Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
File:                     ca756e9a-47d8-33bf-9e02-86af045884a9.roa (raw, json)
Hash identifier:          spfVAu/0PLO5I62zR3QH+XM04bQBv39AxRZXumXAJuk=
Subject key identifier:   37:73:40:B1:69:4F:93:8D:A6:F3:8E:F1:B2:69:79:19:0B:84:47:70
Certificate issuer:       /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Certificate serial:       010D0C9F4328584A6B1315C877C20F62392DC5B0
Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
Signing time:             Sat 05 Jul 2025 14:10:43 +0000
ROA not before:           Sat 05 Jul 2025 14:10:43 +0000
ROA not after:            Fri 03 Oct 2025 14:10:43 +0000
asID:                     135074
IP address blocks:        23.145.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6b:13:15:c8:77:c2:0f:62:39:2d:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
        Validity
            Not Before: Jul  5 14:10:43 2025 GMT
            Not After : Oct  3 14:10:43 2025 GMT
        Subject: CN=a2c179c0-a6ed-4da6-bf9f-cf8af28eab71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:a6:9b:1d:25:84:a9:79:09:dc:fb:a6:96:
                    d8:e0:cc:81:a9:dd:bd:3b:ab:c9:22:35:2b:e5:46:
                    a1:be:33:8c:69:7e:49:17:c1:92:9b:cc:05:76:83:
                    f4:10:f9:8f:4b:9f:be:10:30:55:2f:d2:23:48:dd:
                    0f:b9:a5:ce:15:fd:d8:a9:35:1c:54:d0:77:04:26:
                    e9:22:68:ff:87:80:4b:3c:f1:6f:1d:c2:b2:3f:e0:
                    c5:65:93:54:ea:ee:ae:d0:c0:00:4d:aa:d9:2d:57:
                    ed:0b:61:6f:67:b0:48:8c:7a:f5:3a:58:1a:83:28:
                    5d:23:32:47:38:34:71:39:42:40:19:36:3c:ee:10:
                    27:2d:6a:4e:31:dd:84:aa:16:ff:3f:b2:59:ae:09:
                    3c:c9:c7:ef:f8:df:3a:c7:0d:1b:96:5f:d9:18:53:
                    f4:a1:3f:ec:75:e7:e0:26:68:a6:27:3f:9b:28:e8:
                    1c:af:e8:71:d5:eb:0a:c2:e9:08:b2:37:24:49:51:
                    ca:da:06:ef:58:59:45:50:6d:12:f8:b9:b2:d6:8f:
                    51:2e:76:35:13:59:20:68:f1:a4:68:59:f9:09:0f:
                    ff:09:41:38:f3:c1:22:dc:e0:67:f8:e3:ad:c7:26:
                    61:a3:c6:1d:ee:b7:05:52:f4:ec:cd:41:df:25:95:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:73:40:B1:69:4F:93:8D:A6:F3:8E:F1:B2:69:79:19:0B:84:47:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl

            X509v3 Authority Key Identifier:
                keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:59:8d:79:e2:20:46:0a:c8:42:d9:74:f9:9b:05:b9:1b:b3:
         a1:84:52:28:f4:32:6d:4f:8c:f3:15:a3:d9:4d:00:f9:93:b6:
         02:9c:af:30:69:95:fc:e8:6f:00:1f:64:8a:9f:f0:6e:f6:b8:
         56:8e:da:b3:b8:d6:58:5b:2a:0f:fc:be:6e:4d:f6:33:8d:44:
         ce:6d:33:6b:95:a0:43:69:76:e2:75:29:04:27:45:f8:9f:2e:
         b4:a1:aa:c4:ef:1b:44:9b:35:7c:92:45:e8:b1:44:5f:2c:c3:
         c1:fe:56:91:70:12:8d:c0:a6:19:a2:65:82:b1:14:15:28:9e:
         3f:7a:14:32:bb:f4:d3:98:bf:28:cd:7b:72:9d:50:da:2c:93:
         0e:03:d1:dc:bc:20:b1:35:ab:c8:90:e9:86:77:b4:d0:59:99:
         52:8c:13:3d:2a:b7:ac:c3:9d:d6:7d:68:ec:02:2f:3a:55:e9:
         88:cc:e7:da:fa:97:55:96:16:d1:52:be:dc:71:a7:95:96:58:
         17:fa:10:5d:4f:02:99:eb:a2:34:ff:2e:0f:38:d2:72:fb:7e:
         18:3e:ce:97:b9:57:6b:53:ca:d7:a2:74:12:e8:62:7c:f8:0e:
         10:73:59:f9:99:a8:21:b8:93:c2:89:d3:b0:18:85:6f:bc:95:
         54:f6:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:52:34 2025 by rpki-client