:E2:25:86:DF:D9:2F:56:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/80391595-86f3-31c6-bccf-05075d5c246d.roa
Signing time:             Wed 06 Aug 2025 02:42:20 +0000
ROA not before:           Wed 06 Aug 2025 02:42:20 +0000
ROA not after:            Tue 04 Nov 2025 03:42:20 +0000
asID:                     7029
IP address blocks:        23.143.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c3:13:53:ad:5a:3b:ff:be:26:12:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3c60d3-2280-4c4e-a6f4-bf16d96b4896
        Validity
            Not Before: Aug  6 02:42:20 2025 GMT
            Not After : Nov  4 03:42:20 2025 GMT
        Subject: CN=67dbd19b-32f2-4a2e-b1f7-9e164fa38bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:ac:9f:e3:1e:42:5a:33:e6:9c:7b:ee:c4:
                    e2:92:01:cd:5c:2e:bf:5f:9a:92:b7:4e:55:43:d9:
                    33:66:bc:74:30:d1:97:26:ed:3d:12:fc:11:61:c8:
                    cc:63:5f:54:4b:4e:9e:5b:a3:92:98:e6:44:61:d2:
                    ed:2d:48:45:f5:ba:24:36:08:5d:13:67:05:d6:1f:
                    c7:d6:fb:aa:37:7a:7f:3d:19:e3:b6:c2:d3:f8:ee:
                    8e:9d:15:29:76:1a:13:e2:96:ed:44:9a:75:b1:12:
                    6a:e5:8d:e2:fc:56:a2:98:bf:75:bd:9e:ef:7e:a7:
                    07:7b:52:51:bd:12:9c:8c:e2:f4:9d:62:b2:e8:3d:
                    24:e3:8f:19:9a:5e:87:43:6a:9e:92:8b:99:3c:91:
                    b4:af:b0:6c:c6:bf:15:72:32:9c:5f:59:9f:69:5d:
                    b4:b3:36:ab:5b:c7:6f:f6:83:a8:e0:48:a5:25:cb:
                    a1:89:c2:09:0f:48:41:73:3f:63:d5:1a:4f:0c:41:
                    9e:82:42:61:86:41:f9:01:e4:8f:16:7b:a3:26:a4:
                    04:28:4b:b1:97:82:c7:07:72:e6:90:74:67:0b:9f:
                    4a:f4:71:6a:af:ab:82:d1:9d:be:38:a3:47:fe:bf:
                    f6:54:1b:2c:2c:30:cb:3c:06:e4:3e:3f:1e:21:2c:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:02:02:69:96:D7:FF:E2:D7:C7:5D:1D:79:87:11:74:95:6F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/80391595-86f3-31c6-bccf-05075d5c246d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.crl

            X509v3 Authority Key Identifier:
                keyid:D4:35:F9:45:84:B6:D3:39:4B:FA:A3:31:E2:25:86:DF:D9:2F:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:1a:23:2a:0f:fb:81:ad:ef:1c:d9:c4:d4:1f:54:57:9a:
         00:21:6c:21:29:66:ef:18:8f:51:1c:96:7e:cc:2a:49:fd:c1:
         47:f4:83:f5:0b:c7:ba:dc:11:2c:59:8c:97:04:23:b9:a8:ef:
         76:4b:84:b5:8c:0a:b4:d5:24:b2:73:d4:91:8b:0a:82:fc:e7:
         de:3b:c1:77:8a:30:60:f7:a8:c2:2b:13:ab:c5:23:e1:05:34:
         62:93:38:61:29:e9:6a:8b:3e:e0:eb:c6:c5:1a:29:03:ec:bb:
         5b:68:be:a0:4b:61:ab:15:ce:9e:42:4a:4c:3b:e2:40:d1:55:
         20:e5:bb:7e:6d:bc:e2:31:34:a4:d2:f7:9c:22:4d:56:35:9f:
         36:72:04:78:ea:9b:db:30:ed:25:04:6b:0f:77:6e:9b:da:08:
         48:55:ea:7e:5b:cb:4f:57:be:4e:f6:72:8b:de:a9:7b:64:b8:
         4e:45:17:f2:07:47:70:f4:88:98:07:63:22:bb:f1:81:5b:40:
         4d:da:a5:b4:b5:95:06:d0:20:88:b7:cd:fb:46:5b:94:06:c8:
         ed:a5:7a:1e:ef:7d:1b:92:0f:0d:8f:47:e0:8c:bb:67:25:4a:
         af:19:98:9c:43:67:b3:3e:d1:f8:10:d8:37:d7:f5:de:0f:7b:
         75:7f:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:42:51 2025 by rpki-client