Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/b4174f5c-f69a-3fad-bdf0-3da381ca7981.roa
File:                     b4174f5c-f69a-3fad-bdf0-3da381ca7981.roa (raw, json)
Hash identifier:          3rneGxB/yAAhYcs+7Ara8pQT/q7BK2akZEcB7G4IDUE=
Subject key identifier:   63:B4:5C:B6:0F:49:17:06:07:9C:57:90:9F:75:7E:A0:04:AE:A2:0C
Certificate issuer:       /CN=be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad
Certificate serial:       010D0C9F4328584A4AD58CFF6B76024F17728520
Authority key identifier: CA:7E:20:30:C2:33:74:06:1A:99:76:50:EC:22:FC:E1:1A:39:61:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/b4174f5c-f69a-3fad-bdf0-3da381ca7981.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     23471
IP address blocks:        205.236.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8c:ff:6b:76:02:4f:17:72:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=ac4f0391-7f3c-4ff9-aa6e-3fe492899076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:38:50:c0:2f:79:eb:e0:fe:62:93:2d:f7:
                    0e:80:85:ad:17:58:59:26:17:c7:7d:80:82:8a:6e:
                    a3:58:a4:be:f0:23:f7:0c:72:de:18:0f:35:cd:70:
                    ba:12:f8:0e:6b:5d:a4:95:48:47:6e:74:2e:47:70:
                    e1:0b:c8:f2:4d:d2:55:b0:98:7d:90:43:f7:c1:3f:
                    a8:49:04:7b:36:c5:00:00:37:de:6a:ff:72:8b:b7:
                    d2:f3:82:19:65:4e:8e:b3:e7:b2:eb:5c:1b:92:5a:
                    8d:d9:88:80:41:77:44:2e:c6:af:01:42:78:0c:1e:
                    ea:78:eb:71:8c:d6:d3:c9:f1:db:0c:59:d1:b1:9a:
                    e4:15:b3:92:71:2f:44:46:e3:a9:1b:e8:f0:70:11:
                    c8:08:0d:1e:fc:14:da:16:8d:dc:00:2f:79:26:8c:
                    24:f4:0f:99:d2:a3:b9:af:7d:e7:8f:ef:cc:9c:d7:
                    0c:ad:90:87:f1:c6:ab:2e:a4:ac:3c:86:45:d5:f6:
                    13:70:75:45:88:b0:48:8e:6d:03:d3:3a:19:cd:77:
                    62:04:43:ff:de:89:c5:80:ea:c6:0e:4c:1e:93:fd:
                    38:12:64:73:df:9c:0c:1b:d7:b4:d7:ed:8a:f2:d0:
                    20:b5:ed:76:4e:0c:b6:40:4b:7d:d5:18:e9:04:58:
                    1a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B4:5C:B6:0F:49:17:06:07:9C:57:90:9F:75:7E:A0:04:AE:A2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/b4174f5c-f69a-3fad-bdf0-3da381ca7981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.crl

            X509v3 Authority Key Identifier:
                keyid:CA:7E:20:30:C2:33:74:06:1A:99:76:50:EC:22:FC:E1:1A:39:61:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b0:98:e3:ea:2b:5c:cf:58:42:36:40:26:99:fe:88:37:91:
         8b:36:13:0b:09:20:be:1f:fe:88:b9:67:0e:17:61:fa:dc:db:
         db:81:61:b9:4e:ec:b3:f5:fb:23:01:54:5d:23:d3:05:2f:f6:
         85:e1:10:73:60:de:31:f1:c6:04:9e:ed:24:07:54:f5:57:75:
         9b:14:3c:3d:da:4d:b1:b2:9a:7a:2f:06:a1:94:39:7c:d1:9d:
         65:3b:51:0b:da:92:d6:a5:93:62:be:41:d6:35:62:bb:a1:1c:
         6f:74:33:80:9b:06:92:e6:24:0e:86:b6:17:49:26:eb:d2:ee:
         bf:87:29:21:b5:71:b0:a3:05:4d:ef:19:72:ff:15:98:b9:d4:
         2f:d6:f6:28:d5:71:5e:b3:21:b7:b7:31:d2:21:9a:cc:f4:07:
         86:88:8a:ef:98:2b:c4:2b:c5:f4:84:20:ea:53:99:6c:ef:2a:
         3d:82:d9:10:72:d0:ed:cf:a3:7d:ca:3d:e2:29:9a:23:1a:b2:
         4a:3f:65:df:e9:e3:17:6e:e9:6f:d2:81:4d:16:4e:dc:1e:57:
         95:28:a0:05:01:85:b3:7e:91:f3:3e:17:4c:b8:bf:c3:c3:ef:
         21:ea:b2:13:da:cc:dc:74:50:5c:86:98:5d:47:ab:18:29:26:
         a0:a0:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:14:22 2025 by rpki-client