Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa
File:                     a736b29b-8772-3206-a73f-e395ff229dfe.roa (raw, json)
Hash identifier:          CMLehwlR45RyI92KeseSEB0gDJLq4RgiIz0mnfMG8iM=
Subject key identifier:   00:9F:CD:88:B8:F0:CD:05:9B:6B:0A:85:A3:1D:AC:79:B0:D1:9C:0E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB91B99A2CC081E4434A2C5A0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     32613
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:99:a2:cc:08:1e:44:34:a2:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=a5868690-847c-4e72-9ac3-96abaa7ae867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:6d:7f:eb:d6:d2:3f:f5:b0:23:ab:c4:d0:
                    a2:bb:af:26:df:5d:0e:f0:0f:81:86:ae:62:68:c0:
                    cc:da:39:9d:a0:e2:6f:9e:25:18:e4:8c:3b:8e:0c:
                    14:39:c0:8c:06:35:59:32:51:fc:0c:e6:8b:f6:2a:
                    99:4d:3d:a3:b4:f5:43:d5:07:31:fb:e4:2d:de:e1:
                    82:22:6d:b7:7d:89:72:d9:82:02:a7:08:42:03:4e:
                    96:16:7f:4e:04:60:c6:ae:34:39:b0:27:18:97:d6:
                    fd:c7:29:f1:5b:e5:79:ac:ce:33:a7:0f:99:a4:a9:
                    58:6a:fa:24:77:3b:88:f3:eb:a4:4f:91:c0:31:25:
                    8c:40:3f:1a:f2:e9:73:92:b7:51:5c:39:90:7c:bf:
                    95:14:96:93:40:eb:65:79:34:e9:4f:73:e4:23:f7:
                    23:cc:3e:4d:05:7e:15:26:c8:0b:76:73:4d:60:2b:
                    41:70:0d:42:3d:1b:00:9a:d7:b3:52:7b:4e:c7:73:
                    4b:e7:a7:49:c2:23:e2:35:66:71:c2:81:9a:3d:62:
                    0f:ce:a6:64:be:37:f3:f4:12:65:91:8c:28:c7:f5:
                    23:84:b6:5e:17:a9:c2:c8:3a:a6:bb:aa:0c:06:8c:
                    6f:22:c6:d8:82:f9:77:34:01:3d:d2:73:0e:3a:f6:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9F:CD:88:B8:F0:CD:05:9B:6B:0A:85:A3:1D:AC:79:B0:D1:9C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:1a:04:24:18:7b:c8:71:e8:93:c8:94:fc:21:8a:34:9f:7e:
         0f:7c:a6:cd:2b:79:7e:df:f2:cd:78:77:92:21:df:c8:45:7f:
         3b:30:b3:7b:bb:fe:63:b5:b0:14:eb:37:54:c5:f8:72:81:80:
         3a:03:34:05:d5:d4:87:fd:ba:f4:18:b9:59:51:a8:4c:c6:a8:
         cb:d7:8b:36:db:2d:56:16:84:b0:70:21:45:5e:f1:c2:01:f5:
         2b:7a:86:69:81:35:d5:19:d0:41:de:06:d9:1b:82:5e:65:44:
         c0:24:c3:99:e6:10:6a:04:38:cf:53:e9:e7:b3:48:1c:51:84:
         0f:71:08:b3:48:73:46:e7:db:f6:e7:45:cc:7f:fc:7f:97:49:
         3f:22:57:ec:d9:4e:a6:d4:cc:11:bf:73:91:6e:cf:49:f6:ae:
         b5:2e:5f:1c:23:21:70:5f:9a:c4:b7:3e:5d:5b:26:35:2f:c0:
         b4:53:f8:33:c7:ad:8d:58:8d:fc:8f:7c:80:fc:98:01:8d:45:
         88:95:26:fb:d2:78:5f:ee:b1:a3:6b:20:b2:e6:24:8f:8d:ec:
         1a:d5:b2:95:38:7b:49:53:70:03:50:3c:51:40:23:d8:5d:86:
         da:87:60:cd:c3:8b:ef:e4:6d:03:4e:d6:4b:bd:ac:aa:6d:b7:
         8b:e3:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:36 2025 by rpki-client