Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
File:                     ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa (raw, json)
Hash identifier:          9jT/g51IlIn5yg+zQ6DGiMvEkwHr4iVo7E3EgdvvN6g=
Subject key identifier:   DE:B9:F6:E9:F3:F8:1D:EC:A3:FF:FF:96:87:29:D1:95:20:AE:21:BF
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F43285849D85FA47DD8DEF78FD20F74C0
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     400919
IP address blocks:        23.169.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a4:7d:d8:de:f7:8f:d2:0f:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=f126f26c-ff9c-43cd-b4c6-315055e9b1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:7f:b1:83:c1:2d:8b:c8:07:b4:04:0d:b9:
                    b1:25:4d:dd:dd:91:2b:2e:11:6a:ed:3f:cc:b6:04:
                    e0:d3:13:3b:63:4e:c7:44:a2:4b:f3:54:b3:01:d3:
                    51:99:99:73:a6:72:1e:74:5e:05:3e:23:6b:45:1c:
                    92:10:db:dc:0c:c4:ac:dd:c1:07:ed:b2:bf:0b:ae:
                    54:46:08:1a:02:c0:ea:c0:55:68:58:76:f9:3a:de:
                    4b:4c:31:c1:a7:13:53:19:74:5f:10:1e:34:5b:f0:
                    4f:75:5f:4b:6a:0e:c1:e2:a9:a7:0e:2c:5c:e6:da:
                    1e:78:b5:c6:80:6c:64:d1:7a:f0:86:4f:98:9d:a2:
                    1d:5d:43:af:c8:6b:e0:a2:6a:ba:cb:52:ee:b5:79:
                    ed:64:2e:0f:8c:a2:15:0c:76:63:d7:ee:c3:54:27:
                    a8:b2:58:6a:fd:6e:9e:93:03:28:40:95:a7:c9:b4:
                    b1:15:f6:17:81:14:77:1a:34:4f:d1:bb:cd:bb:f0:
                    24:69:52:21:1b:8e:91:88:24:eb:56:41:45:7c:bb:
                    fe:56:ac:71:95:02:d9:da:d9:56:c3:1d:b2:55:2f:
                    d3:da:28:9d:a4:4c:3c:44:fe:ea:f9:dc:bc:b2:16:
                    2a:2c:fa:ff:00:fb:db:52:a9:7f:df:6d:a0:3d:fd:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B9:F6:E9:F3:F8:1D:EC:A3:FF:FF:96:87:29:D1:95:20:AE:21:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:49:8d:dd:01:c6:6e:fc:ad:55:69:04:0e:4e:33:04:db:e8:
         07:dc:36:61:ec:ef:33:75:83:5d:f0:15:dd:b8:2c:0d:a4:f7:
         74:d2:26:b8:88:3d:ff:c7:09:73:66:0e:70:61:6a:47:29:8d:
         74:89:d3:1e:cf:92:e6:1e:f5:92:ba:d9:e6:53:ad:27:1d:2a:
         c5:86:43:76:f7:76:0d:da:ba:99:77:b2:fc:ac:72:d2:13:59:
         80:8f:34:5b:d1:bb:27:ab:d1:d7:9f:a1:6e:65:e6:6c:54:78:
         de:02:cf:51:1f:f2:9d:68:40:25:a8:b5:2d:4a:2d:4d:c0:35:
         5c:cf:db:eb:e8:0e:69:cc:b4:38:fa:fc:c0:b5:47:bf:cc:b3:
         0a:2d:d3:6f:1d:a9:6f:d2:03:24:6d:dd:18:b4:65:af:5e:80:
         e5:c1:3a:65:2f:bb:e7:45:ce:3f:06:70:5c:7e:c0:02:0a:5f:
         2f:c8:93:34:6e:a8:3f:bd:7e:d3:20:27:c7:c0:db:3d:fe:77:
         23:25:0d:f0:67:55:f8:fa:46:c2:13:1f:59:76:55:33:f5:47:
         10:6b:19:b6:a5:b2:98:27:fc:04:ab:19:82:4c:7d:58:fe:a9:
         f8:7d:f7:9d:55:b4:86:27:2a:d5:62:16:10:fe:62:f8:68:a3:
         d4:7c:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:40:43 2025 by rpki-client