Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
File:                     7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json)
Hash identifier:          PfOPh3qZINOC0qodbGBiiumyDiR5/3wXBEb+PFvEPGQ=
Subject key identifier:   C3:30:96:0D:28:1E:36:87:FC:33:81:48:CF:34:F3:31:F9:92:A6:FD
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F43285849D85F88088DE45EEBFF947280
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     398898
IP address blocks:        23.168.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:88:08:8d:e4:5e:eb:ff:94:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=30467f74-ebaf-4e41-8fc8-e92ec0621f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:fd:de:2b:d9:1f:ab:f3:ba:6e:32:a4:6b:
                    f3:de:8d:a1:9a:71:e3:0b:86:03:81:cc:db:05:da:
                    2f:42:9d:ff:e5:62:86:07:63:13:f5:46:f2:a8:14:
                    e5:b8:82:91:5b:48:ee:15:03:95:8d:54:fb:49:57:
                    62:c6:b2:12:71:7e:61:7e:6c:74:10:01:fa:bd:a5:
                    4f:23:b9:e4:fb:bb:b5:7f:04:4e:b3:dd:56:2c:1f:
                    fb:b4:6f:2e:fb:8b:68:b0:e2:a0:6b:6a:06:63:2b:
                    88:69:3d:46:76:b2:4c:5f:88:94:e9:f5:f4:4b:50:
                    15:a3:e4:65:74:65:74:c0:9d:e0:b4:59:6f:29:df:
                    56:72:5c:6f:7c:40:46:c8:46:a4:39:4e:88:f8:3d:
                    8b:db:10:c8:5f:c7:fe:35:62:08:9e:14:02:f2:08:
                    d0:c5:de:9f:b1:3a:cc:69:54:09:4f:cf:9e:08:3b:
                    72:0c:54:61:b2:59:55:c8:f0:d5:19:18:96:38:05:
                    e0:25:e6:8f:6d:74:a4:86:50:82:67:e7:18:88:f5:
                    3d:d1:9a:fe:5e:7c:9f:d2:95:42:0e:85:36:a3:fb:
                    4a:09:dd:88:d5:b2:ca:8b:1e:9f:68:fa:c3:88:86:
                    3d:f7:0b:b6:29:9e:3a:4a:15:bb:87:f5:ef:8e:51:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:96:0D:28:1E:36:87:FC:33:81:48:CF:34:F3:31:F9:92:A6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9c:d9:5b:07:b4:80:b9:2b:6b:55:3b:d7:0e:32:af:2f:47:
         a7:75:8d:9b:06:c2:94:22:56:f5:5a:bd:ea:c8:5d:fe:43:8b:
         86:32:a0:28:13:3f:ca:55:3a:3a:71:4e:9f:97:bd:5c:65:20:
         7e:a4:0e:88:79:28:7d:f9:eb:5d:58:ea:04:a8:6c:81:b9:94:
         23:0d:63:0d:48:13:c1:01:6e:ec:1d:31:11:a3:dc:e8:4b:db:
         4a:f5:1a:ed:82:f0:41:33:3b:a4:a2:48:cf:b4:8a:28:bb:e5:
         fe:29:16:b8:de:01:6e:ff:b1:07:b8:1d:db:41:7a:02:4a:b5:
         e5:f0:b7:f4:c9:90:19:40:5c:7c:11:a2:ab:e1:76:1e:34:f2:
         40:ef:0e:cc:cd:49:da:28:2f:21:aa:02:c0:22:ee:3d:5e:64:
         ec:a2:e0:16:02:d7:f8:2a:76:7c:80:34:27:69:df:0f:a7:3b:
         d7:fe:c6:6a:e3:fb:47:f9:a6:9c:85:0b:37:5a:a1:17:48:92:
         f9:97:5a:09:1d:7d:3a:94:a2:18:97:f2:c5:29:7e:fc:45:0b:
         3d:f3:04:a3:b4:0a:ca:86:1b:db:7f:a0:ca:e4:1d:1d:79:05:
         12:0c:e5:63:1b:0d:99:44:a4:6b:7e:61:dd:1c:53:43:2d:7b:
         0f:3f:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:49:37 2025 by rpki-client