Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/f0203cd0-7206-39c9-a409-58f9413893f3.roa
File:                     f0203cd0-7206-39c9-a409-58f9413893f3.roa (raw, json)
Hash identifier:          huo6+Oy+eKM9+2Ln9TEDUELqewQQK8HX9NviSkzhNQY=
Subject key identifier:   C1:E2:B9:07:68:AD:67:FB:DC:D3:A0:D5:0B:B9:D5:E1:91:F3:E4:6F
Certificate issuer:       /CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
Certificate serial:       010D0C9F43285849D9C4F7572350297D975AB5C0
Authority key identifier: 08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/f0203cd0-7206-39c9-a409-58f9413893f3.roa
Signing time:             Wed 14 May 2025 13:01:03 +0000
ROA not before:           Wed 14 May 2025 13:01:03 +0000
ROA not after:            Tue 12 Aug 2025 13:01:03 +0000
asID:                     401534
IP address blocks:        23.130.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:c4:f7:57:23:50:29:7d:97:5a:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
        Validity
            Not Before: May 14 13:01:03 2025 GMT
            Not After : Aug 12 13:01:03 2025 GMT
        Subject: CN=2753f372-5edb-4c3c-bde6-8f177d2f0f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:a7:9d:6c:b5:fb:d8:e7:7d:7b:30:82:2f:
                    67:e9:c0:d7:5a:86:2b:53:e5:58:8b:f2:6c:fd:4f:
                    ea:d1:5f:0b:2e:18:9e:e6:00:4d:54:e5:02:cc:a3:
                    ad:52:4a:ff:01:c9:0c:6c:a4:78:d2:93:8a:8e:f2:
                    c4:3e:4a:21:8b:3c:ef:ab:e5:30:16:2c:59:44:1e:
                    30:42:3d:04:e7:a6:03:8b:ca:28:61:12:2c:ee:07:
                    6e:01:72:97:43:c2:39:e7:e7:76:74:15:52:9b:ec:
                    0a:d3:2c:86:af:d1:a4:0a:60:d8:89:4f:e3:c4:3c:
                    b8:38:be:e4:8b:f3:2d:f4:04:5f:fc:80:fb:d3:dd:
                    eb:ec:fa:aa:ed:f3:04:ff:72:a5:46:8e:bd:01:55:
                    db:53:23:ef:ed:30:62:b7:7f:d8:08:df:55:ae:34:
                    e3:4c:79:ae:b3:f8:9d:10:8e:14:18:53:5d:e0:b9:
                    85:b4:03:4d:71:09:9d:3f:43:ee:9b:85:6f:21:69:
                    12:a8:fc:01:c5:f0:d5:8c:1a:fb:32:42:a3:bd:d9:
                    fe:98:80:df:5e:0c:54:c8:23:37:9d:4b:72:96:d6:
                    92:41:d4:9d:49:85:e1:f9:7d:49:8f:3d:a7:0d:af:
                    86:78:27:28:d8:c8:3e:00:b0:d2:7a:19:43:5e:d5:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:B9:07:68:AD:67:FB:DC:D3:A0:D5:0B:B9:D5:E1:91:F3:E4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/f0203cd0-7206-39c9-a409-58f9413893f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl

            X509v3 Authority Key Identifier:
                keyid:08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:75:5e:79:60:f6:77:08:2c:35:41:a4:a0:b5:a8:a6:cd:5a:
         c0:ef:eb:00:8d:12:18:70:f3:b1:82:17:a2:fa:a1:a5:38:ec:
         2e:aa:15:78:27:d4:cc:fd:79:05:be:39:75:5e:cd:5d:fe:cc:
         76:16:d0:c1:4f:33:ec:44:5a:a8:26:aa:83:7f:0b:67:cd:ce:
         1b:66:bb:05:f6:de:92:a3:48:a4:5a:7b:c5:f2:df:62:79:5a:
         0f:54:86:f6:ab:f1:e5:5a:3b:e3:df:ee:e7:fe:21:88:e5:2e:
         14:0c:74:9b:a1:6a:33:61:50:80:a5:6e:92:5c:fd:20:87:58:
         aa:66:3a:bf:cd:c9:6c:be:45:02:ae:a0:0d:c7:00:56:48:26:
         e9:e5:8d:ec:35:e5:5e:81:52:43:0f:e2:ee:c6:f2:67:99:79:
         6b:b4:2c:66:ac:3f:ba:00:5f:8e:e2:ff:86:e3:4f:2a:7f:0d:
         26:ca:77:1e:cf:60:c0:4c:17:af:68:be:10:c7:84:e4:7a:e6:
         fa:32:51:88:00:df:dc:79:f4:0a:30:38:a1:c5:8e:c5:09:f1:
         c9:fc:3d:06:a4:93:30:02:11:0f:9b:9c:96:ef:d0:1e:25:0d:
         24:f8:bf:92:4d:36:81:a2:4c:a1:be:de:02:8d:85:e9:cd:07:
         83:0a:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:41:54 2025 by rpki-client