Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa
File:                     83c7a286-9c49-3189-98ae-ea46ce63e22b.roa (raw, json)
Hash identifier:          jse84S1JfWO8vexChRYba31n1H5Im4crABpDS5Jm2c8=
Subject key identifier:   D5:1B:5E:9F:FB:50:64:43:D9:63:F7:A5:B8:A7:33:AD:CB:94:C1:7D
Certificate issuer:       /CN=33d8879e-24de-4dd1-bab7-7cc451009cc2
Certificate serial:       010D0C9F4328584AC2E0F80C1DC937DB5CC353C0
Authority key identifier: 73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     2914
IP address blocks:        23.134.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f8:0c:1d:c9:37:db:5c:c3:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d8879e-24de-4dd1-bab7-7cc451009cc2
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=ccdfc9bb-8c06-4992-a6d6-5443dcf24454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:b5:d3:b9:9a:78:ad:51:c5:a7:0e:f8:eb:
                    25:ba:a3:d7:44:de:43:36:ae:84:23:7a:dc:96:b7:
                    5a:d4:16:0d:a5:31:77:f2:02:09:42:fc:27:00:38:
                    30:b1:ba:91:1d:90:5b:4c:99:83:35:60:46:ed:70:
                    6a:1b:11:00:27:5a:7d:e1:64:88:95:38:04:ba:18:
                    69:19:55:4d:0d:bf:09:18:d3:d7:63:92:d9:5f:c3:
                    3d:65:ec:23:23:6e:56:31:70:28:f9:6b:84:fe:fc:
                    60:2c:0c:6f:17:d6:de:bc:f2:03:ae:e6:bc:d0:07:
                    bc:ea:5b:c5:bf:30:7e:eb:ad:03:a0:fb:a6:cd:98:
                    97:a7:4d:7c:6f:12:4b:02:02:17:b6:dc:4b:94:ef:
                    2b:ba:30:a0:49:23:0e:e7:2a:bd:cf:1b:f8:b0:26:
                    df:a4:a6:2d:13:2d:03:19:03:e6:fa:1e:eb:13:43:
                    d1:c8:af:10:7f:28:71:21:ad:df:38:e6:18:15:be:
                    96:6a:6e:bf:dc:11:b1:8e:a4:92:da:af:b5:9f:8e:
                    a4:b3:3e:75:f2:b8:a5:e7:74:ed:2c:fb:01:52:00:
                    71:0c:a3:e4:56:fb:64:73:c2:c3:ad:25:31:04:b4:
                    3b:d3:c6:14:65:f5:68:a9:78:54:33:a1:13:70:78:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1B:5E:9F:FB:50:64:43:D9:63:F7:A5:B8:A7:33:AD:CB:94:C1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl

            X509v3 Authority Key Identifier:
                keyid:73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:99:54:dd:df:5c:10:79:27:25:ae:d0:0d:22:2e:5d:c1:f0:
         d5:09:27:71:73:58:52:d3:d8:a5:b2:54:68:db:b1:52:e4:42:
         b0:d8:25:ae:21:9f:b9:5a:d1:a1:25:8c:f9:68:b8:0b:ae:3a:
         44:33:40:76:a8:9d:54:b5:ed:3d:3d:19:34:7a:e8:02:df:66:
         7b:7b:af:a1:2e:5b:37:72:9d:26:c0:c0:81:1c:4d:57:34:1a:
         35:59:ef:72:16:8d:a7:01:16:8e:a9:f9:94:ce:89:9e:b8:b1:
         4e:64:ba:a1:7d:3e:e9:15:fc:76:e1:f8:ca:76:d1:ae:8c:6a:
         ac:8b:84:a8:c1:0c:0c:cb:a1:14:d0:83:ed:8d:e1:06:6d:d0:
         1f:14:7d:e0:3c:73:a9:5d:20:d3:d7:e8:ca:14:46:9a:53:91:
         f4:e3:c8:dc:20:ed:fa:aa:29:19:6a:35:45:12:cc:59:d3:7b:
         f6:06:b1:fd:ed:25:b4:b7:4f:05:c2:a4:e5:3d:25:ab:4c:04:
         d1:37:1f:7b:38:03:c6:f2:7d:7a:aa:d3:e9:91:ae:f7:3f:44:
         45:63:55:16:70:31:bb:db:20:29:e1:6c:46:9c:3b:4f:b0:7e:
         9c:a8:81:98:18:c6:23:da:64:81:50:4d:67:c6:a2:a0:37:b3:
         aa:f1:30:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:43:47 2025 by rpki-client