Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/e811e4ef-8cdb-31f3-b31f-ddc60c7066de.roa
File:                     e811e4ef-8cdb-31f3-b31f-ddc60c7066de.roa (raw, json)
Hash identifier:          +UkatRybeQ0sLgUEtvLjN1MHjdDNzIbrUvtvQRZdOts=
Subject key identifier:   16:32:55:AF:6F:88:13:CA:E3:8F:EB:43:B3:51:34:3C:DA:DC:C9:F3
Certificate issuer:       /CN=53672676-56d0-4921-8e86-0b820202ef6c
Certificate serial:       010D0C9F4328584AF52155B598940648B43B1920
Authority key identifier: 7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/e811e4ef-8cdb-31f3-b31f-ddc60c7066de.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399082
IP address blocks:        23.174.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:55:b5:98:94:06:48:b4:3b:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53672676-56d0-4921-8e86-0b820202ef6c
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=53422def-5e9e-42ba-9c5b-0acb4ce56ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:a7:b9:b8:b0:89:b9:13:b2:de:fa:eb:50:
                    93:99:74:38:18:46:9d:da:bf:85:45:28:43:d6:7a:
                    82:b4:f3:61:6d:57:36:60:d9:ea:38:9b:1c:6b:1f:
                    4c:6b:11:e5:fc:41:0f:f9:a8:2c:14:a3:b2:dc:4b:
                    c3:2a:0c:76:ac:b7:d5:db:e2:49:57:4b:dc:65:cb:
                    25:8c:84:7d:87:3a:e8:26:c1:ac:bf:c1:d7:43:56:
                    c9:b2:d3:95:44:b7:32:5a:bf:2f:10:8d:9a:a9:84:
                    bc:b5:1f:42:c6:e7:d1:db:2a:96:22:6d:0f:97:2b:
                    9d:98:d8:a3:cf:94:f6:e8:49:14:f4:72:98:58:1a:
                    2d:95:17:5c:26:ca:ff:5b:2f:7e:13:42:8c:0b:39:
                    b7:1b:8f:f4:8d:53:f6:fd:dd:a4:ae:d4:2e:40:7a:
                    b0:e4:1a:16:52:35:88:77:52:51:18:e7:60:60:20:
                    ca:24:85:05:b8:28:33:88:ab:0a:67:a4:59:50:d3:
                    4a:86:84:fc:0a:68:da:7f:e8:f9:0d:8b:7f:f0:70:
                    93:3a:60:6e:f6:af:01:d6:60:2b:7b:7a:34:af:84:
                    d8:7a:46:fc:28:b7:f8:c9:c3:a2:e0:58:80:90:86:
                    11:9f:06:8a:9c:f3:0c:bd:f5:77:66:71:6a:96:17:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:32:55:AF:6F:88:13:CA:E3:8F:EB:43:B3:51:34:3C:DA:DC:C9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/e811e4ef-8cdb-31f3-b31f-ddc60c7066de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl

            X509v3 Authority Key Identifier:
                keyid:7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:7e:f5:aa:0c:86:79:f3:ca:3f:e8:e7:1b:d3:a5:c6:85:
         bb:00:aa:45:9d:3d:75:2f:fb:e5:0a:8d:fe:95:b0:18:46:d0:
         c6:3f:f5:f1:45:81:48:78:3f:2e:8d:b2:44:f7:14:8c:82:1b:
         42:e9:a5:54:bc:4b:b9:16:c3:34:ff:b3:22:39:1a:99:ee:22:
         da:bb:ac:22:9b:4a:43:78:b1:d2:b2:3f:e3:cf:a2:70:8c:fa:
         06:8d:f6:bb:19:df:cc:08:43:26:6a:7e:2c:29:67:33:ff:72:
         aa:ff:a2:2e:40:57:90:ea:41:40:96:f3:b2:e8:82:c9:22:68:
         cd:44:ef:71:f0:99:56:14:57:b3:b0:4e:7d:df:20:b2:a9:1d:
         2d:11:93:49:e7:16:9a:1c:58:fd:2e:a1:a9:ee:16:b1:ae:01:
         9f:1b:1e:d0:9c:a0:b2:86:95:55:e6:50:e7:45:7d:f9:a3:b3:
         d9:e4:d5:25:fb:1c:0a:00:f7:68:17:e9:b3:66:d0:bc:8d:a4:
         20:57:87:ce:00:a3:fb:c8:84:c1:e1:4a:24:43:89:ea:6b:c1:
         fb:c2:8b:1c:9b:ef:43:db:fd:18:10:ca:c0:8f:39:1b:17:cd:
         25:c3:c4:55:69:6c:2f:ba:11:e2:63:17:4e:69:39:b6:aa:d3:
         fa:2c:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:13:47 2025 by rpki-client