Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa
File:                     afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa (raw, json)
Hash identifier:          rj4Nv5Nk+eNhDXU0Y90jxFbAIrfkHJIK5o4JtuV4WAA=
Subject key identifier:   E6:CC:38:1A:2D:7E:64:45:F9:C7:0E:BF:15:28:DC:5C:3E:EE:D6:3E
Certificate issuer:       /CN=66580030-eaac-4617-b624-3b0a2974a04d
Certificate serial:       010D0C9F4328584AF0F14BBCCB7315E4BAD32F80
Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     23352
IP address blocks:        199.30.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4b:bc:cb:73:15:e4:ba:d3:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=7c52a5db-4e0a-47bf-845a-75201ba2a191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:7a:0c:30:07:0d:1b:a1:08:4d:f8:90:79:
                    89:2f:d3:e9:28:3d:ba:b8:05:17:a5:6c:c1:35:74:
                    19:22:af:96:05:aa:1e:21:e2:72:bb:7a:8d:58:54:
                    f5:7a:49:bf:69:4f:4f:2f:1d:98:8c:45:64:cd:eb:
                    79:09:87:48:9d:73:9e:c8:d6:8a:04:89:7c:86:b1:
                    c0:c4:3b:31:31:0a:98:3e:12:95:e0:97:a6:62:45:
                    d5:16:38:23:8f:f6:28:da:48:13:9d:55:b3:68:4a:
                    2c:87:ac:0e:5e:40:c1:6b:d0:82:a6:c3:26:c5:1e:
                    98:d2:ea:f1:89:18:41:38:e2:c7:7e:fa:07:4f:83:
                    1c:1e:c4:46:e4:42:89:a5:e6:ef:08:af:29:59:eb:
                    48:a6:19:ad:59:38:4f:52:24:a9:6e:06:59:2f:d6:
                    5f:89:9c:db:c7:d6:d7:cd:05:ea:fa:95:cc:e5:36:
                    d7:71:a7:fa:ed:8c:b4:b8:f4:5d:57:40:6a:d4:c7:
                    3a:0a:14:27:72:31:53:1d:10:4d:47:4b:5e:46:e7:
                    eb:76:f9:9b:e3:b6:29:f5:d1:cf:b7:66:6d:2a:00:
                    91:da:57:b6:fc:79:4d:6e:75:0e:55:75:5c:f3:21:
                    c2:a7:bb:d5:3e:ca:9a:c4:5f:aa:cf:05:4f:8b:f8:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CC:38:1A:2D:7E:64:45:F9:C7:0E:BF:15:28:DC:5C:3E:EE:D6:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/afafeea4-994f-3a14-8b6b-62dbb74afdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl

            X509v3 Authority Key Identifier:
                keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:54:0a:7d:0f:af:07:19:a1:c5:ef:1d:b0:aa:2c:f0:47:91:
         ef:9f:be:28:cc:2e:34:f7:e5:40:5e:18:53:1a:61:19:22:59:
         55:d0:91:a1:43:a4:fb:c3:8d:3a:e6:fc:b9:f0:a6:d5:96:b3:
         00:f0:95:2d:62:41:9b:92:79:55:a7:c8:a3:e9:3c:6f:87:d3:
         16:c6:21:19:94:23:fc:2d:4c:6c:3a:8e:1d:80:d5:2f:7e:bb:
         36:1b:8c:75:0d:94:a2:42:24:c8:48:72:78:a6:a0:20:c2:fb:
         b3:26:7a:4c:46:e1:ca:ec:46:72:90:cf:5c:9e:0c:69:7f:23:
         1f:1a:7b:23:9c:2c:bf:aa:3b:60:db:fb:52:43:df:50:63:b2:
         93:d5:10:3a:91:95:ad:79:b4:76:92:18:eb:33:51:a5:1b:b8:
         e6:b8:3b:0c:7f:ca:bc:96:4e:42:3c:50:18:84:30:cc:ab:b5:
         79:19:b3:2d:ef:04:a0:25:d2:57:cb:61:78:85:72:9b:d0:44:
         82:e2:07:fb:6d:48:bf:2d:5f:bd:bb:01:84:49:ee:c9:ba:5d:
         bf:6f:8b:82:7a:b1:04:80:0f:ec:41:17:fa:85:62:e1:66:00:
         3b:96:7b:5d:18:eb:b5:af:c5:25:1b:99:28:8e:09:6e:f5:e6:
         19:30:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:30:10 2025 by rpki-client