Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ba2b926e-249a-331a-846b-391c0445c8d4.roa
File:                     ba2b926e-249a-331a-846b-391c0445c8d4.roa (raw, json)
Hash identifier:          LHJMI6ELv7JqRTo0Doc2dqlE16lFuBGwKhoh7FRymMs=
Subject key identifier:   0F:5A:F1:87:73:25:84:1C:CB:16:02:2E:6D:E8:B0:70:EF:7C:40:B3
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1F901BA9DE4DCA9844144A00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ba2b926e-249a-331a-846b-391c0445c8d4.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     394727
IP address blocks:        23.227.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1b:a9:de:4d:ca:98:44:14:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=41433c36-47dc-434a-88ce-3587f835f54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:7d:75:02:1c:b8:9f:fc:cc:f2:24:4d:cc:
                    b4:e2:6e:86:b8:fe:a6:64:f2:6c:08:c0:bd:ef:d0:
                    94:24:03:b0:67:cd:f4:3b:39:6b:48:8b:0d:b4:19:
                    76:8f:06:36:0d:42:f8:fe:d9:2c:40:0f:82:60:5e:
                    be:ad:4b:05:df:92:10:1c:98:58:10:66:7b:8b:f3:
                    cf:f2:89:14:40:a4:18:cc:7f:19:22:12:0d:df:ff:
                    22:63:37:e6:e7:3b:35:59:19:b4:ba:91:fd:19:62:
                    61:f2:ed:02:35:5b:f4:94:77:50:ee:48:d6:90:54:
                    69:bf:01:46:9c:12:27:65:64:f4:40:58:40:88:c3:
                    f0:65:ac:f5:4c:a4:1b:8f:86:07:cd:b4:b7:cd:15:
                    d4:31:63:69:32:2b:9d:ca:71:57:ff:bd:e9:ab:54:
                    95:1b:a2:a8:cc:04:38:5b:c0:94:52:87:fe:cb:f7:
                    31:2b:62:16:78:0b:4e:82:15:92:0e:88:70:1d:7b:
                    c4:f2:4b:d7:92:6a:33:f3:1f:14:d0:3d:49:34:a4:
                    4a:21:d8:81:73:17:c8:b4:8d:d1:36:ce:3b:67:e9:
                    8c:51:45:7b:ce:88:d6:ba:3e:81:36:86:a4:d7:af:
                    af:d8:cf:ce:5b:c4:21:46:80:25:6e:88:c5:22:de:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:F1:87:73:25:84:1C:CB:16:02:2E:6D:E8:B0:70:EF:7C:40:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ba2b926e-249a-331a-846b-391c0445c8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:66:ab:5c:68:4b:3c:17:e3:13:56:c1:4d:0a:3b:68:3f:
         4d:5d:3b:e4:70:38:cf:15:ee:08:ef:c4:1c:bf:5e:88:95:89:
         00:bb:40:34:d4:7a:6b:45:b3:c9:65:f6:9b:ae:05:a3:fb:f4:
         41:d6:18:51:25:b1:3d:1b:2d:7f:e6:82:81:3f:6d:8a:65:f5:
         47:d6:10:2b:ea:57:ac:36:f2:8d:38:7c:65:11:c2:0a:1c:15:
         ab:a4:92:0e:5c:95:eb:b3:41:19:4a:eb:b8:ea:f1:96:f0:18:
         0b:4c:53:86:81:20:45:15:06:42:cd:f7:5b:25:4c:c4:79:ce:
         43:e0:87:ab:90:61:bd:68:39:31:a3:6e:7d:1a:b4:3d:d6:9f:
         af:d2:db:11:49:97:db:9e:0d:58:f2:95:93:ff:54:83:22:5c:
         01:a3:70:7f:32:f8:bc:e2:eb:ed:14:a0:f8:d5:bf:fa:d0:15:
         6f:51:d0:41:86:63:7f:0e:bc:ee:6b:53:b3:7b:10:76:db:c9:
         19:7c:3d:dd:2c:7f:ce:65:15:0c:c0:87:fa:56:d8:1a:14:68:
         e0:34:e9:88:1d:e6:e4:46:0d:87:e7:ee:da:41:78:d3:39:6f:
         f3:40:69:7d:64:b4:60:24:6f:da:3f:19:a7:33:4d:df:1f:dd:
         30:51:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:30:16 2025 by rpki-client