Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa
File:                     237d99b9-087a-3afe-927c-18b9bed4f66c.roa (raw, json)
Hash identifier:          h78/pma4u12+fhMyZ3COkdLkG8wSv/lRc9f+NanTGLw=
Subject key identifier:   2A:07:62:27:7A:E4:9D:B4:62:32:CE:89:C5:51:D5:AF:88:54:D4:4C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84122869E76980592181DB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        23.251.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:28:69:e7:69:80:59:21:81:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=14233b5d-fbb8-4a28-9b50-154ac9f7f7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:af:ad:0d:72:f2:2c:10:12:ad:25:f1:57:
                    1f:ac:c6:b6:64:8e:c3:b6:89:6d:80:a0:0a:9f:60:
                    2b:52:74:b4:d3:8a:87:30:65:ac:cd:91:0d:9b:38:
                    ea:6f:37:f8:f0:6a:7f:e1:4d:4d:d6:b6:3a:4c:5e:
                    50:c2:4b:49:02:24:56:d0:f5:70:d6:44:a6:c0:24:
                    d8:87:95:c2:79:f1:98:43:7f:77:46:15:ee:35:7a:
                    59:94:5c:32:97:1b:0f:5f:7b:18:bc:c4:2d:a6:98:
                    6f:69:7f:52:f4:11:8c:a3:7f:e1:02:51:69:bd:57:
                    5e:07:5c:34:69:5d:0a:ed:55:0a:73:56:75:78:40:
                    e9:79:59:91:fe:21:e5:ba:bc:ff:57:d0:54:53:06:
                    c1:5d:ff:03:f9:98:55:7f:77:fb:98:ce:b6:11:cf:
                    5f:03:e0:f9:63:81:0e:c9:56:d1:87:1f:d4:65:5b:
                    a9:32:43:07:88:4e:94:1c:57:85:14:e6:2b:ae:44:
                    e1:fc:90:e9:c7:b1:76:d0:3a:3a:2c:bc:33:ad:b5:
                    1f:ee:0c:c4:62:67:e2:d6:a2:0d:64:55:62:99:73:
                    1e:be:a6:a8:b2:34:e0:cc:42:99:7b:cb:a2:42:c3:
                    64:39:10:93:26:00:e0:fe:7e:16:06:04:d3:02:b9:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:07:62:27:7A:E4:9D:B4:62:32:CE:89:C5:51:D5:AF:88:54:D4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:54:09:51:88:f6:ab:0e:fd:70:2d:22:a6:31:2d:68:fd:
         bb:1a:24:3f:0d:82:b0:8a:3a:96:3e:de:fd:c8:ef:9b:3b:ea:
         4c:64:43:1f:e0:1d:5b:69:d8:7c:5a:a4:49:6c:ce:cd:f5:31:
         63:02:23:ed:80:47:da:54:30:ca:77:27:7f:22:ae:a5:db:f2:
         9d:73:b3:a1:a5:a6:25:12:67:30:71:5c:49:21:e9:bb:ab:aa:
         95:5f:3b:40:7a:48:c5:48:3d:2e:73:b0:e9:dc:48:72:cc:d2:
         61:bf:aa:6f:d0:81:a7:ed:a5:b7:00:a9:a9:53:e6:dd:3a:43:
         7e:ef:02:fd:32:83:bc:5f:0d:fd:f6:8e:11:1b:3e:87:43:92:
         02:d4:82:f1:44:be:37:e5:c2:cb:a2:39:31:0c:ea:b1:9e:5d:
         83:3c:31:db:2d:03:b9:43:a0:d7:cd:54:09:50:98:4e:bb:ec:
         23:c2:09:e7:ae:a6:58:09:60:02:f2:25:22:df:12:c1:d0:3c:
         d5:bc:45:c5:ec:ca:d1:12:f4:08:1d:92:74:c9:c5:03:85:91:
         69:f1:b8:92:8d:02:f4:eb:57:4f:a1:e6:1b:c5:2b:76:ba:b9:
         f1:d3:bc:13:0a:95:3e:13:0e:45:72:e2:88:77:3c:59:74:f9:
         94:cf:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:48 2025 by rpki-client