Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/e8b3616b-d330-3176-b019-351325f8bf00.roa
File:                     e8b3616b-d330-3176-b019-351325f8bf00.roa (raw, json)
Hash identifier:          yz0IVzLydiGH8eTN58/FhaLwWeu9NPqT9tPtzk2tQI0=
Subject key identifier:   E2:56:7B:61:50:03:14:F2:04:6D:A6:E1:9B:B3:F8:E8:9F:97:B6:E8
Certificate issuer:       /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial:       010D0C9F4328584AE891380971C35097C261C2F0
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/e8b3616b-d330-3176-b019-351325f8bf00.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     30399
IP address blocks:        23.153.216.0/24 maxlen: 24
                          23.153.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:38:09:71:c3:50:97:c2:61:c2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=623fbc0d-9e36-4d6a-866a-878565a46ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:5f:e5:73:81:e7:d5:4e:c1:6f:98:b1:f6:
                    39:be:d3:35:0a:1f:f9:78:cc:ac:98:b8:f5:34:97:
                    f3:46:cd:37:c1:50:4e:dd:ac:d8:e8:8d:0e:65:33:
                    08:b4:97:38:7c:2d:fa:24:92:9b:69:57:09:ad:3f:
                    6b:20:6a:d5:36:30:60:ec:82:d0:a9:b2:9f:b5:87:
                    19:67:8a:d1:28:ee:4e:08:1d:3d:58:92:72:ae:26:
                    f5:e3:01:68:5a:98:d3:be:d8:ad:be:0e:ba:f0:21:
                    2c:5b:e6:d9:28:d0:00:e1:82:ec:3c:f3:0d:e9:d2:
                    9b:1d:e0:93:de:e4:91:9d:c9:e5:78:82:8d:7b:45:
                    10:e5:79:a0:de:f4:37:ed:a3:22:3b:30:60:45:14:
                    26:f7:6e:b3:80:2a:f6:db:6b:bb:70:da:06:bc:c3:
                    05:66:36:ae:2c:7a:5f:e1:f8:9d:98:06:67:8b:8d:
                    c6:ac:43:4b:62:3e:7e:49:84:cd:e3:78:3a:2c:43:
                    27:3f:59:1b:33:a8:21:6f:61:d2:8e:be:b2:26:14:
                    22:8a:39:d7:0f:bb:7a:2b:a0:b0:46:4f:53:2c:d1:
                    23:68:e4:26:6c:3c:45:0c:41:71:96:f3:d1:fb:19:
                    eb:b2:af:c5:a4:81:b2:41:c7:2b:07:53:fb:d4:86:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:7B:61:50:03:14:F2:04:6D:A6:E1:9B:B3:F8:E8:9F:97:B6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/e8b3616b-d330-3176-b019-351325f8bf00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl

            X509v3 Authority Key Identifier:
                keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:fa:40:2f:2c:49:cd:8b:68:eb:cb:61:30:51:20:8e:86:
         47:96:4b:b3:1a:75:d5:d2:39:18:28:d8:bf:3c:ea:d0:5d:f1:
         b1:6d:97:f4:7f:88:60:4a:bf:29:af:df:de:1e:04:4a:71:f8:
         0f:4c:0a:b5:4f:20:7e:08:29:43:3a:61:89:fe:8a:82:1c:b8:
         a2:3d:7d:b0:1b:43:68:57:4b:5f:38:99:91:dd:e3:55:a4:fa:
         be:6d:8a:b4:7c:ec:a2:6d:82:cf:d4:63:5a:e0:37:ef:b9:61:
         40:fc:80:19:13:48:5e:4e:20:ae:e8:72:c7:e9:9b:e9:48:af:
         ff:74:6b:55:fb:6f:1b:1a:bb:34:c7:87:dd:af:c7:b8:53:36:
         93:74:67:ff:dc:4e:34:5e:75:5c:0c:ae:9e:7f:ae:da:b0:0e:
         a5:de:1a:38:9e:78:b9:12:f5:d9:a3:0b:c1:91:87:e9:7b:8a:
         a7:61:da:cd:14:b4:1f:3b:3c:3e:7d:4e:da:53:ed:e1:a4:0d:
         8f:78:79:88:82:1e:23:99:1a:bb:bf:d6:f7:c1:5f:29:f1:24:
         28:99:e2:41:a2:f1:a7:83:43:e6:52:73:36:9b:5d:aa:39:d9:
         96:a7:c9:6e:d4:23:0f:e8:fb:18:7f:b6:e6:01:de:bb:e2:b0:
         25:f9:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:09:36 2025 by rpki-client