Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/b67f2c1a-e758-3e19-baf7-12aa9cb385cf.roa
File:                     b67f2c1a-e758-3e19-baf7-12aa9cb385cf.roa (raw, json)
Hash identifier:          D5FuOl7yJBgTLC7B3TSWHh82RpOF5i7S2tz5fXZpsr0=
Subject key identifier:   FC:A0:C1:19:55:B6:71:CA:4C:02:C5:A1:1D:BB:A7:35:95:B2:9B:5E
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328584B1806CEBE2095000B2866A9C0
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/b67f2c1a-e758-3e19-baf7-12aa9cb385cf.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     210630
IP address blocks:        23.137.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:ce:be:20:95:00:0b:28:66:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=a1284e62-47c3-45b1-a7b7-e1d4335b02df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:a0:5a:c0:a7:c2:99:d2:46:12:12:1c:70:
                    c6:9a:04:4d:75:1b:8e:6a:fd:0e:86:c7:6b:3a:89:
                    de:db:ee:3d:b4:3f:0f:83:d9:b5:81:c5:4c:37:73:
                    94:3f:3c:09:79:d2:65:47:1b:00:d4:02:49:f4:cf:
                    87:e9:5f:36:21:a9:cf:6e:63:5a:2c:e2:ea:87:7c:
                    0f:d8:c9:ff:5e:e7:d2:46:ce:de:4a:6a:ed:0c:5c:
                    8d:a9:a7:c6:47:ea:1f:d4:d1:35:e6:3d:e5:f3:e6:
                    10:15:98:e6:6b:3d:6c:95:0d:72:03:40:44:6e:fa:
                    9b:1a:44:25:9d:86:2e:5f:db:29:ac:c2:a0:88:05:
                    55:cc:d8:92:64:a6:76:f1:4c:62:95:4a:9b:f6:23:
                    21:e5:26:3c:c1:58:50:f8:a4:63:ff:42:fc:13:ef:
                    c9:cf:70:bb:84:2a:47:77:c9:d6:bd:c8:6c:0a:ab:
                    d9:49:f3:16:1d:d9:38:a1:17:07:f7:3e:79:8b:c5:
                    97:bd:eb:bb:b9:32:44:c0:03:b3:c2:66:93:7b:55:
                    92:2d:f9:f9:7a:51:e1:8e:0b:33:85:1a:c5:e1:28:
                    00:c2:8e:4c:eb:02:93:0d:30:cb:83:6e:1f:37:b7:
                    da:41:82:fb:91:f4:5a:23:d4:b5:e9:79:79:31:82:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:C1:19:55:B6:71:CA:4C:02:C5:A1:1D:BB:A7:35:95:B2:9B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/b67f2c1a-e758-3e19-baf7-12aa9cb385cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:e7:94:ee:77:fb:02:b4:99:33:c2:a7:03:28:e5:f6:3d:
         dd:ba:ee:ad:49:de:96:cb:e0:d5:bf:7e:6e:f3:23:ec:99:08:
         73:93:d3:e6:f8:66:d4:97:7f:e6:15:78:4f:34:7b:4b:f9:6e:
         30:8f:6e:be:51:7e:98:fd:ff:74:10:f6:84:68:ee:bd:c9:1b:
         d5:c4:c0:2e:bc:0a:1e:f9:82:5f:52:fe:58:1d:8d:b5:89:88:
         76:04:8a:9e:ea:6b:2d:65:1f:48:15:bc:01:02:03:d3:69:56:
         be:ba:d3:7f:b5:c5:b3:2a:83:d7:e8:7b:f5:74:84:28:70:d4:
         17:0c:84:f3:7f:e1:51:63:99:b1:7a:7e:e5:33:27:2e:ea:91:
         71:ae:c8:92:d0:95:36:30:06:cf:0e:d5:7b:b3:a1:3e:06:a9:
         58:74:77:7b:ab:2d:d2:60:ac:8e:31:b3:21:a7:a9:91:f5:b3:
         16:67:55:16:6b:13:69:85:5a:0b:a2:f5:7a:0b:d6:a4:fa:e2:
         db:86:f9:d8:86:cd:66:e1:63:94:c4:4a:bf:05:f6:59:09:a2:
         39:f1:6c:c5:25:15:06:4b:b4:93:e2:97:46:aa:f7:13:ea:9e:
         94:25:fd:4b:59:2d:23:05:7a:0d:0a:b9:f6:7c:88:a0:bc:81:
         6b:c7:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:57:51 2025 by rpki-client