Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/bae9914a-ee77-385a-acba-db83fdf78cea.roa
File:                     bae9914a-ee77-385a-acba-db83fdf78cea.roa (raw, json)
Hash identifier:          Py4mskK0HWaejBDM0SBG/l4pdeyawG1pntivaNkweDs=
Subject key identifier:   0A:79:C5:33:14:30:64:A2:7C:DF:32:8D:B6:72:DF:78:50:D8:E8:2E
Certificate issuer:       /CN=a076692a-65ec-4598-b231-91f6d6e63c63
Certificate serial:       010D0C9F4328584B2066D994C18902598619DE80
Authority key identifier: D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/bae9914a-ee77-385a-acba-db83fdf78cea.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     401418
IP address blocks:        23.128.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d9:94:c1:89:02:59:86:19:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a076692a-65ec-4598-b231-91f6d6e63c63
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=4195ba83-136a-41e7-90b3-db4a52be313e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:0a:da:4e:6c:3d:1a:9d:f0:c2:63:20:65:
                    30:01:e2:d9:74:bf:1c:6d:60:ce:4b:a5:46:3a:15:
                    83:bc:af:9e:6b:ae:d9:1b:eb:8c:c5:9c:da:f4:40:
                    6b:17:a6:b9:36:6a:e4:40:81:df:d4:74:a7:22:16:
                    88:f2:26:fb:ca:9f:eb:2a:04:b8:7b:9c:de:43:e2:
                    27:81:12:25:bd:0d:47:db:b8:f8:2b:4c:61:04:6f:
                    2c:9c:69:c5:c9:db:23:66:a0:cd:7a:24:40:ba:fb:
                    05:9d:9a:e1:66:5a:8a:2b:bb:85:4b:b0:89:a0:5c:
                    db:a5:d8:44:57:08:68:a8:90:dd:4f:8b:5e:52:00:
                    24:13:6f:13:d1:98:52:8b:aa:55:17:47:44:b9:89:
                    70:04:79:e7:33:af:66:8d:f8:8a:5f:ec:29:ad:5a:
                    62:6c:d2:3e:c8:03:89:51:c6:14:b0:f6:bb:1a:64:
                    8d:74:8c:bc:5b:ee:18:72:c5:07:47:73:31:02:b9:
                    9c:41:0d:5a:f3:f1:42:1d:1d:28:c0:1b:17:3a:7c:
                    6f:b7:ba:35:9d:ce:de:01:30:5a:50:fd:b4:f5:fe:
                    83:8a:8f:84:74:72:58:83:43:c0:d2:b8:25:76:69:
                    1b:84:63:a4:fa:a7:4b:ee:5d:f8:ef:d7:8c:36:85:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:C5:33:14:30:64:A2:7C:DF:32:8D:B6:72:DF:78:50:D8:E8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/bae9914a-ee77-385a-acba-db83fdf78cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:c5:14:84:19:06:38:95:5c:85:eb:02:67:07:95:e2:c0:
         1c:e1:f4:90:fa:01:ac:9f:bd:d9:93:1a:99:08:34:c8:b6:df:
         ed:cd:5d:4d:da:3c:8c:39:d1:fd:60:e4:ba:24:b3:b0:9e:ac:
         45:ba:47:67:e7:63:1b:dd:db:21:d6:42:d1:55:5e:11:e6:ad:
         ea:e1:e3:66:19:92:9a:5b:50:0a:3f:c1:0b:b6:5b:42:fc:8a:
         d4:d7:77:14:7b:6a:57:db:b6:6a:cb:c6:16:13:51:db:9d:a4:
         5b:d4:2f:53:58:aa:52:f5:f9:54:23:df:dc:f0:02:01:81:b0:
         c3:7d:b4:88:bd:b6:f2:b4:02:e1:0e:af:2b:5f:46:4d:51:bb:
         0b:50:23:87:05:09:0a:e0:1c:f2:d0:52:35:e9:92:79:2d:ce:
         01:6f:c3:20:90:c7:df:e0:bd:48:e6:3c:0d:22:c9:7a:a6:57:
         d4:75:51:f9:4b:ea:d1:de:76:d6:38:15:70:ea:66:84:5a:eb:
         ab:6f:fc:20:3b:df:3f:3c:5b:08:ed:fb:44:26:c2:c5:f5:d9:
         74:ba:42:e3:b0:d3:9c:66:7a:1b:fc:45:18:b0:09:34:7e:15:
         ac:7f:a1:f8:33:8c:9f:88:25:77:4c:69:76:db:5e:72:42:2a:
         f2:01:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 14:33:50 2025 by rpki-client