Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
File:                     0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa (raw, json)
Hash identifier:          LEkbkg98MVmgrn/caUsnId7CEZgzfE9sQnZo/13pc0A=
Subject key identifier:   10:51:94:6B:3C:87:33:F0:35:C7:CF:E3:D0:85:AF:2A:C7:7A:FA:68
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F4328584AC9DBA3ED2C8104CBD5F4FF00
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     395886
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a3:ed:2c:81:04:cb:d5:f4:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=c0a4a73c-b082-469b-88b9-c3fdc650b7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:e4:4a:1d:5f:09:f2:64:dc:c1:f2:69:21:
                    1e:f5:36:49:73:10:92:dc:28:20:bd:c2:e7:76:d7:
                    b9:84:b8:11:2d:1a:cc:38:31:46:b0:2d:1e:1e:38:
                    06:58:88:9b:ab:49:f0:16:73:46:ef:98:56:9d:56:
                    1a:56:7c:3c:48:1f:76:eb:0a:b2:8a:66:92:20:7c:
                    da:cb:ab:26:2d:e2:0c:90:a6:29:ee:36:1c:f4:d6:
                    94:8e:69:8f:5a:c1:34:22:82:cb:0f:1d:9f:51:12:
                    15:ba:f7:f2:47:dc:8e:c2:09:a4:d7:38:e5:57:4e:
                    d0:df:2d:b3:e3:eb:7c:48:86:08:5c:6e:11:c7:fa:
                    1b:3b:90:5a:24:fc:f4:aa:d5:7a:17:83:32:e1:29:
                    a4:6e:aa:04:a1:e0:4f:f2:61:18:b7:49:6d:64:c4:
                    f0:2e:e3:51:53:0b:17:01:03:a6:8e:a4:56:89:91:
                    4b:e1:ea:a1:68:e0:35:84:9d:b0:5e:cf:23:db:69:
                    fa:03:c5:33:25:0f:21:46:1b:5b:34:9a:2d:71:92:
                    46:29:af:58:9a:3f:b6:b2:39:e0:d2:f7:f8:6c:e7:
                    b3:b9:f1:98:25:c7:f4:24:15:96:83:ab:4c:68:dd:
                    0a:27:e5:dd:ed:f9:0b:93:b4:45:07:32:7c:55:35:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:51:94:6B:3C:87:33:F0:35:C7:CF:E3:D0:85:AF:2A:C7:7A:FA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:50:78:a9:3c:e2:48:d9:e9:eb:17:da:c4:67:f7:26:32:74:
         a5:92:2d:db:9c:c5:37:f2:c8:70:53:53:e4:bb:f1:19:3a:7f:
         fb:56:bd:0f:0b:11:d3:fd:b2:4a:d6:66:82:fc:28:d3:e4:59:
         ed:c3:53:c2:19:98:4c:cf:c6:5a:18:1b:5f:8e:5d:77:26:36:
         75:db:40:a2:22:ea:d0:2d:ac:af:4f:8f:1e:23:37:88:ac:2d:
         ae:92:58:c2:6f:4e:e8:f0:82:29:52:d1:16:cf:36:0c:21:c8:
         1f:c8:4d:63:ca:a2:b2:cf:78:97:cc:e2:be:d0:83:9a:7e:98:
         df:94:5d:7f:fb:9a:c9:6a:6c:c4:62:7f:75:e9:39:d4:23:64:
         e2:7f:09:78:f5:b1:28:77:30:eb:b0:dc:88:f9:e8:b3:19:89:
         89:df:79:6a:68:e5:b7:eb:84:94:12:0b:d2:8f:3c:ae:12:6d:
         12:08:a4:2a:b3:76:80:f7:63:99:28:37:58:8d:b0:36:e6:70:
         55:74:4d:7b:48:05:21:c1:5b:0f:cf:c9:9f:00:bd:b8:72:22:
         e2:34:83:53:06:2f:40:4d:cf:79:40:70:56:f0:08:7b:d0:b7:
         80:78:4a:90:ad:d6:60:1d:96:d4:1a:e0:83:01:36:57:83:e8:
         da:bc:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:42 2025 by rpki-client