Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
File:                     4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa (raw, json)
Hash identifier:          idGa1hDxQjdrfuHcT231jfmpWgJuzN3KS9EbqKFPpyg=
Subject key identifier:   86:35:A1:A9:21:60:4D:C4:4F:25:A6:11:D1:96:9C:38:07:32:EC:CC
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F4328584A8B0B64155901CB29E0610880
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     197841
IP address blocks:        23.188.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:64:15:59:01:cb:29:e0:61:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=8394110b-385f-41d3-8f7b-428868c893ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:76:63:81:0f:d6:cf:4a:e5:17:c8:be:6a:
                    cc:44:f3:7a:d4:33:4a:a1:9e:b5:c9:2b:f8:af:38:
                    c1:75:10:9a:9f:1d:b6:ff:e5:fb:57:6e:6b:31:28:
                    d5:01:30:33:2f:15:0e:37:2f:c2:72:98:9d:bb:4f:
                    08:9b:72:3f:62:d5:dc:d4:1a:b9:9b:f4:2d:15:91:
                    c7:aa:d7:ac:d9:8a:2f:66:52:0a:4e:08:50:67:c1:
                    88:bd:28:bd:0a:1c:15:ee:18:fe:60:25:cc:e4:07:
                    38:77:35:cf:9a:ad:b6:9e:56:5d:d2:05:59:e2:c9:
                    78:5f:76:ed:39:84:40:4c:07:8e:41:26:3c:72:27:
                    43:45:74:27:20:e1:35:db:76:03:d6:69:e2:00:aa:
                    24:40:e4:52:e7:b1:1c:71:e8:3e:19:04:13:6c:24:
                    00:bd:24:81:c7:69:70:58:d2:14:ba:c4:50:01:9c:
                    99:08:73:e8:ce:13:b2:b1:73:fd:2a:cd:36:7c:08:
                    5d:b0:dc:38:bb:11:95:a7:7f:14:77:bd:e5:d1:51:
                    a6:f9:fc:d1:9a:56:77:c6:12:31:8f:c1:e6:6c:3c:
                    5e:38:f7:0b:3f:df:26:30:ea:35:a4:eb:ba:53:ef:
                    12:2d:4e:86:1c:9b:6f:a9:04:f8:e7:94:9e:a6:0e:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:A1:A9:21:60:4D:C4:4F:25:A6:11:D1:96:9C:38:07:32:EC:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:7e:42:7d:66:0b:34:3c:57:07:a9:be:5c:9a:41:99:5f:04:
         c7:c1:01:9e:36:de:25:7b:ac:1b:69:4b:70:65:83:9a:6a:5c:
         f0:45:11:dd:71:c1:8e:93:3e:6c:e0:41:95:f1:98:33:87:dd:
         b2:9d:f4:52:a6:e6:6d:5b:cc:5f:f7:14:77:32:b1:65:5d:2f:
         47:a0:39:6b:09:9c:fb:55:ad:85:91:3b:f1:d0:f4:f0:a1:4e:
         47:17:15:51:ec:3e:89:2e:ff:80:ae:d4:ba:f1:88:e1:c7:8f:
         45:f8:3d:29:9b:62:e4:86:b0:de:15:d5:b4:e7:c5:2d:57:ed:
         a4:ff:d6:ba:b2:78:a7:b9:62:36:d0:4a:30:ac:80:c1:45:b9:
         87:ee:20:04:5a:73:59:02:db:50:f3:7b:b0:6e:7c:61:74:b9:
         c9:f6:2a:05:de:c5:27:b1:04:c4:04:f1:16:88:04:52:c2:a9:
         b0:01:bf:67:cd:94:4e:59:4a:36:82:f4:1d:af:a7:e7:9b:cd:
         80:91:c3:73:94:7a:75:41:cc:80:14:16:d8:02:8c:0b:f8:0f:
         4e:86:a1:de:50:f4:ae:cf:f6:ec:e2:da:55:93:ab:a8:62:8b:
         6f:b1:a6:42:fa:0c:8c:96:c2:40:54:e9:53:ab:76:e3:3b:ed:
         ee:0e:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:53 2025 by rpki-client