Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/530b7c4d-f657-3cc5-bd4b-51f2e16a5db1.roa
File:                     530b7c4d-f657-3cc5-bd4b-51f2e16a5db1.roa (raw, json)
Hash identifier:          gfWs8cBK2Yc4Ys3cW9IXsZK1ZTUEgq/rj8Bb5X3UpwE=
Subject key identifier:   55:CE:ED:B9:6B:B9:D4:74:AB:35:32:7F:AB:E9:D9:9F:89:14:71:59
Certificate issuer:       /CN=9032b19f-5ab1-4765-944e-83a757678275
Certificate serial:       010D0C9F4328584ACEEAB7F1D6B1DAF4D14CDB80
Authority key identifier: F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/530b7c4d-f657-3cc5-bd4b-51f2e16a5db1.roa
Signing time:             Sun 10 Aug 2025 08:30:13 +0000
ROA not before:           Sun 10 Aug 2025 08:30:13 +0000
ROA not after:            Sat 08 Nov 2025 09:30:13 +0000
asID:                     2914
IP address blocks:        23.142.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:ea:b7:f1:d6:b1:da:f4:d1:4c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9032b19f-5ab1-4765-944e-83a757678275
        Validity
            Not Before: Aug 10 08:30:13 2025 GMT
            Not After : Nov  8 09:30:13 2025 GMT
        Subject: CN=b712a325-613e-4649-9b3b-f60fd9c07407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:44:6e:24:5b:67:b6:bc:cc:02:09:8a:1b:
                    2c:9d:1f:a6:c4:ca:aa:cd:53:b5:86:f3:ae:06:a2:
                    3d:4c:44:66:b1:22:49:c7:91:a4:e7:a7:8c:bc:7b:
                    37:a8:21:39:2a:1b:b5:d7:97:96:22:25:1e:04:06:
                    25:82:ff:9d:71:c3:c8:92:6d:dd:cc:14:16:13:b0:
                    97:e9:83:e3:bd:f8:3d:2a:19:25:9a:bf:4f:7c:1d:
                    30:5a:06:fb:c7:2a:9b:9d:7a:c9:10:62:14:eb:35:
                    95:95:09:c9:e8:52:bc:19:e3:a8:0c:30:e1:97:aa:
                    16:d6:08:c0:50:f4:f9:5a:37:50:60:c4:85:b3:1e:
                    5e:5a:e7:61:be:94:ee:e6:0a:7d:df:f1:22:b4:39:
                    ab:27:fc:1d:42:f3:66:21:a0:02:58:e9:c2:bc:7a:
                    ef:0b:8b:44:04:fd:03:ff:08:9a:16:29:ff:8b:ab:
                    68:ae:04:ca:9c:bb:60:5b:20:fe:e5:5c:87:bc:81:
                    fb:9e:e6:62:c6:52:d1:94:0c:b2:30:fa:b4:0a:c2:
                    51:93:5b:29:1b:c6:2a:b2:c6:a0:ee:cf:0f:e8:95:
                    bc:04:0b:26:cd:8c:a3:aa:d2:be:85:27:3e:14:ad:
                    f6:43:56:2f:82:ef:7d:06:17:fc:be:95:ba:00:44:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:ED:B9:6B:B9:D4:74:AB:35:32:7F:AB:E9:D9:9F:89:14:71:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/530b7c4d-f657-3cc5-bd4b-51f2e16a5db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:4b:ae:95:dc:57:a5:20:40:ce:d6:18:24:c7:22:e4:62:88:
         6f:d0:5a:31:e3:67:2c:be:71:7b:3b:bd:61:8c:cc:7b:cd:c3:
         bf:ab:bd:cc:ba:87:71:9b:18:73:3f:6d:cb:24:55:e6:a3:c2:
         da:1d:4d:9f:bc:18:85:1a:b8:18:30:4a:73:97:38:00:24:c7:
         87:b9:f2:ff:48:88:90:d0:be:25:ca:ba:e9:a5:1f:93:82:f6:
         11:e3:35:80:3c:81:d9:47:05:1c:06:d0:df:ce:70:e4:2b:55:
         d8:0f:e5:e5:d1:ac:a4:dd:7a:66:54:7b:c6:f5:5b:ec:22:2a:
         d4:4b:95:bb:d3:c8:54:17:1c:79:4c:17:f2:27:b3:23:2c:78:
         9a:b0:10:e2:98:80:65:f3:6c:d9:08:90:df:e2:2b:3c:75:6a:
         24:ec:3f:4b:b2:9b:32:ae:39:b3:b2:39:0a:31:5e:29:db:dd:
         9f:43:fd:fa:90:df:d5:c8:5f:2d:21:75:5c:43:cf:bc:e8:0c:
         f4:62:15:77:ec:61:f1:f1:b0:d4:5f:f4:3c:66:8a:f8:ec:95:
         ba:0c:c8:aa:48:4d:60:77:3c:b0:cb:91:02:a2:9d:43:0d:b7:
         9c:a1:de:ed:02:e9:18:58:b6:5b:8c:71:d0:20:8f:55:cc:4e:
         f0:75:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:50:22 2025 by rpki-client