Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa
File:                     86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa (raw, json)
Hash identifier:          Xzn6cpIr8zirBd5n6NiwmuxdHuMJMW+TwFs40ikpVRk=
Subject key identifier:   9C:5B:B0:00:6B:8B:38:5A:58:53:6A:FE:3B:8D:93:E8:C3:7F:0D:00
Certificate issuer:       /CN=81b7ac6c-80f4-4151-a607-46f1d9c9a264
Certificate serial:       010D0C9F4328584A78E5F28383B1FE294DF6BF80
Authority key identifier: 27:94:C0:58:3C:E2:19:D8:1A:33:F0:A1:F5:7F:E4:0C:06:1B:A5:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     214483
IP address blocks:        23.137.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f2:83:83:b1:fe:29:4d:f6:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b7ac6c-80f4-4151-a607-46f1d9c9a264
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=5a9f289f-05b4-4c91-bb63-db719193976c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:fc:15:1b:7d:9f:e5:a3:d6:f9:38:c4:9c:
                    17:5b:9a:e1:b1:8b:f1:88:62:02:ef:4f:a4:6d:94:
                    51:3e:ee:4b:6c:e2:b9:14:85:07:05:b1:28:15:d7:
                    da:cc:ed:ea:0d:4a:a9:2f:9c:94:34:e5:ba:53:a6:
                    77:9b:9d:49:68:f1:e0:d8:e9:75:80:6f:ba:51:a6:
                    9d:24:60:4b:28:40:2c:6d:23:00:36:69:1e:5d:ea:
                    c2:00:7d:ae:55:1c:53:bd:8f:a7:0f:b7:94:46:11:
                    5c:38:c4:dd:7a:14:1d:a6:52:9f:8c:db:f8:6b:02:
                    c9:e9:dd:08:92:b4:45:52:38:0e:35:3b:3c:61:27:
                    b8:09:ea:3e:d9:1b:40:7d:eb:64:0d:d3:95:e3:2b:
                    bd:dc:d5:77:53:89:4f:7d:81:3f:3d:80:91:01:5c:
                    4d:c5:33:ba:8b:0d:05:f2:dc:6a:0c:4b:a7:5e:fa:
                    69:5f:22:4b:d0:31:d0:18:67:88:b4:9c:35:15:19:
                    f3:4c:b3:09:d9:6f:04:bc:5d:c8:3d:eb:c8:27:e5:
                    97:ed:70:7c:1a:17:0c:49:8b:a7:46:b0:5f:24:4e:
                    6b:ea:74:8c:4b:29:c2:21:82:f0:d5:9f:23:d2:16:
                    12:3a:7a:82:8e:ef:a9:1b:e2:f8:3c:52:1d:ba:78:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:B0:00:6B:8B:38:5A:58:53:6A:FE:3B:8D:93:E8:C3:7F:0D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/86d2fc33-33aa-3559-a3d9-0f6657e88d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264/81b7ac6c-80f4-4151-a607-46f1d9c9a264.crl

            X509v3 Authority Key Identifier:
                keyid:27:94:C0:58:3C:E2:19:D8:1A:33:F0:A1:F5:7F:E4:0C:06:1B:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/81b7ac6c-80f4-4151-a607-46f1d9c9a264.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:bf:52:bd:6b:88:83:72:97:8b:45:80:9d:40:94:e8:4e:
         8e:ff:e9:a9:a3:5c:c1:cb:c6:e4:3e:ef:e7:1c:f4:23:ff:e8:
         29:e2:d3:e1:58:b6:7a:c5:c6:0f:cc:9c:5f:b2:53:b4:3e:26:
         9e:74:e3:0a:35:a1:09:3d:ac:21:40:c0:38:84:3f:cb:a9:ec:
         b1:28:05:b6:de:c1:21:d7:d2:07:92:00:ba:b7:23:0b:6d:0a:
         db:47:fc:cd:45:68:b5:55:68:bd:6e:58:ab:ef:f2:44:6c:2d:
         fd:3b:00:0a:3a:1d:10:20:35:9c:07:58:11:89:17:e8:6b:c4:
         9b:db:8b:82:b0:16:67:ec:80:7f:7b:08:e8:2c:55:d1:08:9f:
         4a:b3:32:d7:ca:36:33:e6:a6:7f:5b:d2:43:41:b7:e6:47:ae:
         d4:13:78:99:1d:cc:51:92:6a:23:8c:1d:0c:72:df:5c:15:cd:
         71:51:b1:2e:fb:26:57:eb:76:2e:df:ee:1e:c9:d6:49:ee:61:
         74:38:34:85:45:e4:5d:72:16:44:05:6c:15:f9:de:3a:58:0e:
         c0:39:d5:d7:26:29:4e:db:61:34:a4:70:a6:33:27:a7:ec:0a:
         8d:d6:3b:e1:2b:52:c0:76:c2:5f:88:4d:67:10:22:4d:89:fc:
         f8:41:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:50:21 2025 by rpki-client