Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/522ed241-5cbb-31f3-8769-5c3715560bd7.roa
File:                     522ed241-5cbb-31f3-8769-5c3715560bd7.roa (raw, json)
Hash identifier:          t3pzEF4D9N+GCjZye+UxE72bzXU7F/JJlaapMjL+OWk=
Subject key identifier:   6F:13:45:A7:22:5C:40:46:DA:53:CA:84:71:BC:06:5F:5B:4F:40:24
Certificate issuer:       /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial:       010D0C9F4328584A6B15DF91C046276A18F48A80
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/522ed241-5cbb-31f3-8769-5c3715560bd7.roa
Signing time:             Sat 05 Jul 2025 14:16:20 +0000
ROA not before:           Sat 05 Jul 2025 14:16:20 +0000
ROA not after:            Fri 03 Oct 2025 14:16:20 +0000
asID:                     135074
IP address blocks:        23.145.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6b:15:df:91:c0:46:27:6a:18:f4:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
        Validity
            Not Before: Jul  5 14:16:20 2025 GMT
            Not After : Oct  3 14:16:20 2025 GMT
        Subject: CN=b0588eec-04aa-4299-a548-e637adbcb587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:bf:47:d7:36:02:2b:f8:ba:9b:f0:b2:e5:
                    78:3d:64:fb:e5:33:f0:26:93:0d:87:6a:52:a4:ca:
                    48:4f:0e:e7:35:24:68:bf:c2:ff:44:42:69:9d:b2:
                    a8:e3:3b:f9:36:14:d7:16:b9:06:5e:02:93:dc:75:
                    df:8f:51:a6:13:3d:f4:d1:cd:d4:72:61:b7:52:27:
                    26:dc:73:d1:f7:9e:82:b8:4d:de:88:bd:93:5a:cf:
                    21:4e:dc:83:74:fd:15:23:cf:db:38:89:d0:f1:b5:
                    89:f2:87:b5:dc:b4:7c:93:c8:eb:d1:a6:f7:a7:53:
                    c8:03:1c:55:81:b3:41:44:7d:85:63:d9:1a:ed:5b:
                    be:88:da:c7:64:d2:c6:8c:f9:13:6e:88:e7:c2:bd:
                    f4:16:87:da:3e:4d:a9:df:6d:f6:26:44:71:30:81:
                    c6:ba:ef:81:17:a7:1c:68:93:e9:d7:56:f8:3f:6f:
                    22:98:21:79:78:b5:0c:d9:df:0e:f6:28:4c:90:4c:
                    8d:4c:90:4d:a7:a1:d5:e9:4e:60:2b:ca:c5:e2:03:
                    7c:95:81:4d:9e:69:09:bd:c0:ca:77:de:75:a9:c3:
                    42:b8:70:5c:20:82:97:9c:57:f4:ef:51:2e:54:cc:
                    2c:82:c0:b5:27:e3:cf:04:52:e3:e8:a9:c5:40:55:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:45:A7:22:5C:40:46:DA:53:CA:84:71:BC:06:5F:5B:4F:40:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/522ed241-5cbb-31f3-8769-5c3715560bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d0:a7:6d:39:ac:04:7c:ce:e7:bf:d7:16:0a:64:89:6b:b8:
         06:f1:d4:13:12:d7:25:e5:07:84:47:5e:01:9a:c0:31:33:48:
         ba:f2:35:20:ff:8f:b3:71:05:ee:fb:5e:87:4f:69:5c:38:83:
         cb:d1:7f:54:bf:1a:7b:4c:b3:59:f6:00:34:29:d1:dc:ec:5e:
         4d:50:4f:2d:54:43:82:87:f2:ce:20:de:16:dd:2d:cd:72:1d:
         34:92:c6:dc:0d:23:e4:30:de:aa:eb:0b:0e:25:49:58:14:f4:
         6c:69:99:b4:ca:88:cf:46:d6:74:cf:2a:e3:89:3d:91:e0:93:
         ea:34:42:f1:6c:be:5e:14:fe:c2:9e:3e:07:f6:61:05:c6:12:
         f1:db:61:04:4a:f9:64:86:51:df:e8:1f:fe:a0:d1:2b:b5:2e:
         ac:4a:a8:fe:a9:c0:c4:08:30:0a:99:30:ac:c5:ee:2c:f3:a2:
         99:8d:8d:bc:72:b1:15:95:72:e6:a3:f4:56:bb:4b:af:44:4d:
         e4:b5:7f:3a:a7:0f:2a:b9:78:05:89:48:13:fc:02:65:d8:de:
         d7:af:78:79:ee:0f:b8:5b:71:2f:cd:48:02:d6:5b:2f:28:96:
         6b:12:8a:37:cc:fa:bb:be:aa:90:4a:1d:56:2e:e4:5d:be:a3:
         1d:01:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 00:29:49 2025 by rpki-client