Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/30320625-d116-3559-87e5-180403858f57.roa
File:                     30320625-d116-3559-87e5-180403858f57.roa (raw, json)
Hash identifier:          WgKyOTsat1llstNg9jxRx/8jZnf5bomnfkSHlf/ZKYo=
Subject key identifier:   10:7A:CE:23:B5:B5:59:E6:C1:C9:C2:84:02:55:82:5C:BC:15:58:E4
Certificate issuer:       /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial:       010D0C9F4328584B05E13EEA2C1E56C1ADCA5EE0
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/30320625-d116-3559-87e5-180403858f57.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     401541
IP address blocks:        23.131.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:3e:ea:2c:1e:56:c1:ad:ca:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=72145076-5527-4b3b-a7db-7c548648b9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:0f:2e:7c:05:ca:00:87:9c:be:4e:37:9f:
                    73:c3:ad:b0:fc:76:de:4e:76:8d:d6:3f:ac:02:11:
                    c1:02:2a:08:cb:68:b1:87:fe:45:a4:62:e3:cd:79:
                    92:21:b3:22:57:cd:a0:92:91:45:e2:91:5f:6e:22:
                    05:c1:c2:8e:5f:b8:af:81:c9:e7:bf:5f:01:4b:9b:
                    62:81:0c:03:a4:0f:cb:80:b8:b3:7f:43:97:73:31:
                    2b:1e:fd:b3:12:c0:97:24:a5:99:fa:69:e8:58:51:
                    89:05:f0:d7:af:b6:21:e6:99:e0:bc:00:64:a6:d3:
                    56:99:14:45:f2:4d:21:89:7d:da:64:37:01:c7:c3:
                    9d:aa:ce:b2:f3:de:6b:07:83:d4:98:6c:cb:0d:b4:
                    e5:52:14:df:b3:83:a2:ec:1c:1e:83:51:38:91:ab:
                    93:24:b2:2b:cf:d9:61:4f:37:33:2d:3b:96:13:75:
                    c8:7d:b4:47:b7:a0:53:df:6c:0a:18:55:59:f5:37:
                    40:6f:63:2d:1a:e2:f3:c9:80:29:05:4f:fa:15:8f:
                    ed:5b:98:77:23:d0:d2:59:9e:24:ed:27:87:fe:f7:
                    f9:34:d8:f9:bc:8b:fc:77:bc:e7:e8:69:75:00:bd:
                    7f:d1:24:e2:9a:56:58:23:6f:fe:60:79:1e:2b:4c:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:CE:23:B5:B5:59:E6:C1:C9:C2:84:02:55:82:5C:BC:15:58:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/30320625-d116-3559-87e5-180403858f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:94:4f:cd:b8:30:96:47:66:f3:f1:fa:d8:ea:ce:3a:3d:c7:
         32:6a:7e:9d:37:66:69:ab:e4:0e:65:56:f3:be:36:14:2c:44:
         f1:f7:d2:d6:f1:40:78:f9:a1:80:96:4e:89:07:ee:22:8c:58:
         ac:58:d0:ae:09:44:10:db:00:86:8a:3f:77:8a:5e:b9:e2:6d:
         9a:ca:e9:af:61:0d:cd:79:a6:09:7a:c3:fd:7f:2d:4c:df:cc:
         99:68:8a:f8:00:a8:f6:4d:54:75:22:d8:34:31:72:fb:50:ed:
         9c:e2:2f:d7:51:49:de:5b:84:e2:40:ef:fd:f2:e8:40:1c:3d:
         34:c0:60:61:72:d7:88:b9:20:91:81:7e:83:50:1d:7d:dc:85:
         cb:78:36:41:62:76:55:2a:c7:bd:cd:97:b8:f4:3d:0c:2f:4b:
         c2:c4:2b:94:db:be:b2:75:f4:03:96:56:05:1e:73:07:8e:b8:
         d8:cc:44:7a:b3:05:41:1d:ec:ff:c1:a6:c6:81:cf:a4:df:0f:
         d7:5c:c7:0e:1b:b5:2e:b9:c0:ad:58:67:38:07:ad:9e:7d:81:
         f3:16:7b:0b:dc:07:dd:60:23:4d:1d:71:2c:57:36:7a:8f:cc:
         3c:8c:e9:4a:79:21:23:37:3a:d6:d8:c0:d0:2b:fa:8b:ee:e4:
         2d:c6:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:28 2025 by rpki-client