Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa
File:                     0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa (raw, json)
Hash identifier:          w9Yw+l0UfAzc658vatJuMd+s6zy3zm8xvltkRJOW+c0=
Subject key identifier:   A5:54:16:61:0C:2F:9F:2D:5F:CB:8C:54:9B:A2:B2:35:D9:CC:51:6C
Certificate issuer:       /CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf
Certificate serial:       010D0C9F4328584AC4463F7DA94C53ED2D622100
Authority key identifier: A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa
Signing time:             Wed 06 Aug 2025 13:00:42 +0000
ROA not before:           Wed 06 Aug 2025 13:00:42 +0000
ROA not after:            Tue 04 Nov 2025 14:00:42 +0000
asID:                     2914
IP address blocks:        23.134.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:46:3f:7d:a9:4c:53:ed:2d:62:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf
        Validity
            Not Before: Aug  6 13:00:42 2025 GMT
            Not After : Nov  4 14:00:42 2025 GMT
        Subject: CN=32b2f039-d3a2-41bc-abc9-3371c33c4f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:2e:7c:9c:d6:57:70:ee:da:c1:a6:da:9d:
                    d5:af:99:a7:90:38:05:40:71:2f:79:70:93:00:64:
                    7a:f9:d4:16:94:22:fd:0a:35:1b:e8:9e:26:bb:d0:
                    6e:51:61:de:be:79:46:87:d4:55:5e:0e:ac:70:16:
                    58:51:1f:d7:a3:ba:b4:bc:ca:2d:40:2b:22:cb:c3:
                    d8:16:fa:81:ea:90:4c:26:f8:03:2e:80:0e:b4:05:
                    23:8a:6d:06:52:41:a7:bb:2a:6f:73:55:cb:9e:56:
                    15:76:79:f7:b5:9f:ec:45:e7:7c:e0:dd:1f:ad:a3:
                    e3:1f:a4:11:11:95:3a:d1:13:19:ec:80:41:a2:1c:
                    45:b6:e0:0a:83:04:fd:1a:20:47:4f:e4:20:71:1f:
                    72:e7:12:eb:10:b8:dc:ab:b2:8d:a1:80:4b:ef:d5:
                    04:05:32:52:c4:9d:9f:8d:7f:bc:9a:a0:7d:49:10:
                    d9:1b:db:c9:57:ee:76:5b:57:b8:35:ae:60:db:3b:
                    71:4a:15:bd:19:d0:95:9b:85:f6:da:7e:0d:cc:f1:
                    0e:1d:c0:df:18:db:0c:1f:fb:3a:b5:7f:09:cd:08:
                    75:2e:a7:6f:f3:04:ea:96:b2:36:17:e4:6f:71:a7:
                    44:2b:48:4e:a5:aa:51:e7:ba:a3:51:85:5c:02:75:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:54:16:61:0C:2F:9F:2D:5F:CB:8C:54:9B:A2:B2:35:D9:CC:51:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl

            X509v3 Authority Key Identifier:
                keyid:A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:55:21:de:09:12:e8:95:2f:f8:27:ad:16:9e:9c:a1:b2:68:
         63:42:1d:a3:d2:ac:75:db:fc:6c:37:db:40:fa:68:bd:fe:45:
         45:d6:5b:00:cc:eb:eb:4e:14:9b:8e:af:57:13:03:0f:05:6f:
         3e:12:ed:72:a3:29:67:50:40:33:1b:aa:1b:dc:01:d2:9c:63:
         49:83:4e:7d:78:b3:7d:89:d3:f4:09:31:1f:84:bb:e6:2e:a2:
         f1:c0:2d:7e:37:c1:f3:b2:da:4d:00:f8:ef:e9:56:57:1f:e5:
         40:3e:25:d5:03:af:46:85:de:e2:b4:95:d1:c0:92:c4:42:29:
         ed:03:1e:ad:29:7c:81:92:bd:12:37:da:80:05:8c:54:e8:80:
         9b:8e:37:5f:0c:cb:18:66:3f:4b:0d:3a:4b:02:47:39:d0:80:
         52:b3:84:7f:ba:cf:ec:17:0d:79:46:c5:13:ef:45:58:04:a3:
         18:ea:fb:42:02:e1:7e:a4:ee:14:49:41:23:20:3e:1d:0a:82:
         cc:91:fd:bd:d4:f0:ce:ab:e9:d0:59:73:17:25:05:81:c7:d5:
         76:59:3f:ae:17:ea:b3:a9:11:6a:43:9d:2d:8e:67:5e:b9:6b:
         3d:de:f0:ed:5e:d4:64:ed:5e:95:51:55:8b:cf:d4:80:05:5f:
         0f:03:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:45:23 2025 by rpki-client