Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
File:                     ea2f508b-c908-363a-83c1-c21d843b61c0.roa (raw, json)
Hash identifier:          D2bVNa9XoKJsKm3wzlU3Vzes4KfWkwcPv7dX6gHCAu0=
Subject key identifier:   06:2B:B8:0B:51:78:81:93:DF:12:85:80:24:4D:83:F2:FB:71:F5:0E
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584B0746B4E83357058A3799CE00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     29802
IP address blocks:        23.92.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b4:e8:33:57:05:8a:37:99:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=76957eb7-036f-42c2-ba9b-5373379bcde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:6f:7f:f5:cb:ba:6a:62:ad:f6:91:7e:69:
                    37:3f:f8:27:54:0e:4a:31:30:e1:9c:bd:b6:64:49:
                    c0:5a:30:05:bf:03:ea:81:ca:89:8c:02:1e:13:72:
                    4f:7c:0b:28:6a:8b:40:46:8c:77:e8:7c:4d:42:d2:
                    01:ac:78:7c:86:ab:24:33:63:de:c5:99:eb:c3:e4:
                    8e:d0:48:c1:df:7b:a4:86:a1:0a:ea:b6:fa:15:4d:
                    a7:96:91:1f:a8:cc:0f:ea:3c:bf:2c:9b:66:3b:5e:
                    0d:2b:c9:04:3f:24:67:15:ce:9b:34:1f:64:7d:8d:
                    27:28:b3:f3:97:e9:8c:17:12:fe:09:b6:dd:aa:f2:
                    fe:3d:4a:57:a9:95:09:a5:dd:c2:76:dd:d0:33:03:
                    c8:d5:76:39:8e:fa:c8:96:16:f9:41:0d:fd:c1:56:
                    72:37:dd:64:24:ff:5d:90:7b:d9:45:54:81:26:75:
                    5d:8f:d7:2c:bf:2d:a6:e6:37:58:0c:49:6f:96:12:
                    a2:d5:8e:5a:b4:55:6d:44:2e:ea:91:17:0b:08:ac:
                    84:ac:32:e1:86:82:b1:cd:2c:e0:a4:80:71:ae:29:
                    83:e9:0c:2c:66:7a:cf:ee:9c:92:d0:98:cb:92:29:
                    ea:12:ca:8f:7e:ad:c1:b2:fe:ee:b9:cc:08:97:b7:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:B8:0B:51:78:81:93:DF:12:85:80:24:4D:83:F2:FB:71:F5:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:0d:85:03:a2:4c:0b:8d:28:e1:0c:d8:c0:8f:41:86:9e:
         e6:e9:f2:3f:cd:19:08:99:a1:86:da:ea:0b:29:16:ce:91:5a:
         09:b2:c3:b7:30:66:05:15:d6:f4:14:ab:dd:4f:90:6a:f4:22:
         76:d7:96:0e:f0:bd:9a:aa:e1:79:bf:a9:2b:85:b2:a3:ed:85:
         70:bb:16:12:4a:62:89:f9:8a:53:ee:92:54:f0:a5:87:71:b4:
         a9:ac:53:2d:68:34:d7:ea:8d:47:27:fc:06:6f:05:e0:3a:99:
         c6:9b:d2:2c:f1:97:3e:15:bd:cd:a6:09:e2:b9:53:7f:d2:3e:
         0a:7b:2c:46:23:94:95:28:41:af:6d:a6:d8:90:49:0b:d5:29:
         36:4b:26:92:48:68:04:48:07:7e:6b:9d:69:57:ef:42:9f:08:
         d1:f8:f9:ca:57:29:c2:e1:be:6c:f1:7b:01:18:77:d6:36:48:
         0a:84:cb:b1:b1:f5:98:0b:fd:01:63:9b:be:ba:c9:ec:ad:e4:
         2c:4c:37:80:87:18:c5:33:7c:7e:a1:54:86:e1:63:44:c2:9e:
         c7:56:92:f6:bd:13:47:f6:ec:a6:04:fd:7b:a3:c1:87:d6:75:
         69:53:40:cc:8e:82:ec:e9:94:a8:84:7c:d0:59:e3:67:64:4a:
         ce:f3:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:50:57 2025 by rpki-client