Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/c23c4a92-b75a-3264-b7f6-35442223fe89.roa
File:                     c23c4a92-b75a-3264-b7f6-35442223fe89.roa (raw, json)
Hash identifier:          gM1EjXq6TUSTJWK1qQfiJ8FLL0HewbORgqHGsDrZEO8=
Subject key identifier:   24:C3:C0:02:31:42:06:8B:E2:62:98:54:BB:C8:E2:6B:B9:C9:AF:A5
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F4328584A96368FF65574B5116D5F7C00
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/c23c4a92-b75a-3264-b7f6-35442223fe89.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     393875
IP address blocks:        152.37.1.0/24 maxlen: 24
                          152.37.2.0/24 maxlen: 24
                          152.37.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8f:f6:55:74:b5:11:6d:5f:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=14aef787-288e-43e4-9786-046d2c2a7b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:e2:17:79:68:e2:a1:21:24:52:0b:43:30:
                    7f:b7:b1:d3:4f:55:cf:4d:10:8a:d5:71:67:e0:4c:
                    78:fa:9e:3d:18:e0:c4:55:10:3e:82:86:c0:d5:e0:
                    1a:35:4a:d2:d9:b7:80:7a:5f:c1:7b:6b:86:4f:d0:
                    ef:4d:5f:e6:b7:9b:e8:9e:f0:fb:de:98:66:9f:95:
                    1b:fd:2d:b9:6a:67:3c:c6:cf:6a:82:34:7d:21:8f:
                    ad:bd:f4:33:3c:c0:81:31:6d:c4:2a:68:99:7e:cc:
                    95:e0:b8:16:c0:d3:7a:79:5e:71:d5:74:64:a1:74:
                    73:f5:97:69:1c:9f:91:76:46:4a:53:9d:86:c8:4b:
                    c7:81:7d:7b:12:9a:a1:a8:6b:d6:19:1f:4f:36:67:
                    61:b2:ce:36:d0:17:50:77:e5:e4:2e:ef:d0:ed:55:
                    ae:52:0f:b9:79:f2:b8:50:79:df:07:5b:96:12:56:
                    41:da:09:16:00:73:80:c5:1a:8d:b9:80:5d:6a:d7:
                    51:63:17:8c:29:f7:6b:04:93:2f:a5:e9:25:fa:f6:
                    af:de:a9:3f:70:6e:39:ca:3b:10:0e:cd:fd:04:56:
                    fc:79:96:d0:ad:40:d5:a8:4b:a8:2d:4b:cd:10:1b:
                    a8:5b:76:17:53:68:c4:72:4d:68:b7:1b:d0:a8:47:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:C0:02:31:42:06:8B:E2:62:98:54:BB:C8:E2:6B:B9:C9:AF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/c23c4a92-b75a-3264-b7f6-35442223fe89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.1.0-152.37.2.255
                  152.37.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:32:d3:5e:1d:db:e6:3b:3c:c0:84:16:d0:c0:df:75:11:d8:
         2b:54:eb:46:c0:1f:80:ee:34:db:9f:d5:7a:ed:ee:af:b0:04:
         8c:a4:39:47:54:29:d6:81:14:6c:a2:06:39:7a:d8:d6:86:ba:
         fe:11:41:b5:87:50:cf:12:cf:9b:37:2f:71:53:5b:bc:2d:14:
         da:62:e4:d7:1c:69:96:01:de:02:08:a8:bd:1a:3d:cb:7b:9b:
         65:6f:a6:f2:b3:d7:54:ef:23:85:3a:7b:16:ad:f1:4c:a1:d6:
         ab:1e:f2:3a:b7:18:fb:85:20:af:2a:d1:a4:66:24:5d:17:a9:
         62:76:ea:09:34:80:69:4d:fd:9c:9c:47:ba:6e:d2:b6:68:59:
         37:38:ad:d2:b3:91:ba:09:0a:ad:df:0b:d6:74:57:c1:df:f1:
         ec:a2:69:51:10:31:71:e6:7c:cf:27:0d:85:03:9b:39:46:db:
         dc:25:5c:ed:7c:be:6e:23:f4:25:e6:94:88:26:8c:31:ae:e0:
         0c:56:3e:bc:53:ac:51:98:97:4b:46:dc:18:0d:16:0f:a3:fb:
         08:e1:f7:f9:bd:ea:4a:a2:42:9d:d2:c9:c8:88:77:80:40:47:
         20:ca:a1:ec:b3:4a:dc:93:2b:7c:3c:b6:2e:f0:c8:fd:72:a3:
         7f:d4:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:51:36 2025 by rpki-client