Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/75c87170-97fe-3422-9431-4f1945b36749.roa
File:                     75c87170-97fe-3422-9431-4f1945b36749.roa (raw, json)
Hash identifier:          rHcsYmlWO5kxZPTZgZS3D1hf18yNe6hx2nFL0ba1yhg=
Subject key identifier:   8B:EA:83:E9:14:41:8C:D1:71:8A:25:81:B7:58:D7:15:82:51:E9:67
Certificate issuer:       /CN=798f6104-a838-4bf4-a3e9-0419c1690ad8
Certificate serial:       010D0C9F4328584A5A30823B015BAC440FACCF40
Authority key identifier: A1:3E:D6:27:25:F3:B1:70:FC:F6:4D:7F:BE:A5:E0:6A:82:1F:67:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/75c87170-97fe-3422-9431-4f1945b36749.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        23.132.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/798f6104-a838-4bf4-a3e9-0419c1690ad8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/798f6104-a838-4bf4-a3e9-0419c1690ad8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:82:3b:01:5b:ac:44:0f:ac:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f6104-a838-4bf4-a3e9-0419c1690ad8
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=a73b8e0a-041e-4e9e-ba5b-0e4c6af53e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:88:38:47:7c:3b:b9:ba:87:ca:49:12:67:
                    7c:03:a7:87:72:82:e0:45:3c:d7:8e:7f:bd:75:1e:
                    b3:f1:74:60:25:a9:ab:17:99:6e:73:29:10:4e:69:
                    d4:34:05:0d:81:04:a9:a8:86:9b:2d:14:bd:87:be:
                    b9:7a:d9:cb:71:ac:03:36:e6:ef:11:7f:72:c5:b6:
                    12:1c:db:f0:2f:44:a6:9d:0e:67:df:b4:20:74:bc:
                    55:c7:0d:ff:93:63:8b:ca:2f:ae:23:4c:a4:aa:5e:
                    33:88:64:e5:46:11:cd:97:50:4b:52:dd:0d:b3:ef:
                    65:e2:95:31:a0:cf:07:d0:f9:45:3b:d4:69:b9:84:
                    c7:6e:5b:8b:f7:b8:17:83:55:c0:bc:62:5d:90:56:
                    a6:a8:8a:2a:12:19:25:85:d1:b5:37:6d:23:f6:49:
                    24:f6:90:ef:26:e7:b2:1b:62:36:e9:ba:3e:a5:0d:
                    f2:4a:3f:a9:61:72:cf:97:17:24:2f:f0:31:88:05:
                    d8:d0:61:82:55:d6:46:bc:23:f5:9d:92:cd:7d:4e:
                    f0:f9:69:d0:02:6f:f3:43:37:30:99:96:8d:46:af:
                    fe:47:1e:53:64:e5:34:b6:de:ed:25:23:db:9e:ff:
                    3c:f4:9d:4d:bf:87:29:19:4b:cd:24:15:cd:7b:cb:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EA:83:E9:14:41:8C:D1:71:8A:25:81:B7:58:D7:15:82:51:E9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/75c87170-97fe-3422-9431-4f1945b36749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/798f6104-a838-4bf4-a3e9-0419c1690ad8.crl

            X509v3 Authority Key Identifier:
                keyid:A1:3E:D6:27:25:F3:B1:70:FC:F6:4D:7F:BE:A5:E0:6A:82:1F:67:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:29:ab:81:c1:da:7e:08:ed:af:3a:4a:92:65:90:f3:b4:29:
         f8:11:3c:7e:da:12:00:43:06:86:2a:18:a7:6d:6c:f9:6b:f4:
         15:51:33:22:34:d8:26:92:2d:91:1d:3f:a4:12:58:e6:c0:db:
         af:03:de:2f:79:88:40:cb:e4:71:ae:60:14:95:20:e3:8c:b4:
         3f:70:e2:f7:03:96:66:23:c1:5c:ea:70:33:c7:92:fd:5f:8a:
         9e:b7:1b:89:29:ce:9f:9f:90:5b:db:57:a9:ea:b4:2f:59:cd:
         3e:27:1f:98:71:b4:a9:0c:e2:08:27:25:49:55:3d:b3:97:fe:
         4d:4b:a7:64:62:32:9d:f1:7e:d8:c9:75:c2:d7:20:d3:e6:e9:
         60:7d:70:ee:b9:0f:83:0e:83:20:e1:fb:57:e2:a0:c7:5f:a2:
         ac:3c:50:1c:da:c5:1e:02:60:1d:7d:68:ae:34:71:b4:7d:fb:
         c7:39:37:ce:5b:d3:ae:42:b6:25:b2:a6:25:2e:fd:fa:59:9a:
         98:36:5a:c2:d3:df:95:9e:54:33:c9:d1:ec:72:05:03:91:a0:
         07:28:27:36:7e:fa:1e:72:10:67:ef:93:22:0c:19:8b:18:06:
         e3:3f:9c:67:a4:5f:3f:e1:f3:a5:d7:74:67:09:d6:47:55:13:
         06:fa:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:01:24 2025 by rpki-client