Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e/de8b465a-b66f-3fe3-92ce-698dc5cfd8d5.roa
File:                     de8b465a-b66f-3fe3-92ce-698dc5cfd8d5.roa (raw, json)
Hash identifier:          ZpnAZfgVuE+d/qBCoFAcMgkeqt268i6sATkxGeOx/ew=
Subject key identifier:   77:D2:8E:86:93:F2:B0:3A:23:F9:2D:AE:74:6D:9D:0B:FA:10:13:2C
Certificate issuer:       /CN=b5680bba-4b22-4e77-9496-c78ded3d229e
Certificate serial:       010D0C9F4328584A89D75E1E5EB4C67248C1C880
Authority key identifier: 3C:BE:21:10:74:12:12:6F:7D:CD:6A:FD:A7:CE:FC:84:89:94:F1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e/de8b465a-b66f-3fe3-92ce-698dc5cfd8d5.roa
Signing time:             Wed 16 Jul 2025 14:40:27 +0000
ROA not before:           Wed 16 Jul 2025 14:40:27 +0000
ROA not after:            Tue 14 Oct 2025 14:40:27 +0000
asID:                     396856
IP address blocks:        23.141.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e/b5680bba-4b22-4e77-9496-c78ded3d229e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e/b5680bba-4b22-4e77-9496-c78ded3d229e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:d7:5e:1e:5e:b4:c6:72:48:c1:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5680bba-4b22-4e77-9496-c78ded3d229e
        Validity
            Not Before: Jul 16 14:40:27 2025 GMT
            Not After : Oct 14 14:40:27 2025 GMT
        Subject: CN=434b13b1-cd5c-4640-ba9a-24da75980732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:21:90:ec:86:9a:9d:f0:4a:c0:83:6d:2c:
                    40:5c:8d:6a:c2:cf:6f:41:47:14:aa:45:65:d0:37:
                    19:74:0a:ee:a2:4b:f4:c3:81:13:88:b5:9f:e9:8e:
                    7b:42:fe:8c:66:2c:76:99:61:9d:c6:d2:50:a0:5b:
                    5a:fb:97:a1:b2:8c:ab:cf:03:7a:5f:07:e2:19:e4:
                    af:db:99:19:3e:94:a3:0c:bc:e9:99:e3:cf:79:40:
                    58:b1:43:df:62:ee:87:6d:20:63:9d:dd:6e:ab:af:
                    2b:33:88:48:f0:7a:6b:18:15:61:87:cb:5d:8f:90:
                    73:c9:83:f4:69:89:32:91:e4:1a:4f:8f:cf:04:e9:
                    60:e9:07:5c:49:1f:0b:1e:75:4b:f9:e5:b6:68:2d:
                    02:3c:4c:0d:da:79:e5:51:d8:04:df:8d:2c:a8:41:
                    9f:f9:b5:aa:fb:29:77:e8:e3:2c:6e:6d:64:b4:45:
                    00:24:36:cd:bd:41:5f:86:26:b1:fc:ca:c9:86:0d:
                    63:29:de:ae:dc:c1:89:e5:32:66:a7:a8:d2:04:fa:
                    ac:d3:61:be:9e:fb:61:0a:c0:9e:a0:2e:92:0b:24:
                    80:e4:db:95:1f:91:5b:cf:3a:a0:08:49:83:17:2f:
                    c4:77:08:8a:dc:39:5b:9e:79:26:73:1d:75:35:05:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:8E:86:93:F2:B0:3A:23:F9:2D:AE:74:6D:9D:0B:FA:10:13:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e/de8b465a-b66f-3fe3-92ce-698dc5cfd8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e/b5680bba-4b22-4e77-9496-c78ded3d229e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:BE:21:10:74:12:12:6F:7D:CD:6A:FD:A7:CE:FC:84:89:94:F1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5680bba-4b22-4e77-9496-c78ded3d229e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:92:f3:e2:a2:30:d3:86:bd:ac:ca:eb:7a:82:57:cc:d4:
         f1:88:ae:32:65:c6:a7:77:5b:70:d7:59:8d:de:05:19:87:12:
         cd:33:7b:8b:19:78:7e:d7:1e:4c:d8:bc:b5:48:3d:3b:5d:93:
         33:a2:fb:4c:36:e7:d1:5c:41:86:4a:ad:04:18:a6:7d:61:ee:
         6c:81:32:a2:fd:9f:2d:99:11:31:2a:62:1c:10:27:9e:60:ab:
         81:d8:fe:63:51:b4:b8:14:b7:c1:85:ba:bf:c0:1b:ca:d3:e3:
         23:61:91:13:13:c7:7b:01:3f:fa:3b:10:59:0c:af:43:88:40:
         9e:57:57:c5:41:87:23:a4:20:06:37:fd:4b:46:bd:1d:5c:60:
         a2:10:af:cb:af:49:b5:5f:f0:3d:df:47:3d:2d:ab:52:86:71:
         39:ef:67:9c:e5:f3:92:a1:fc:23:f5:4b:33:58:05:7e:2a:96:
         3c:57:19:4c:85:c1:bb:b7:3d:f6:c4:18:59:21:e8:15:8a:34:
         55:88:91:ac:fe:c5:49:1f:17:1e:29:ae:45:c8:5d:dc:76:05:
         b8:88:fd:13:39:63:b9:95:ab:e4:3f:31:c2:8b:70:06:5e:09:
         ae:64:ce:08:16:a8:de:86:6f:55:81:a8:1a:18:17:29:a1:42:
         d2:cc:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:49 2025 by rpki-client