Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
File:                     7f1ad145-2f41-341d-8595-a8d6dba4792b.roa (raw, json)
Hash identifier:          tUDv0lYfQrf2nYJjzTYRxqH7nW4I97puBKkfzfoduhI=
Subject key identifier:   F6:EF:C8:EE:92:8F:4E:92:97:5A:7E:B6:6A:0C:58:35:8F:8F:4B:E8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC3F8C9E9A8ABA3910C80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        24.244.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c3:f8:c9:e9:a8:ab:a3:91:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=3f7334dd-d367-4b30-b5a2-4eaa9f66f7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:98:92:32:b5:3b:95:75:54:46:17:3a:c3:
                    a5:51:1b:27:ce:09:b4:e6:8e:45:b1:06:0e:35:7e:
                    fa:43:c3:ff:21:1b:c5:42:bd:2a:33:c6:88:d1:1c:
                    63:c9:ae:40:17:c6:f9:8e:3a:2c:fe:ab:37:39:5f:
                    51:45:71:04:9b:75:f4:d3:57:16:a1:43:11:d4:40:
                    ff:ed:3e:25:1d:1a:7f:71:79:ea:0c:ab:9a:67:05:
                    83:47:27:2d:8d:bd:47:4a:bb:7f:bc:1d:9d:e7:ae:
                    c6:40:aa:b0:73:50:99:09:39:49:85:c7:51:f9:44:
                    2a:6f:7a:f9:75:85:e5:b2:9f:cd:8a:bc:e4:ed:6d:
                    49:1a:aa:c1:da:a8:19:e5:f5:02:3d:94:a1:ff:b7:
                    c5:b3:b1:d0:22:bf:23:d8:71:79:1c:56:2a:8b:2b:
                    44:8c:ff:85:2a:41:f2:85:ab:82:71:5e:94:e8:2a:
                    1e:ef:c4:f4:4f:f8:f1:5c:2e:98:ee:a9:5e:12:d6:
                    5a:e1:86:5e:08:76:96:ea:25:b0:3d:d2:f0:07:73:
                    cd:c2:f0:5b:b9:8a:42:b6:7a:4c:0c:10:73:a3:cd:
                    ff:0d:3f:88:f0:d9:50:85:c6:b4:2b:6b:ed:bf:3a:
                    c5:d6:8e:21:59:fa:4b:04:1e:9d:51:d6:76:5c:32:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EF:C8:EE:92:8F:4E:92:97:5A:7E:B6:6A:0C:58:35:8F:8F:4B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:54:e1:f3:d9:1f:94:ca:4e:19:dd:f9:b5:25:3e:86:f5:59:
         e5:1d:aa:f4:5f:f3:b3:8c:dd:54:f7:c8:45:15:fc:9e:d5:d8:
         74:04:7b:34:b6:f2:60:db:f3:0d:a1:3c:92:ff:f5:84:ef:0a:
         59:15:cc:e2:77:48:98:a3:5f:96:26:98:32:74:d7:cb:ec:91:
         ae:90:96:f3:12:9e:35:be:01:14:67:9d:6a:82:28:9d:ec:80:
         34:af:17:41:30:38:ad:ee:95:98:7b:1f:e0:ae:f8:c8:1d:81:
         00:f0:ae:b1:87:f5:9c:f4:6b:ed:2d:00:35:6e:5b:1e:64:e2:
         a7:88:00:ff:76:7c:60:8a:8c:e0:0d:57:40:df:c4:c1:8b:b7:
         d9:49:5d:19:f6:f1:f5:e3:b2:92:e2:62:10:8a:97:90:6e:58:
         88:cf:ad:d4:db:fe:e8:cc:97:14:26:31:5d:45:14:d1:4a:6e:
         cb:62:11:32:b3:8d:fc:29:0f:1f:bf:48:03:67:d2:99:d2:95:
         7f:1f:b2:01:86:01:f0:fc:46:ae:0b:42:ee:e0:7c:e4:cd:d3:
         f6:f5:3f:d0:b2:dc:2f:e3:60:2d:fe:de:3c:bd:40:0c:34:e5:
         ef:db:75:28:ab:d0:d1:68:08:72:9c:b4:65:42:68:59:91:c2:
         c9:9e:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:02:35 2025 by rpki-client