Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa
File:                     384319c2-ef61-3659-8686-291dc872bee8.roa (raw, json)
Hash identifier:          lZ0LXH5GV0TI835kJmHDt8fVdm0+pjYKjP08Kwyncr8=
Subject key identifier:   D7:90:CF:32:DD:6F:41:57:13:69:1E:BB:E2:F7:45:7F:C2:50:5B:6B
Certificate issuer:       /CN=30fb0bda-102e-4ca8-b44c-98d347687a6c
Certificate serial:       010D0C9F4328584A8E3886EBE919D6747E3EBB40
Authority key identifier: 70:AB:24:32:19:BE:46:4B:46:3E:48:A9:52:8A:6A:51:E7:AA:C7:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa
Signing time:             Fri 18 Jul 2025 04:19:27 +0000
ROA not before:           Fri 18 Jul 2025 04:19:27 +0000
ROA not after:            Thu 16 Oct 2025 04:19:27 +0000
asID:                     979
IP address blocks:        23.141.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8e:38:86:eb:e9:19:d6:74:7e:3e:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30fb0bda-102e-4ca8-b44c-98d347687a6c
        Validity
            Not Before: Jul 18 04:19:27 2025 GMT
            Not After : Oct 16 04:19:27 2025 GMT
        Subject: CN=234b1b88-1777-4c63-be04-44a2d69bde04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:f1:b2:1a:e4:f9:64:5a:a7:6e:3c:4e:a9:
                    8d:8d:91:a7:6c:01:02:b7:58:60:c5:9e:ab:30:99:
                    65:e3:05:74:87:71:2b:99:84:1b:d9:1d:e5:03:09:
                    0f:9d:7d:d5:b3:38:8b:37:1b:f6:d2:55:ba:3a:3c:
                    03:1a:75:fa:e1:13:73:bb:04:2a:b6:d0:47:30:78:
                    46:5b:93:64:51:c4:1a:60:c4:82:0e:46:25:bf:30:
                    93:5b:72:53:36:83:58:68:6e:03:ea:a5:d9:8d:cb:
                    c8:b4:b1:97:bd:fc:9e:d6:a7:3e:1f:10:cf:fc:c1:
                    64:63:e6:d1:b9:01:c5:06:ef:9c:5e:13:33:9e:fa:
                    e6:c3:0f:3b:19:ea:55:d4:ea:0b:9a:25:b2:00:2b:
                    48:5b:7d:41:11:b7:23:d0:94:02:db:08:b2:eb:4b:
                    27:54:06:57:9b:44:0b:5b:5b:9b:62:d6:cb:8a:06:
                    5d:22:76:8c:b3:01:f5:03:94:40:84:44:84:54:93:
                    ff:39:e3:56:15:bb:9d:ab:40:a6:40:41:9a:a0:5e:
                    0f:f9:be:27:77:5b:04:3f:19:16:32:a2:c6:b0:7a:
                    9f:d4:e5:95:1b:c5:3c:a7:fd:ab:bc:8b:35:3a:65:
                    d2:26:bc:b9:45:2d:45:49:21:38:76:73:32:1c:26:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:CF:32:DD:6F:41:57:13:69:1E:BB:E2:F7:45:7F:C2:50:5B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.crl

            X509v3 Authority Key Identifier:
                keyid:70:AB:24:32:19:BE:46:4B:46:3E:48:A9:52:8A:6A:51:E7:AA:C7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:9f:63:62:10:da:b5:1a:9c:10:9e:ab:5c:76:d9:57:47:
         e8:e0:04:cd:16:77:7c:a9:f0:81:41:5f:b5:0b:19:4c:92:d2:
         c4:d1:44:ec:7b:a9:4b:9f:03:54:1b:4b:db:25:69:bc:91:37:
         94:bd:f8:6e:f0:d4:2a:2c:ca:42:88:41:e0:8b:93:0f:02:80:
         8a:9f:94:6c:c5:e7:46:82:4a:3f:84:03:39:c9:94:6a:ac:98:
         d9:8d:ee:63:40:cb:60:c1:06:fb:27:d5:c7:17:5c:b1:f9:56:
         a3:32:0c:19:3a:5b:6e:d9:d9:dd:28:0f:04:bf:1e:98:6b:4a:
         52:e3:bf:d9:7f:b6:2b:6f:26:36:59:83:9e:7d:93:03:d1:59:
         e2:f8:75:fa:e4:18:2d:88:51:67:a5:87:b7:d7:5a:7a:27:51:
         9e:64:9b:30:8a:4c:28:2f:03:65:65:33:65:d2:4f:e8:49:b0:
         1e:8a:f0:a1:b1:2d:d1:db:32:dd:85:69:d5:f5:9a:85:88:6f:
         8b:20:dd:0b:99:69:4f:77:ae:56:8a:2c:8b:80:53:45:8e:7c:
         8e:06:a5:33:c7:ea:e7:9e:05:09:a7:ef:28:91:eb:df:f5:b0:
         59:6d:12:c0:d1:18:8d:31:29:a2:be:b3:5a:fa:a7:c1:ce:66:
         44:0d:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:53:07 2025 by rpki-client