Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa
File:                     8a510825-83bf-3885-90a1-e8e8bfb13779.roa (raw, json)
Hash identifier:          hFHQrlEQekLNymOwYRMM3DOcqF5LDgyuNWUo4mNT+QA=
Subject key identifier:   18:C1:AB:AE:63:08:54:0D:4E:AD:0D:7A:18:DF:87:DB:3C:BC:B2:86
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584AFC1BFACA87697D410928DC00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     29802
IP address blocks:        23.227.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:fa:ca:87:69:7d:41:09:28:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=7a04db11-112d-4553-acbe-ce8d40984c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:36:5d:8d:92:ea:cf:fb:07:b5:9a:e0:54:
                    3e:c0:64:aa:8d:a6:87:db:10:c0:2d:66:91:2f:49:
                    2e:d2:38:0d:2f:9d:59:fb:2e:42:36:b1:78:ba:7e:
                    b0:7b:36:13:31:cc:a4:fe:2d:ca:1b:4b:c9:b0:8f:
                    0d:3e:78:33:d9:21:a2:28:74:51:9b:cd:61:a6:45:
                    2a:77:40:70:de:ae:9f:d4:7d:ba:94:21:bf:76:b3:
                    82:c5:c0:2e:3a:8e:70:02:64:7a:9a:7a:e6:ae:cc:
                    a6:52:87:b8:57:f5:6e:a1:7e:c4:1b:36:2e:ee:68:
                    09:db:73:d4:63:1a:b1:18:ef:b1:c6:b1:6d:de:3c:
                    a6:f7:71:77:20:79:f7:42:20:ef:c6:82:1a:07:63:
                    2d:a7:6b:d1:ab:36:5c:71:f0:c5:61:26:95:ce:35:
                    3b:e7:40:25:4d:b5:c9:a1:95:29:6b:c8:be:90:66:
                    85:9f:0c:1d:eb:8c:99:56:a2:b7:0e:70:5f:27:52:
                    ab:55:8a:87:1f:36:2e:48:74:bf:67:0d:e5:16:7f:
                    d5:6d:0e:be:2b:73:2b:db:4a:7c:8f:0a:03:ec:91:
                    74:80:e8:99:c0:d2:95:84:c4:ae:20:d4:e9:9d:b1:
                    ee:29:70:a8:9c:e1:76:f4:ed:f1:82:e7:db:a3:20:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:AB:AE:63:08:54:0D:4E:AD:0D:7A:18:DF:87:DB:3C:BC:B2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:bf:23:34:b1:16:21:ed:2e:03:0f:e4:26:82:f4:07:5b:
         b1:3b:42:04:fb:11:02:78:43:13:34:f8:e9:0f:5b:ac:d0:99:
         bc:98:66:1c:f3:1e:61:5c:c9:f3:c2:54:05:8e:92:c4:61:f2:
         74:17:bc:21:d7:3a:3f:b3:f4:85:7f:ab:c9:4d:34:e8:92:cf:
         6a:21:e3:d3:ba:e4:8c:4e:24:2d:c2:e0:6e:3c:d1:01:c5:30:
         97:73:2e:42:6f:b8:18:09:ff:53:52:c6:66:03:2d:80:43:49:
         8f:42:93:6c:bc:c2:f7:87:46:5a:2a:dd:ee:bd:83:90:67:c5:
         af:28:c9:e8:ca:26:ca:9b:31:08:99:07:84:8c:8e:e1:a1:3b:
         30:6b:3f:f2:f6:47:b4:51:09:ea:f2:ed:14:0d:1c:80:ac:dc:
         43:4c:30:61:9f:c9:38:6c:be:e3:70:15:ab:87:a8:00:0c:ee:
         d5:9a:59:d5:bd:c8:8c:4a:9c:dd:06:c1:9f:e9:e8:98:0e:19:
         5a:5e:c7:5e:bb:92:12:72:68:37:38:3c:2c:d2:f2:03:77:2e:
         b4:27:a8:01:67:42:a9:54:f8:60:4a:b4:40:f8:61:06:18:de:
         8a:c0:37:9c:7c:43:8c:1b:44:1f:85:d7:7f:52:34:3a:49:b3:
         45:76:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:59:16 2025 by rpki-client