Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
File:                     fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa (raw, json)
Hash identifier:          X3JYQZXKmfS3rD409IqK8HhfP4sKFOwm+y20PTR+7to=
Subject key identifier:   7B:7C:4E:8B:E9:C8:C6:CE:B4:36:5C:24:4A:1E:80:39:32:32:C6:74
Certificate issuer:       /CN=4d6573b2-9f3e-43b9-a710-eaee606df226
Certificate serial:       010D0C9F4328584A331AFA615B17A21A1502D380
Authority key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     3128
IP address blocks:        143.200.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fa:61:5b:17:a2:1a:15:02:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6573b2-9f3e-43b9-a710-eaee606df226
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=a6891890-5b24-4046-8163-25ba1117ebb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:10:f3:0a:77:bb:4a:3b:1e:17:94:b7:36:
                    ad:4b:0a:aa:ad:96:f4:cf:cb:d8:3d:7a:12:1d:70:
                    24:15:c7:59:6c:38:19:0d:79:d6:26:a8:0c:3d:3f:
                    17:02:cf:78:c8:b2:39:e1:d7:b6:48:3b:7a:fb:41:
                    40:15:fc:7b:c6:f8:e1:7a:9b:a7:c9:1f:c7:48:47:
                    40:db:e6:06:4d:02:f0:d7:5b:36:39:cb:19:c4:e2:
                    74:01:99:bc:cc:96:ae:80:c5:d7:60:5b:4d:58:76:
                    9f:fc:3b:a6:e7:40:41:fe:89:b7:1e:d3:46:a5:f1:
                    29:9c:16:2f:bc:ba:e2:90:1f:0c:56:8c:5c:c5:d6:
                    01:53:3c:0c:5a:f2:4e:3f:3e:53:e3:22:24:f4:83:
                    ee:89:e4:3f:ca:2f:40:00:7e:4b:e8:52:82:fd:0b:
                    c3:8e:cb:2f:9e:4f:75:6a:79:48:1d:bd:e5:20:28:
                    cf:65:14:b2:35:be:90:f6:29:9d:eb:db:42:62:d3:
                    22:c8:a4:28:20:02:d9:97:f3:91:61:1a:b4:aa:40:
                    56:f2:2c:94:00:c9:ac:2b:45:a4:57:4e:7c:c5:d8:
                    6f:6b:24:91:14:70:78:69:bc:aa:bf:f0:0c:78:a0:
                    87:8f:9a:04:13:f3:1b:42:cd:22:e3:c1:fe:a7:f5:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7C:4E:8B:E9:C8:C6:CE:B4:36:5C:24:4A:1E:80:39:32:32:C6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl

            X509v3 Authority Key Identifier:
                keyid:20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:08:49:95:ad:b4:ee:f7:3b:7e:d8:df:15:8a:66:af:11:7c:
         41:c2:f5:5e:77:86:0f:71:89:4c:14:fe:fc:67:e9:94:1d:44:
         c0:9a:14:6b:e6:7b:9e:96:aa:61:05:c1:b7:44:da:95:bd:fe:
         b8:ce:4f:cf:a5:78:60:9d:e6:4b:1a:87:4d:77:78:31:84:a9:
         f0:31:a2:20:57:3f:47:9b:51:b3:4e:21:11:69:a6:e0:9d:3b:
         35:5c:dc:44:09:7f:04:88:af:f9:10:c5:77:1e:2a:d9:ba:87:
         f0:7a:c2:01:59:2f:75:06:3f:16:38:3c:7e:a5:4a:99:fc:df:
         2b:f6:85:1b:af:8d:03:8a:40:68:27:71:d2:69:cc:13:a9:5a:
         f9:42:fb:c4:12:a8:9f:6a:d0:c4:09:81:2d:ed:58:a7:17:c3:
         55:98:7a:01:87:23:56:85:6c:73:a8:0f:8d:0e:a4:50:e0:74:
         ab:18:f9:fd:9a:ac:be:26:fa:a6:c3:26:73:48:68:11:0f:0b:
         96:2a:bd:11:ac:39:9e:f8:a7:b8:e9:9c:d9:1d:17:02:e1:14:
         52:bb:15:36:1a:9a:7c:ed:0e:9a:9c:df:cf:a9:3e:dd:fe:82:
         43:fc:ec:b4:45:51:2c:b7:b2:00:a0:39:bc:5e:0d:45:d9:56:
         92:d2:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:20:08 2025 by rpki-client