Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/cf805fe3-0d09-3847-aa9a-77380429d203.roa
File:                     cf805fe3-0d09-3847-aa9a-77380429d203.roa (raw, json)
Hash identifier:          DlVCBDfWTzBtnLy7FOTPiGlEJVO/B7wbrYRo13bZzx8=
Subject key identifier:   52:99:FD:E5:08:9E:30:96:00:D0:51:F7:25:FA:F6:C8:37:06:A4:61
Certificate issuer:       /CN=914db202-4885-454b-97f8-223de4bf2ca8
Certificate serial:       010D0C9F4328584A936B5968BD63FAAA3EEB4B60
Authority key identifier: C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/cf805fe3-0d09-3847-aa9a-77380429d203.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     45691
IP address blocks:        23.137.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:59:68:bd:63:fa:aa:3e:eb:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914db202-4885-454b-97f8-223de4bf2ca8
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=8a397cba-2779-410c-89de-f7f87e5f96df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:6a:c9:34:6a:af:1e:0d:15:95:ae:f0:16:
                    c3:ee:c2:74:46:f1:1f:d0:bc:f8:77:f9:25:4b:86:
                    54:fe:8f:d3:c2:cb:43:9a:a1:5a:36:c7:94:96:fa:
                    26:aa:a9:58:ba:2c:32:d0:6f:a2:03:00:00:5b:71:
                    52:df:f4:99:28:d2:a9:0d:35:ee:22:80:75:5f:4a:
                    98:e3:3f:3a:ef:0c:ff:a2:63:a4:ed:7c:65:b8:00:
                    94:c9:46:e1:b8:e2:5f:df:1c:fd:25:9e:14:79:cd:
                    93:a0:3f:27:96:69:46:33:4d:fe:f2:8d:0f:d2:1b:
                    ac:14:ab:3b:65:52:7b:fd:5d:f5:b8:6f:a8:53:de:
                    52:05:82:65:6e:7a:b9:64:4e:0e:45:0f:56:ba:b6:
                    a6:fb:a0:db:9b:b9:09:23:4f:2f:34:8b:05:1b:91:
                    78:4e:b9:b1:76:75:97:10:bc:ff:e0:29:fd:e6:24:
                    95:96:3a:9b:80:6a:d5:5d:31:bf:68:13:34:58:8b:
                    09:a6:88:58:fd:34:10:c6:0c:13:87:ab:0a:7b:ec:
                    0a:8b:9d:29:fb:32:f4:ec:2c:2f:d9:6b:8b:27:fc:
                    84:dc:6c:34:73:98:71:f5:c9:37:71:48:72:75:d4:
                    75:01:50:21:e0:1c:4c:40:c3:28:fe:5c:a8:da:9f:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:99:FD:E5:08:9E:30:96:00:D0:51:F7:25:FA:F6:C8:37:06:A4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/cf805fe3-0d09-3847-aa9a-77380429d203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:d1:51:9a:19:2a:38:aa:a5:5e:e8:95:95:aa:d3:98:a2:
         aa:cb:a0:75:89:15:46:cb:7b:43:0c:ce:e4:07:43:48:7e:ba:
         23:ad:2e:e4:65:9d:5a:c2:41:c9:0d:74:3f:15:3c:e3:81:e3:
         c6:da:46:0b:ea:92:0b:91:88:c9:ff:42:60:20:aa:03:60:97:
         4c:9c:09:d1:b4:60:ef:77:11:34:0c:36:9f:02:16:f0:bc:c8:
         7d:1a:10:32:07:16:85:a4:73:94:08:6d:9a:1b:44:6b:71:fb:
         e6:a2:a8:f9:8f:ce:51:da:ef:2c:b3:6b:8e:3d:29:91:a6:df:
         12:81:72:9e:0e:e8:e1:24:fe:e0:3a:52:1a:02:22:3f:7d:af:
         2a:55:e8:76:6b:e5:e6:6b:2f:94:22:22:b5:73:4b:41:93:cb:
         c1:77:02:bc:28:3b:75:82:21:81:13:0e:44:6a:3e:b7:3b:f9:
         a3:93:bb:40:8c:e8:56:b1:c3:f2:00:c1:5c:a2:ba:3a:48:00:
         4f:45:5a:73:62:68:b2:79:27:fe:29:80:6a:94:47:41:40:cc:
         f8:45:12:ff:29:bc:be:b1:2b:79:29:28:a7:25:a8:76:65:53:
         4b:8f:d3:10:8d:96:ea:28:7b:67:31:5f:9a:c5:d1:83:f1:d1:
         90:71:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:49:18 2025 by rpki-client