Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa
File:                     863f00d3-0369-3e82-aee6-58fe03be78e9.roa (raw, json)
Hash identifier:          DBTblTraBmKa69mxS8qE+u5880bVoy4FrKAEYS6MAI4=
Subject key identifier:   FE:CE:4E:97:A3:BA:12:07:D3:F5:1E:DA:7F:BB:E2:4F:EB:50:94:6D
Certificate issuer:       /CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3
Certificate serial:       010D0C9F4328584A252570038E56935AE37AFF40
Authority key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa
Signing time:             Tue 10 Jun 2025 13:01:03 +0000
ROA not before:           Tue 10 Jun 2025 13:01:03 +0000
ROA not after:            Mon 08 Sep 2025 13:01:03 +0000
asID:                     401553
IP address blocks:        23.131.124.0/24 maxlen: 24
                          2602:f75e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:25:70:03:8e:56:93:5a:e3:7a:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3
        Validity
            Not Before: Jun 10 13:01:03 2025 GMT
            Not After : Sep  8 13:01:03 2025 GMT
        Subject: CN=ff0167a4-c20d-43c4-899e-5eabe4a05854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:b2:1d:08:db:b4:cc:c8:b3:60:1d:fd:e2:
                    3e:a4:e8:3a:45:12:7a:b5:c3:2e:ba:4a:12:e0:fa:
                    d7:c6:ae:6c:dc:a8:ff:09:3f:44:7d:e5:1e:8c:55:
                    3f:07:1e:d5:3e:4f:67:e2:ed:71:4c:04:46:9b:13:
                    f2:f1:08:98:64:07:88:63:8a:8b:08:9f:82:a0:aa:
                    4a:8b:82:35:16:74:6b:fc:d5:11:2d:43:c0:5a:58:
                    17:6b:8e:50:c0:fd:a4:e5:03:42:6f:f3:d8:f1:c1:
                    4a:ac:7b:66:de:a9:59:04:0a:26:42:78:39:dc:bd:
                    e0:e1:2b:37:cb:65:da:68:7a:4b:39:6b:a9:15:07:
                    fe:c5:4a:9b:b7:f7:82:5e:d7:2a:86:09:d1:41:35:
                    15:a0:c2:02:1b:f0:fd:44:da:a6:51:2f:32:89:1b:
                    db:fe:1c:85:fa:8c:73:e8:ed:c2:a0:d3:0d:38:85:
                    24:c6:37:0c:77:4c:2e:83:c5:02:f2:a8:6e:12:54:
                    02:ac:14:be:78:64:08:01:81:fa:cc:1c:ce:d8:be:
                    36:ff:a0:05:92:ed:d8:66:a3:a8:7b:6a:d9:e5:10:
                    1f:8f:2a:0e:3c:7a:d7:fc:17:7b:ab:09:d2:0e:b7:
                    f5:d9:61:46:02:8f:34:17:91:b6:49:b7:28:eb:dc:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CE:4E:97:A3:BA:12:07:D3:F5:1E:DA:7F:BB:E2:4F:EB:50:94:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl

            X509v3 Authority Key Identifier:
                keyid:72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.124.0/24
                IPv6:
                  2602:f75e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:8a:a3:3c:9c:fa:10:a4:2b:b8:ba:2b:83:69:19:0a:52:
         41:43:f9:00:02:74:17:e5:93:6d:c2:97:54:dd:0a:a9:b4:ff:
         9d:90:6f:00:d6:aa:2a:7c:14:5e:d5:fd:84:32:ec:11:3a:84:
         c2:59:55:d2:93:30:c7:49:04:8d:33:cf:20:1d:9f:22:2b:58:
         b0:78:34:7f:f9:20:0e:3f:65:7d:4b:16:10:39:f4:5c:32:32:
         1e:44:b8:9c:43:06:ce:c8:58:dd:e7:4e:ac:f2:bf:71:00:9e:
         4d:a4:d7:f8:4c:b0:db:c3:f9:ee:37:e2:78:29:f7:9f:44:2b:
         b9:f5:da:9e:0a:95:a9:5f:6d:a0:98:52:57:a6:b9:3c:db:ef:
         fe:2d:b1:a9:75:b8:93:82:0e:de:d1:4e:2a:1d:f1:95:26:1e:
         e9:09:1c:99:48:3f:e9:6d:4c:d0:6e:53:5c:62:22:1f:4d:0e:
         7a:c1:0d:76:5d:0e:51:a9:ba:6f:d2:e1:b6:e4:e4:69:62:18:
         41:14:42:8e:07:71:7f:6e:b2:9f:00:45:78:6a:13:0d:9b:fe:
         ae:a7:e1:6d:9e:0f:ed:f9:28:a5:25:b5:39:8e:23:a7:88:30:
         ed:f7:d1:32:cd:7e:d0:10:98:67:06:4a:69:ba:f0:d1:4f:e8:
         9f:45:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:16:34 2025 by rpki-client