Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/c3b35b09-6266-3398-8576-feb606162547.roa
File:                     c3b35b09-6266-3398-8576-feb606162547.roa (raw, json)
Hash identifier:          F5sBVq/BwGeG4xmy/bHAAM7FyrT94JkR8poBkDn7rUk=
Subject key identifier:   C0:E7:EC:31:A0:41:FE:15:C2:20:8A:B2:FE:5C:40:D7:D4:A2:F3:08
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584A268AB37C25574D4B351BDC80
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/c3b35b09-6266-3398-8576-feb606162547.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     23154
IP address blocks:        143.116.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b3:7c:25:57:4d:4b:35:1b:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=07b6e51f-707d-4373-a067-880eff6970fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:76:27:03:71:7c:86:33:2e:8a:14:53:10:
                    8a:c8:bd:85:f0:f7:51:d4:e5:68:d8:6c:57:74:de:
                    ab:91:ea:d8:fa:bb:79:bd:b1:37:63:ea:b1:1e:28:
                    09:eb:22:a2:64:a0:d1:cb:c9:39:0e:c4:4e:8e:11:
                    0d:ee:9a:cf:eb:b5:f3:f5:cb:18:b3:b9:4b:23:b2:
                    23:5a:dc:83:bc:26:2b:d1:25:11:e2:71:ef:1d:0d:
                    f9:ce:a5:6c:2c:32:d7:1e:a7:1e:30:e8:f7:26:17:
                    45:c8:16:43:fa:9f:a0:2d:ed:ea:eb:d5:d8:49:d2:
                    92:a9:e0:64:60:7a:3c:f1:8b:8c:e8:3f:5f:53:d4:
                    58:8b:1d:70:54:c1:f5:ec:9a:89:e3:b4:42:65:c9:
                    37:9a:6f:e5:cb:f6:69:61:d6:8c:d8:af:6c:1a:b0:
                    67:a4:17:aa:04:b4:d0:57:f3:1f:45:53:98:b2:82:
                    25:5e:9a:66:6d:e8:d5:da:65:cf:2e:0c:90:0e:15:
                    fe:15:b7:51:ae:5b:00:f3:0a:2e:89:5b:cc:34:56:
                    c5:32:7f:f4:ea:93:63:74:bb:23:c5:85:f0:69:72:
                    dc:88:97:dd:92:cd:fd:ea:84:b6:1c:66:ca:4f:24:
                    d8:3d:a4:4a:9b:78:15:9b:60:55:45:0c:f0:37:ea:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E7:EC:31:A0:41:FE:15:C2:20:8A:B2:FE:5C:40:D7:D4:A2:F3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/c3b35b09-6266-3398-8576-feb606162547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:4e:38:fb:31:f2:60:62:33:c2:88:b8:19:fa:3c:8d:86:2e:
         32:1f:80:59:ba:cd:21:ef:2f:2e:ea:35:c5:36:f7:de:25:76:
         e7:1a:14:dc:4f:d6:69:7d:8e:11:8a:5f:05:31:33:c5:1c:66:
         a1:60:53:1f:7b:9c:5b:16:55:f4:bb:4a:6a:d7:40:59:69:c2:
         cf:bc:48:f9:0c:a9:3c:f0:5e:f9:25:4e:c7:4b:0f:c7:57:d4:
         64:f1:89:1f:e1:d3:29:ab:55:c5:af:1a:ad:81:1d:f6:9a:43:
         f7:70:28:13:98:c5:52:ab:28:f9:e7:13:ca:97:d0:bd:4b:82:
         f3:ce:cc:38:a1:26:a2:2c:9e:e3:f5:19:37:1f:66:f6:fd:c8:
         ad:d2:f3:f8:7a:cc:a7:0d:7e:4e:a7:50:54:5c:0f:ba:df:9d:
         a2:43:96:3a:bf:f4:f8:1b:9e:a5:06:f0:14:a6:84:57:26:4d:
         34:c8:83:62:d0:29:95:2c:5e:bb:1f:6e:41:7c:d5:b0:9d:82:
         85:65:b2:ae:17:e1:da:a3:6c:a1:a9:b0:c1:2d:b8:cd:bf:72:
         55:bb:f1:25:b3:91:6e:98:83:3a:83:d3:17:4f:1f:82:b3:ea:
         4f:d9:d2:68:1d:f9:c6:22:1c:db:69:09:b0:40:76:1b:e0:4c:
         d9:2f:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:57:15 2025 by rpki-client