Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/410e5526-7b08-3fee-9798-c1cc44afb72b.roa
File:                     410e5526-7b08-3fee-9798-c1cc44afb72b.roa (raw, json)
Hash identifier:          Dz8OfdfFF1fHIlVLUp2UuKMojM9k22xsGhtLn8Y8tv4=
Subject key identifier:   E1:95:69:AE:F7:78:04:89:E3:97:8D:38:50:BD:C3:83:92:04:D1:C4
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F4328584AC9DBA3D77BD982B53A1DB180
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/410e5526-7b08-3fee-9798-c1cc44afb72b.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     8796
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a3:d7:7b:d9:82:b5:3a:1d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=208caa11-077b-41c8-a2c2-304ee7b3ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:a1:5a:92:e7:63:95:46:fe:57:98:e9:01:
                    fa:ed:5e:63:65:18:0d:31:3b:df:49:7a:46:50:71:
                    82:cb:9d:f4:ae:0d:5c:39:22:36:e1:7b:94:00:41:
                    ed:ed:f4:a6:84:27:e3:e8:30:78:99:71:76:cb:0c:
                    89:94:94:3b:a9:01:42:02:46:7f:64:d2:8e:39:3e:
                    88:15:96:aa:5c:4d:bd:82:8e:d9:67:d6:2c:ae:7b:
                    31:58:dd:33:0b:2f:fd:0e:e9:fa:4b:00:d1:83:1b:
                    fa:d6:24:ac:3e:f5:34:36:9b:7f:fb:10:77:93:c1:
                    44:c6:50:61:51:b8:37:35:d9:eb:d7:b2:4a:d0:74:
                    8b:52:b2:be:e8:e5:cf:07:de:ac:5a:17:fc:c6:5e:
                    55:72:84:a1:fb:d4:cb:5a:a7:b0:a8:10:a2:bd:6f:
                    67:10:93:f0:ca:96:92:4a:1a:11:fb:3c:41:ae:b1:
                    1b:df:c5:ff:94:48:6f:11:57:c7:e5:c0:d0:99:fc:
                    35:be:63:09:54:d3:49:ea:6f:e8:00:a2:23:ba:6a:
                    0e:b5:3e:e5:44:72:69:6c:3b:a6:47:68:cd:c4:c9:
                    9e:6c:ca:3a:4e:b8:cb:88:7b:14:14:db:e2:e9:9b:
                    56:4b:6d:88:7c:ed:0e:3d:d1:d0:db:f4:00:14:2d:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:69:AE:F7:78:04:89:E3:97:8D:38:50:BD:C3:83:92:04:D1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/410e5526-7b08-3fee-9798-c1cc44afb72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:8f:39:f0:44:a1:6e:c3:0c:50:e8:a4:41:c9:fd:2d:84:
         4e:42:5f:aa:91:c4:1c:e0:15:32:f2:6a:38:e9:39:29:96:21:
         c3:f4:f7:cc:a6:82:b8:04:5e:08:ff:4e:ed:11:f0:43:c8:7c:
         2b:77:0d:2e:e5:d4:e1:63:1c:25:a7:65:6b:3e:e4:75:15:07:
         3e:32:6b:5c:b4:04:6e:0f:29:d9:6c:3b:20:23:b0:d5:0d:88:
         a9:3c:b0:8d:34:e8:1c:a6:c1:3d:76:9c:d5:04:70:0b:60:b6:
         a8:f5:8e:43:de:85:a3:b0:58:74:23:d4:39:9c:8c:35:fe:26:
         d3:85:7f:7d:44:38:f1:5a:fa:ae:47:ae:25:07:23:bc:6a:fc:
         54:fe:2b:ab:95:63:46:95:e6:17:77:b0:ac:71:ac:60:ee:b9:
         f3:de:c7:9b:43:28:91:d8:21:32:55:ce:6e:31:7f:b8:45:62:
         3f:bd:95:a5:12:5d:b3:7c:66:5b:80:13:3d:d8:4f:28:0a:60:
         d2:d1:20:25:52:20:8f:db:40:54:63:98:d4:30:d1:79:8a:e9:
         9f:20:c1:c2:d4:9d:3c:b6:37:57:4a:9d:48:3f:ef:dc:28:67:
         0e:e3:6e:9d:df:ab:6b:e8:10:9f:9e:bc:6d:05:78:1c:ab:2e:
         14:3e:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:04:32 2025 by rpki-client