Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa
File:                     3a2c937e-43a7-3104-9c15-c14d170576fa.roa (raw, json)
Hash identifier:          7xC0FaxyWUYkXfBtbKSN9tYeuqRHxyCxF9CBdSV2EGE=
Subject key identifier:   BB:5F:60:DB:34:F5:87:78:66:09:DA:CA:74:76:3B:49:EC:C6:58:5B
Certificate issuer:       /CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6
Certificate serial:       010D0C9F4328584AE1968619730E6F0D6B1C49A0
Authority key identifier: 61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     376
IP address blocks:        206.167.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:86:19:73:0e:6f:0d:6b:1c:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a02b30f9-74bc-4bf4-904a-48570cca2198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:e4:e2:44:cc:54:6d:c3:0b:49:6e:2c:e4:
                    7a:a0:c4:96:18:86:b4:00:2a:82:5b:e9:23:21:d2:
                    1a:e0:2f:2d:1f:d3:fb:48:42:b2:66:55:5c:1f:53:
                    f1:0d:af:91:42:f8:1c:ce:d2:8d:36:8e:67:96:4d:
                    61:18:64:9b:c9:69:84:ee:f9:39:3f:f9:3e:83:b2:
                    d9:4d:92:3b:ff:a0:76:79:b0:d4:73:a8:0a:ae:9b:
                    13:ab:8d:4b:5b:35:3d:26:68:68:f5:7b:00:8c:3a:
                    43:bc:36:30:55:41:5b:25:9c:ee:6d:1c:62:0a:6c:
                    e2:bb:cf:18:41:57:aa:ec:42:a0:4c:b0:5d:a1:68:
                    d2:69:92:86:81:fd:97:29:77:ec:b2:68:9f:3f:63:
                    80:c5:7f:cc:3e:11:44:bd:44:07:17:95:ef:ac:02:
                    df:11:b0:18:89:32:dd:14:0e:21:d4:57:7d:5f:3d:
                    92:7c:a6:01:e4:e9:a6:24:10:16:bc:0e:e7:c7:c7:
                    f9:85:ee:1f:6e:33:d3:8f:2e:b7:2b:c4:d5:42:d4:
                    8f:85:53:85:73:33:e5:79:1c:c0:27:2e:d4:16:e6:
                    c5:29:42:46:c4:37:3d:e4:8b:58:e8:91:ae:67:ae:
                    7b:be:b6:b1:6e:7d:5a:a1:b2:c0:e1:27:e2:30:64:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:60:DB:34:F5:87:78:66:09:DA:CA:74:76:3B:49:EC:C6:58:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl

            X509v3 Authority Key Identifier:
                keyid:61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:2a:5e:85:cd:87:98:83:e1:67:a8:ae:ef:62:b4:f0:35:
         4c:c5:23:21:3e:21:9a:e5:71:c2:35:5c:d8:b0:2c:b2:58:16:
         20:cc:4a:38:7a:3f:e3:ac:2d:28:0b:4b:f3:2f:2c:d0:a3:c6:
         eb:93:c3:e3:49:bf:f4:93:57:3d:2b:15:18:e3:be:35:91:15:
         90:57:b6:60:a6:89:14:31:48:f4:c8:00:fb:25:72:08:b9:8e:
         09:01:85:ef:92:e6:cd:03:c9:67:d5:30:e6:52:e5:02:27:f7:
         78:05:cc:38:40:3e:24:70:bd:e4:e4:4d:8c:5c:62:01:72:d3:
         46:aa:b3:04:96:f6:01:eb:da:4f:9d:c6:1d:2f:43:05:db:27:
         9e:b5:f2:20:67:41:6e:d2:53:db:b7:05:c9:28:ed:c6:23:0c:
         d4:81:3b:2b:f6:3d:a4:26:1c:42:86:e3:e1:6d:6e:c3:15:9f:
         2c:e0:81:37:1b:94:00:3e:b3:8a:d2:4a:99:af:43:92:ea:1d:
         47:36:d5:30:79:07:57:9a:42:e3:8b:ff:6d:2b:eb:76:5b:59:
         72:55:b6:41:15:2c:bb:38:59:67:ea:97:26:f9:ef:57:11:5c:
         26:15:3c:62:77:d1:82:58:62:f8:ef:7c:67:75:65:01:10:7e:
         7c:c2:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:13:16 2025 by rpki-client