Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa
File:                     74708ca9-5c31-32e1-b243-14870abf5964.roa (raw, json)
Hash identifier:          +LlLVwv6ptgEb41pPmFBbk8Fu/zxQp1NM3k1YHtGAsI=
Subject key identifier:   A9:46:BD:BA:EC:AE:4D:54:C7:EC:BA:43:49:E7:F7:4C:15:6F:26:3A
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF52139030B505936CD5B8F20
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        23.131.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:39:03:0b:50:59:36:cd:5b:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=eefec149-d703-444b-9a98-ff1a2ce495b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:2f:89:36:03:72:4a:e3:90:b3:40:fa:03:
                    a2:20:ab:89:9d:70:e6:e2:d5:17:11:ac:a0:cb:49:
                    b4:c4:14:4c:08:dc:e2:2c:55:f5:d8:74:4f:0b:69:
                    e1:bb:86:91:5d:26:9d:de:66:1d:3e:52:6c:b7:ec:
                    10:90:df:41:35:cc:2d:52:2e:24:c5:de:60:e2:ed:
                    52:1a:61:d6:b9:43:ba:8c:a3:07:75:e1:fa:62:f2:
                    e1:97:e6:35:29:f8:40:ae:1b:9c:eb:2f:fe:db:53:
                    99:36:04:7a:07:0f:43:14:be:af:ef:68:45:70:cd:
                    e3:e8:34:87:12:e3:55:36:7b:0a:8f:94:78:36:2b:
                    c4:d2:f2:11:41:89:7a:f4:57:1a:f1:fa:65:2c:b0:
                    5f:ec:c9:d6:7c:29:62:3f:da:5f:86:e1:55:2d:1e:
                    9a:a3:85:89:41:33:1c:ab:a9:24:6c:28:dd:51:b8:
                    08:4b:a4:e3:c5:b8:ab:6b:52:44:26:b5:02:07:00:
                    ef:3d:d1:fc:77:ca:57:61:2e:56:37:1b:d1:fb:62:
                    45:cd:e5:0a:24:44:2d:9e:65:1d:af:30:30:90:a3:
                    0f:5f:06:f1:9e:4d:ad:d9:8e:56:b6:4e:e8:20:29:
                    a0:e0:89:11:ee:34:2d:a4:08:e0:d5:c3:04:42:eb:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:46:BD:BA:EC:AE:4D:54:C7:EC:BA:43:49:E7:F7:4C:15:6F:26:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:4d:9b:79:ea:c8:b8:06:4d:c1:a6:65:af:21:39:ff:31:
         40:92:16:85:3d:73:74:e7:b7:f0:00:25:63:92:7f:6c:b1:9c:
         79:47:6a:dc:e6:09:31:24:dc:b4:05:67:38:33:e0:a4:82:42:
         6f:de:c2:ce:85:e6:80:5d:46:a3:76:96:6c:63:d6:c3:b8:83:
         59:ed:91:e0:4c:d6:56:dd:97:54:6f:3c:c1:64:f4:43:ef:d3:
         99:ec:9c:f4:db:64:ef:18:ee:d4:3a:1d:de:08:4d:72:e5:f2:
         1c:28:63:3c:d4:4c:bd:03:c2:aa:11:61:3d:b1:9c:12:b3:e8:
         c2:91:c1:f8:ae:fc:c5:a1:7a:92:e6:18:ce:18:95:a2:88:26:
         07:47:67:6e:54:35:d6:0f:03:a4:14:c0:5b:ac:8f:1f:e2:71:
         8a:25:f3:5f:25:6e:04:84:b7:a3:4f:71:f2:1d:6a:49:8b:b3:
         64:17:28:7c:0f:4c:ef:a6:f5:d5:14:11:e5:e6:89:58:f3:03:
         76:97:9e:3c:d4:35:1c:f2:16:76:da:69:6f:0c:be:c4:b2:1d:
         8d:ee:2b:53:12:c3:f9:2c:9a:cb:2e:ad:7e:e3:19:32:e7:ee:
         c2:d8:47:6c:9f:1e:b9:3f:ef:7a:2f:b4:07:00:d6:21:0e:cc:
         33:03:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:37:52 2025 by rpki-client