Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa
File:                     e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa (raw, json)
Hash identifier:          lr8j2/AoGiv5Ie1BKVmeLb+Bv1bMFSaYjOuqpcpvpZ0=
Subject key identifier:   97:6A:6B:CC:14:C9:3F:5B:1B:A6:2F:8A:6D:7D:E3:58:78:5D:93:19
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F4328584B0B76ADF15222194DACD1D900
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     35280
IP address blocks:        23.158.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ad:f1:52:22:19:4d:ac:d1:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=eaaa425d-30cc-4f00-b4e8-af571cc63108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:b6:d8:89:a9:76:57:58:32:55:d4:31:e2:
                    7b:27:8a:d5:c2:40:63:97:9d:90:d2:b3:00:83:a9:
                    71:55:c4:c3:21:ec:9f:56:08:ff:f5:5b:01:4e:15:
                    2f:3e:d8:81:7a:ee:bd:14:c0:3e:12:e6:1d:e3:7d:
                    06:40:bd:c1:04:c9:88:a5:ad:20:c4:03:7d:6a:19:
                    54:3d:32:2b:3c:ef:87:ae:df:fe:ad:47:22:ed:11:
                    e7:95:0f:0a:74:7d:c8:79:81:d9:46:9f:4e:49:e0:
                    8c:be:82:70:32:d8:c3:e0:80:4d:e7:3e:71:7f:32:
                    de:21:e5:85:1a:27:d1:57:56:b8:e1:ac:c5:f3:ad:
                    2f:fa:31:cf:a2:65:32:49:5c:bb:22:1f:ab:84:38:
                    8f:6b:eb:97:a9:24:da:65:ac:7f:d4:8f:72:16:cc:
                    53:76:03:8e:90:90:4c:de:54:39:76:bd:fc:1c:d5:
                    2c:3f:b0:e8:71:38:83:41:f5:c5:64:1b:49:70:93:
                    33:c4:25:b1:c8:68:dc:8c:a3:33:ec:45:5e:19:b1:
                    87:1e:70:82:fa:91:ae:a6:e7:95:d4:c1:9c:cf:2f:
                    a4:b4:0f:57:7f:dc:24:f6:b6:d9:6b:ef:ff:6e:c1:
                    45:29:25:c9:66:cb:a4:55:d7:19:d0:d2:f5:4b:12:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:6B:CC:14:C9:3F:5B:1B:A6:2F:8A:6D:7D:E3:58:78:5D:93:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:6b:d3:b0:b7:21:74:d1:63:98:88:8c:3e:b6:0b:3f:b6:
         81:d1:98:f7:57:0c:40:c2:df:d5:e0:38:28:c1:f0:40:92:17:
         3e:8d:eb:7a:e5:89:5c:70:63:e4:00:97:da:d2:f2:8f:24:be:
         21:95:e5:81:2e:3d:e4:65:ce:49:f4:52:8a:1b:5a:aa:d6:57:
         44:e4:79:a0:90:cc:a2:73:50:f4:fa:5f:45:f7:26:41:22:e5:
         04:6e:31:21:a8:04:ed:3b:dc:6e:2b:02:c8:3d:c6:30:f0:d8:
         bb:df:b6:87:3c:0c:da:ca:bd:f8:6a:09:de:87:26:f4:28:75:
         50:81:eb:2b:77:4e:42:7f:e7:36:de:ba:a9:83:db:84:b5:85:
         ad:a0:95:61:7c:89:6f:51:ad:20:2c:8a:21:3b:fa:89:79:4c:
         4f:a3:48:03:60:cb:01:9f:63:f1:0e:5f:d0:78:17:9c:1b:b0:
         f7:8d:32:82:5b:15:20:05:52:a7:0c:d4:1c:71:66:ba:3d:44:
         77:07:c5:42:b3:20:7e:e4:ad:8b:36:2e:d4:f0:46:8e:04:43:
         79:0e:65:c3:75:c7:21:a2:d9:23:37:67:e3:ca:d2:db:69:14:
         fa:5d:e6:af:1f:6b:91:e0:90:1b:bf:99:a8:14:a8:52:9c:1d:
         a2:dc:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 05:00:24 2025 by rpki-client