Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6701dd46-e71b-384f-8c67-0107de50fa35.roa
File:                     6701dd46-e71b-384f-8c67-0107de50fa35.roa (raw, json)
Hash identifier:          dRDtXDV/iG51SLayyfFLcLZjnDgKE+FoLOrT2b7kQAM=
Subject key identifier:   84:4E:5D:2F:A9:39:A6:C5:45:68:A4:E4:CE:94:A0:2B:AC:72:99:B2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A374AE30B7B6A1BB28E329180
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6701dd46-e71b-384f-8c67-0107de50fa35.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11232
IP address blocks:        24.230.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e3:0b:7b:6a:1b:b2:8e:32:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=1f1fefe7-ba74-4c87-9077-29202ff2b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:1a:77:a4:74:bd:6b:e1:88:79:9b:7c:7b:
                    8a:15:7e:ce:d7:76:04:90:6b:8e:64:b6:fc:cf:a2:
                    6c:e5:0e:5e:32:2e:bd:1e:89:c1:2b:5c:d4:f0:2c:
                    6b:a0:b1:99:10:27:4e:14:2f:a8:6f:83:3a:f6:b4:
                    86:7d:4d:6f:2e:ea:a6:02:32:b1:08:87:5b:66:b6:
                    5c:bd:8a:fa:d8:bf:b1:5f:a5:a2:ef:33:3d:03:18:
                    22:8f:c0:92:0a:93:5c:a4:5e:42:4c:cc:ca:67:ee:
                    58:4b:09:16:ef:0d:c8:8f:85:c1:29:5d:cc:44:0a:
                    bc:21:be:84:a3:bf:24:c4:22:2a:3d:47:a3:50:de:
                    19:82:da:b9:f4:c3:2d:11:b8:d7:f3:3b:43:29:df:
                    b2:c8:cf:8d:65:1f:1b:43:b0:b2:22:4c:be:1a:3a:
                    6e:be:ad:53:5a:98:8e:72:aa:c3:32:13:64:cd:83:
                    aa:2f:f9:9e:4b:03:19:a8:db:db:4e:c5:8a:52:a0:
                    0f:d1:b6:33:2f:76:16:8e:9f:a7:39:19:59:c9:5c:
                    72:4f:ff:a9:48:cb:f0:07:1c:aa:41:a4:60:8e:e3:
                    97:6f:10:3b:dc:75:26:ff:cb:4d:b4:d7:a8:a7:7e:
                    66:06:8f:d8:c3:44:27:03:ad:ac:35:0e:1e:d7:9f:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:5D:2F:A9:39:A6:C5:45:68:A4:E4:CE:94:A0:2B:AC:72:99:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6701dd46-e71b-384f-8c67-0107de50fa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.230.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:25:13:f2:0c:5b:a4:ab:4b:f4:27:dd:22:93:d6:ad:8a:
         12:91:f5:84:1c:e3:20:de:c8:bc:cf:9c:7e:4f:78:0b:89:66:
         58:e5:98:2b:f4:cc:40:7e:9f:03:ee:52:c7:92:11:73:b2:8b:
         e6:b3:8b:26:27:6b:16:11:58:60:61:e7:de:a1:23:6b:e6:8e:
         eb:a0:f9:3a:0d:26:0a:12:ae:ef:7c:43:de:f8:2c:ae:33:24:
         69:04:c4:87:18:52:c9:d8:5b:e9:20:f3:e9:12:33:33:db:a3:
         4d:a1:aa:50:72:11:80:df:ea:73:89:25:92:31:ac:4c:c1:a9:
         49:b8:bc:bd:50:65:c9:a5:89:33:e6:d7:41:fb:56:0e:77:f8:
         1e:ae:c4:ba:20:6e:53:cc:bb:3c:bd:6d:2b:b5:17:85:31:40:
         28:0f:d0:52:52:d6:05:5b:0e:87:59:b5:52:8e:04:91:43:8c:
         94:98:76:dc:19:eb:67:c9:bc:63:6f:e8:b7:91:39:f3:fe:f0:
         f3:e1:10:c7:cd:62:be:5e:79:d5:5a:be:e7:3a:f9:dc:87:13:
         0b:b8:3e:95:e5:5d:88:0a:f2:b3:0d:e9:1a:b5:3e:a4:4c:a7:
         f6:3d:5f:9b:2d:d4:dc:68:b5:64:29:9a:41:bb:a5:6a:67:4d:
         a8:fc:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:16:35 2025 by rpki-client