Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa
File:                     657f8682-de8b-3ad4-9a97-6a6c03122181.roa (raw, json)
Hash identifier:          sVIziWBWaSgTHBUJDOBEbYmhMyvqeEpdPNB2BaOcK5g=
Subject key identifier:   83:2D:E0:84:E3:97:1B:A0:2B:A6:61:2D:C8:EA:99:ED:A5:39:B9:CC
Certificate issuer:       /CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b
Certificate serial:       010D0C9F4328584A43DB049BF9FA83C136D012C0
Authority key identifier: D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     395631
IP address blocks:        23.131.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:04:9b:f9:fa:83:c1:36:d0:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=99f36947-12c1-457b-8ec7-02f309968a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:f2:9e:ab:4a:e5:76:ab:d7:51:4d:21:71:
                    b6:19:50:8b:8d:51:cf:75:36:83:3e:3e:36:f1:1c:
                    1e:d5:c1:27:8a:3b:7d:9a:7c:37:06:fd:b3:12:df:
                    73:12:37:8d:54:a4:e2:df:0a:a7:dd:bb:2b:ca:d8:
                    ff:60:24:36:8c:2c:9d:7d:4a:8e:93:e7:83:ae:ea:
                    eb:60:fa:a1:8a:48:01:c2:a1:84:ca:aa:88:0e:40:
                    d0:c6:2c:c3:8f:6a:10:0f:78:38:0e:59:ef:25:7f:
                    1a:c7:39:f6:59:12:fd:dd:74:52:5d:5b:4a:d1:dc:
                    19:99:6d:b6:7f:82:88:f2:9f:ce:7b:38:06:b5:d0:
                    1a:87:1c:d3:71:25:58:a5:11:bc:86:af:2a:93:d5:
                    a6:65:4d:12:62:11:63:1d:e2:ad:c0:1c:be:99:77:
                    0c:7c:ff:26:87:62:4b:b7:f6:70:b3:22:2e:b9:f6:
                    2b:26:08:3a:95:09:a1:55:91:92:27:37:dc:f6:74:
                    4e:74:e8:20:c8:fe:4c:5e:69:50:a0:7e:d8:7b:01:
                    b3:ae:69:b5:db:38:c1:fa:53:4e:16:da:fa:23:f7:
                    34:07:19:c2:25:f0:ee:61:27:c4:4a:9f:92:b0:d9:
                    b2:e7:58:73:cd:8e:28:47:26:01:29:e3:dd:1e:5a:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2D:E0:84:E3:97:1B:A0:2B:A6:61:2D:C8:EA:99:ED:A5:39:B9:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl

            X509v3 Authority Key Identifier:
                keyid:D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:e5:d6:ae:6f:c2:74:69:9f:4a:b4:8d:a6:e7:5e:00:95:
         41:0d:77:c1:bd:35:b8:0f:a6:ec:2c:2b:f0:bd:e7:d0:3a:b9:
         37:a0:cc:5e:61:97:a7:57:9f:b3:32:b6:c3:9d:02:a1:d2:7a:
         4f:ae:55:a9:46:6f:d9:cb:d4:31:18:7a:3f:70:28:7f:2e:6a:
         99:05:ec:5e:72:e7:64:a4:be:0f:99:7d:93:07:be:93:13:81:
         27:fa:87:cd:d0:ee:54:7e:97:e8:f9:0d:66:bc:4b:1a:80:e1:
         d0:b8:45:56:28:ad:f1:06:b1:46:a6:53:2c:da:1f:09:a6:eb:
         81:02:b5:68:21:a9:a3:60:78:9b:c9:52:5c:45:cb:f0:f4:e7:
         59:ad:e3:f9:93:5b:a3:10:9d:33:de:8d:2f:a7:ff:4a:5b:9a:
         e9:6d:2d:6d:1e:5d:ae:4a:95:27:b3:11:66:f3:7c:98:85:52:
         4c:e0:09:80:6e:4c:70:68:a4:fc:d8:bb:2e:85:e7:43:66:45:
         11:54:ad:e5:f4:f2:9a:09:d6:40:f2:56:de:57:15:1a:92:c4:
         3a:c7:4b:2f:95:fa:cc:17:83:3b:80:9f:2c:e1:aa:05:5b:ed:
         3f:9b:b7:d9:b3:f1:53:ff:09:79:a9:08:04:e2:c0:83:57:8d:
         ad:ce:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:39 2025 by rpki-client