Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/f3d237f2-cede-3f1a-a874-91ad868d163f.roa
File:                     f3d237f2-cede-3f1a-a874-91ad868d163f.roa (raw, json)
Hash identifier:          40sIe0RK9CIZ2pMVc87YoOAET4rY9yOZivQPhzwG3j4=
Subject key identifier:   C0:4E:B0:D5:4B:CA:AF:56:FF:C8:F1:2C:04:5B:F6:DB:A3:3A:80:38
Certificate issuer:       /CN=a2aa5867-ffec-4a93-9a1a-74ad78c19c71
Certificate serial:       010D0C9F4328584AF52170840AE29AC63036C948
Authority key identifier: 82:C9:D5:CC:A1:C7:A8:D3:92:23:06:82:FC:72:A5:6E:F6:68:E3:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/f3d237f2-cede-3f1a-a874-91ad868d163f.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     214483
IP address blocks:        23.139.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:70:84:0a:e2:9a:c6:30:36:c9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2aa5867-ffec-4a93-9a1a-74ad78c19c71
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=7bd7d496-a687-46c1-b366-a1924c570a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:55:a7:cd:05:83:29:0f:30:8f:83:47:a9:
                    32:3b:e8:5d:bc:5f:b7:f2:5a:ab:43:e3:ba:b4:31:
                    f6:86:61:0c:06:be:1f:82:aa:ff:72:36:40:17:65:
                    99:f6:a5:9c:3d:50:2e:76:4d:26:5f:9c:5f:97:6f:
                    31:67:25:e1:9d:2a:9c:5c:b3:f6:fd:f5:21:e3:71:
                    cd:27:c4:bc:91:e1:8e:ee:16:ea:dc:1d:52:7e:34:
                    84:f7:08:d8:3f:23:89:b3:fe:97:74:a9:ae:01:99:
                    23:65:5c:ee:4e:c6:84:1b:28:88:3d:10:df:49:fc:
                    83:6c:6f:43:f7:b6:09:f1:a6:2b:ee:34:f3:e2:ae:
                    59:d8:cf:bf:9c:1a:76:3e:96:65:22:4f:88:af:dd:
                    61:24:59:da:df:5b:54:61:e1:5e:17:da:97:f5:4d:
                    37:37:ba:9a:c7:78:61:f5:1f:c8:94:e8:01:e9:52:
                    fb:6f:1f:bc:7a:ff:74:bf:31:a7:56:c3:ff:a4:7d:
                    e3:98:7b:32:b6:e9:b4:20:86:57:43:9c:72:d3:92:
                    32:e4:5d:61:1b:d2:bd:a8:a1:f9:55:0f:1d:cf:0c:
                    51:2c:f0:8c:80:c2:4f:de:d4:1d:e6:90:24:a4:c8:
                    00:33:f5:b7:00:9d:a7:f1:29:6b:8a:21:5c:a2:75:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:B0:D5:4B:CA:AF:56:FF:C8:F1:2C:04:5B:F6:DB:A3:3A:80:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/f3d237f2-cede-3f1a-a874-91ad868d163f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.crl

            X509v3 Authority Key Identifier:
                keyid:82:C9:D5:CC:A1:C7:A8:D3:92:23:06:82:FC:72:A5:6E:F6:68:E3:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:bd:ad:a0:f8:18:17:a0:dc:bf:49:83:50:06:b8:8a:3b:6b:
         32:4c:e7:1e:14:b9:de:f2:2e:ae:39:ab:8b:03:eb:9d:4c:c6:
         c3:6d:75:8e:e1:38:c2:a9:c2:2b:73:58:d8:a7:9b:b6:b5:bc:
         be:c5:a7:35:69:75:0f:32:03:0f:c0:73:30:4b:e6:21:18:d9:
         04:ae:be:02:ae:dd:f5:d2:02:d0:a4:18:fe:f3:20:13:12:7c:
         4b:19:47:69:1e:72:a8:21:1a:cc:26:44:f6:8f:c4:0f:10:9a:
         3e:e2:f7:ac:04:0f:4c:9b:d0:e1:07:ee:a8:f4:43:68:07:ef:
         74:96:8f:a9:4e:35:f6:78:04:d9:3f:9e:72:64:25:8e:c5:93:
         36:45:b3:c9:1f:ba:6b:99:11:14:0a:ab:9c:8e:6b:4a:81:94:
         29:fa:cc:b3:2c:e4:b8:24:b9:b2:6f:18:f1:c9:ff:76:ef:0b:
         c7:d0:68:95:2d:f9:a3:10:79:92:cc:9a:08:ef:d2:43:50:60:
         7f:1d:a6:f0:cd:6d:6e:c9:6e:a3:00:5d:78:b2:b3:d6:7f:db:
         9f:ed:00:f1:53:50:3b:27:66:89:b1:c8:d6:dd:8d:78:67:b2:
         e0:18:fc:01:52:a2:37:ea:4f:92:b4:dd:d7:4f:47:a3:67:cc:
         c8:6e:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:40 2025 by rpki-client