Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa
File:                     6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa (raw, json)
Hash identifier:          BFf5ZeqW3BWWed4Z2CfuJXtXY2/j+O8uvHMmjdoXc84=
Subject key identifier:   F0:45:D6:09:1B:A0:F3:F0:62:E5:9C:19:CA:74:FA:63:12:54:1B:B4
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584A506AEFE817E39BEA23E9E5C0
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     400619
IP address blocks:        23.247.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ef:e8:17:e3:9b:ea:23:e9:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=85275cde-6ed8-423d-9558-c287798941a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:29:e9:c8:51:e9:a3:79:c7:e9:e3:9f:fd:
                    e9:24:d1:a9:e4:ab:eb:00:72:1d:86:34:65:42:50:
                    c6:9e:1c:1a:15:65:d3:ae:32:f5:64:14:8a:2a:a0:
                    52:23:2b:23:84:44:19:c9:0f:4d:7c:59:61:42:56:
                    90:14:55:07:5d:20:f6:bb:33:14:0e:f2:e2:4f:de:
                    1c:2d:cd:37:8e:4d:35:a3:72:e1:12:66:ce:1a:f3:
                    e0:08:84:45:a3:2f:d8:e3:54:d1:7c:6d:40:e5:c7:
                    e0:ff:97:20:df:19:cb:5a:85:00:58:78:b5:69:87:
                    ff:df:b9:0e:22:25:09:0b:f1:43:d6:a2:e3:05:cb:
                    f8:db:4a:cc:2c:da:14:75:96:ae:5b:51:36:54:82:
                    b7:70:28:8f:81:d3:f6:dc:c4:b5:ce:92:8e:72:ba:
                    22:57:41:8b:27:e0:19:a7:1e:85:92:d6:97:39:b8:
                    93:54:28:91:93:f3:71:cc:67:3c:6e:51:70:d7:ab:
                    f0:dc:07:ab:3b:4c:4e:af:2e:4f:a0:48:23:c9:4a:
                    53:72:3b:d9:3c:06:c1:78:88:7a:a3:c4:43:42:92:
                    00:de:5c:ff:7b:08:ad:70:ea:ae:15:e4:e1:04:d8:
                    72:d6:f0:f8:9c:c9:d0:a3:c0:80:e8:a7:f8:ba:b4:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:45:D6:09:1B:A0:F3:F0:62:E5:9C:19:CA:74:FA:63:12:54:1B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:33:c8:94:06:9f:88:93:1f:9b:7d:b4:78:95:f6:cd:07:
         4f:b1:55:e6:bf:48:7e:7c:66:df:32:81:e2:a6:e2:47:fd:fc:
         b3:79:d1:ce:fa:df:1a:57:78:32:09:5a:90:cb:db:e8:0b:98:
         7c:5b:51:4c:ff:5f:b3:60:2c:68:cd:92:7a:e9:3d:bb:4b:ed:
         fe:43:f3:e4:c7:e3:4e:0e:cd:f3:50:fa:5a:10:a2:f4:08:bb:
         70:0b:e0:02:18:53:3c:b0:a8:2c:3e:18:a5:2e:ab:ff:f0:bb:
         d8:38:45:88:bc:75:5f:e5:20:ab:50:93:62:ee:e8:f4:8b:db:
         67:6c:26:0e:c8:9e:0b:66:0d:5f:0b:c3:7a:46:51:3f:e4:c3:
         62:6b:90:67:63:3b:50:c8:c0:08:cb:95:75:ae:f8:5b:ed:49:
         90:4a:38:75:a0:b1:aa:e5:d5:9d:61:91:25:73:d9:2d:0d:75:
         95:77:00:0f:19:d6:d1:24:85:94:97:29:d3:8d:1e:95:02:ec:
         1e:ac:33:ee:04:cd:58:c3:00:58:95:33:3a:0e:61:7b:8f:18:
         08:4e:33:99:4c:51:a7:a5:8e:6a:f3:04:98:cb:d6:3a:d2:3b:
         c8:5e:2c:c8:07:6f:1c:da:dd:9c:f1:f0:e9:26:31:df:67:be:
         4e:33:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:33:58 2025 by rpki-client