Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/228c76b0-a36e-3587-8a90-4debcd6cbfad.roa
File:                     228c76b0-a36e-3587-8a90-4debcd6cbfad.roa (raw, json)
Hash identifier:          ayygwVi8qpbFeW6ASgxKb/g8jp9ZVv2BSwOtthtIe2k=
Subject key identifier:   1C:E8:FB:82:6C:81:19:95:97:57:0F:C2:97:09:FB:61:11:A0:50:34
Certificate issuer:       /CN=56bdb557-2036-4c97-800e-df0149c7ae83
Certificate serial:       010D0C9F4328584B13D6BABE6F06A24E7A634F00
Authority key identifier: 72:01:C3:06:BC:B0:68:ED:43:E5:DA:2C:E6:75:E6:C9:04:3E:E8:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/228c76b0-a36e-3587-8a90-4debcd6cbfad.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     149513
IP address blocks:        23.177.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/56bdb557-2036-4c97-800e-df0149c7ae83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/56bdb557-2036-4c97-800e-df0149c7ae83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ba:be:6f:06:a2:4e:7a:63:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bdb557-2036-4c97-800e-df0149c7ae83
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=37246d9a-555a-482a-b252-d14f05b2a630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:11:f1:82:fd:a0:82:54:66:b5:ba:c6:00:
                    a6:d0:fa:d0:39:da:69:82:5a:06:0b:a2:d3:ba:d4:
                    2e:9c:af:26:84:2d:24:82:c1:19:a2:02:9f:79:74:
                    f0:9d:9d:4d:b4:39:53:33:ec:67:0e:91:71:b3:89:
                    d6:0d:d5:e8:bc:67:b3:12:fb:56:ea:b0:2e:5b:da:
                    19:bf:9b:61:2c:f5:02:53:ad:f1:b4:9f:48:bb:f5:
                    2e:9d:88:49:32:4d:08:64:67:6f:06:cb:7b:21:4b:
                    c6:29:fe:56:c8:08:be:5a:35:b4:02:da:9f:de:7d:
                    b5:a7:d6:2b:f0:f7:e7:bf:d0:cc:1a:f4:80:f2:9f:
                    e3:51:b3:3d:73:ec:f0:47:65:7e:44:b6:8d:49:73:
                    24:f1:66:bd:ca:6c:27:b8:e3:64:3e:84:55:19:d8:
                    a9:2a:ac:e9:bd:4f:a7:91:23:e2:e8:87:cf:c9:5a:
                    7e:29:2e:d4:53:55:28:64:ae:49:64:63:38:38:5c:
                    86:60:a7:ae:c9:b1:17:dd:af:60:ca:f7:b4:fc:8a:
                    54:a5:84:54:40:04:73:2a:a4:99:98:87:59:a0:49:
                    5f:78:c4:c7:43:f4:b6:0d:f7:9d:c1:00:32:04:2c:
                    8c:38:43:73:4a:9e:ed:0a:ee:b5:42:6a:e9:90:d1:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E8:FB:82:6C:81:19:95:97:57:0F:C2:97:09:FB:61:11:A0:50:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/228c76b0-a36e-3587-8a90-4debcd6cbfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/56bdb557-2036-4c97-800e-df0149c7ae83.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:C3:06:BC:B0:68:ED:43:E5:DA:2C:E6:75:E6:C9:04:3E:E8:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:1a:06:a0:d3:cf:5c:db:8f:d4:e4:e5:f0:66:88:70:54:
         0e:98:95:bf:95:4f:f1:c2:c9:77:24:58:35:8a:6e:65:09:8e:
         2c:6f:14:af:b2:91:33:68:33:14:d2:74:17:a4:2b:f7:74:38:
         7f:b5:5b:fb:a5:1c:17:58:77:01:78:d3:ba:4b:be:be:83:a1:
         b9:b6:d2:b5:20:f8:95:7a:03:f9:f4:86:11:10:4e:42:6f:c0:
         a5:40:9e:fe:ec:2e:5f:16:83:c2:70:66:09:34:d8:65:d1:8a:
         f9:e3:24:d8:78:c0:61:7f:bc:02:47:e2:ca:e0:7f:6f:ef:02:
         c0:aa:f9:1b:f5:f9:f3:35:0b:24:91:d9:87:bf:df:a0:03:db:
         88:c6:39:6f:f8:47:c2:a5:8a:7f:d7:07:17:4f:eb:77:36:89:
         c9:f6:27:ed:19:ae:af:2d:60:d8:f8:4b:86:02:7e:5f:8f:32:
         95:6f:eb:74:26:74:8b:d1:14:b0:70:27:dc:e9:d8:33:62:9a:
         d2:7d:8b:78:c5:2f:3e:b0:63:2b:b1:c8:51:78:63:dd:14:56:
         5d:b6:91:05:ff:70:35:5d:ed:0b:1b:3b:0a:4e:1f:2b:2d:cc:
         bd:4c:d6:8b:df:f7:92:b8:bd:52:82:5a:4c:7a:97:52:b7:8f:
         b9:60:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:06:56 2025 by rpki-client