Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa
File:                     509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json)
Hash identifier:          dZ/x//w/8BABUfSOMqKmMfxiOwZzBlk4PdIYP46UTjo=
Subject key identifier:   24:A9:13:2B:9B:FF:2B:E4:67:A8:19:1B:E1:7F:A0:88:C0:77:95:3F
Certificate issuer:       /CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Certificate serial:       010D0C9F4328584A66C068A7BB0655779AB64340
Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     57406
IP address blocks:        23.145.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:68:a7:bb:06:55:77:9a:b6:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=c14e8002-0702-4d10-8181-8b222c629a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:4d:ee:f4:30:55:d8:0c:be:97:44:4e:e6:
                    b1:78:24:26:0d:16:8f:c8:4d:e4:c9:73:54:0b:b1:
                    3a:4c:ab:c9:cf:27:54:e6:d3:39:10:e2:df:b1:72:
                    81:1f:ea:70:4d:b9:f3:3a:6c:64:c9:fd:c9:99:54:
                    3d:d1:b7:ab:4e:51:f3:f6:e7:3d:3a:f6:57:fc:24:
                    cd:17:d7:95:02:a7:02:4b:1c:6f:da:34:e8:65:e5:
                    ef:5d:fa:b8:fd:82:6b:9d:a6:83:14:ea:36:5b:89:
                    1d:28:1b:82:19:64:ce:b5:39:3d:64:03:79:5c:96:
                    3d:fa:ad:26:1e:2b:d0:a7:c0:3e:0c:1e:ed:8f:92:
                    df:84:ce:b5:50:90:e5:02:2d:8f:60:c1:34:4e:d1:
                    fe:22:eb:dc:72:74:e5:33:7b:e1:54:44:96:79:69:
                    34:d6:44:83:2f:17:30:ab:3a:45:7c:e2:33:13:64:
                    ea:3f:94:db:c0:c1:bc:34:02:88:c8:3a:71:8a:f5:
                    c0:44:2d:5c:4d:0c:74:5b:c0:11:27:42:1f:e4:50:
                    75:3c:69:6a:5d:36:b2:94:0f:d0:b5:a9:d5:5b:c7:
                    af:a8:1d:c3:74:85:6c:0b:ce:a7:0f:2d:12:a0:b2:
                    99:0e:6e:41:c8:18:65:34:67:d2:c4:88:62:40:fa:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:13:2B:9B:FF:2B:E4:67:A8:19:1B:E1:7F:A0:88:C0:77:95:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl

            X509v3 Authority Key Identifier:
                keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:32:38:4a:6e:76:83:b9:d2:1d:41:72:47:9f:b6:ca:6b:
         d9:de:89:c5:20:16:a1:bd:6b:3e:a8:25:ff:29:87:8e:46:26:
         3e:9b:a8:3d:0b:89:45:24:94:05:04:38:05:21:11:8e:e2:26:
         52:77:5c:07:b5:11:35:87:45:f4:d3:f6:28:fe:8f:7a:77:ed:
         23:a3:b3:d6:48:0d:39:be:d1:4b:b9:26:5b:7d:a2:a6:d2:c1:
         19:9b:61:30:6d:7a:be:2e:cb:9b:10:f4:00:ff:d8:f0:62:38:
         ad:82:38:e1:05:db:5f:f9:09:50:f6:36:87:a2:ed:85:18:88:
         1e:95:cf:0f:c6:bd:0d:32:17:dd:86:ff:33:92:3c:1c:64:f5:
         40:0c:c5:db:21:4c:a7:82:96:b4:64:f2:c6:52:2a:a6:28:a2:
         7c:e9:97:e5:b6:97:dd:1c:c9:4d:33:2b:52:eb:5d:0b:bd:97:
         c9:29:e4:6d:e3:e9:4f:51:53:a5:5a:20:c7:20:16:f9:bf:a7:
         f6:f1:55:38:b0:f6:8c:b6:01:84:b8:85:75:1e:88:f2:38:00:
         d8:cf:f2:5c:6b:cf:ba:b3:fd:92:30:c8:d3:1a:ea:5b:02:70:
         12:60:7b:ba:33:9f:3b:b2:aa:05:0d:f6:d1:ca:ab:fc:92:20:
         0d:11:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:01:58 2025 by rpki-client