Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa
File:                     16782b21-eed6-3014-9710-b3c789353a34.roa (raw, json)
Hash identifier:          WbAutu52flRSda9enMQH3sXdwcnpIQHskNvnKHValKY=
Subject key identifier:   BF:52:0F:97:5F:ED:E6:E8:9A:56:D3:7B:A4:99:EA:C4:45:1A:66:89
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F4328584A963688DC9F1474E1E48FE72E
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     397709
IP address blocks:        23.148.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:88:dc:9f:14:74:e1:e4:8f:e7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=0d2daf69-4814-44ec-b43f-7d7137a2071d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:71:59:3c:91:1d:7b:1b:fc:88:e6:d4:00:
                    40:b5:f9:0d:88:6d:c4:5e:c2:5f:12:c4:3c:9d:81:
                    9c:e4:1b:e2:e1:29:6a:4b:a0:ea:ff:6a:4f:ac:92:
                    00:29:8b:e0:ad:54:c9:88:f4:45:10:35:e2:ad:c0:
                    2c:90:a9:e2:24:31:51:b4:23:17:be:b6:98:40:b2:
                    80:3e:4f:62:39:88:82:41:89:e2:82:42:2e:26:96:
                    db:40:0e:53:a0:18:ae:52:49:8a:a0:6b:87:f9:c7:
                    d2:1a:ba:a7:bf:fd:31:bb:27:e6:cc:0a:69:df:b9:
                    fa:f6:6c:14:c6:f6:62:a6:61:f3:b5:f5:87:98:45:
                    27:ca:04:c8:82:9b:57:1f:42:30:7c:ee:ce:43:8d:
                    d4:da:15:47:26:fc:7f:84:74:b5:41:ea:e4:55:65:
                    61:99:6e:71:3c:e3:19:ed:94:73:69:1a:34:b8:01:
                    7c:ee:b3:3c:aa:7c:e4:4c:dd:ba:98:bc:eb:38:1e:
                    9f:a6:94:64:a4:84:fd:2f:e4:af:d4:03:8a:b6:09:
                    a0:55:a6:bb:35:f6:37:60:8e:dc:32:68:3f:c6:9d:
                    3b:91:f8:95:3f:17:9c:7e:88:e4:43:d7:f6:a5:4a:
                    21:12:a0:8a:8d:98:35:f8:65:53:8c:02:fc:02:32:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:52:0F:97:5F:ED:E6:E8:9A:56:D3:7B:A4:99:EA:C4:45:1A:66:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:07:b7:73:c5:29:d5:df:cb:a1:86:3c:93:67:39:12:95:
         0f:ce:2c:7c:63:21:ce:04:55:c9:c3:fa:55:64:6e:41:f1:00:
         25:04:96:3a:e1:f1:bf:a1:f5:79:9b:1b:2e:fb:3a:ae:0e:25:
         ee:05:95:1b:50:70:a5:99:31:ac:07:01:f1:ba:48:aa:a2:72:
         47:7e:2c:3b:3b:c0:e8:87:73:7c:bb:e1:77:f7:3a:78:95:a1:
         4d:d0:ff:e5:1d:15:8d:df:5d:18:73:16:32:78:08:7c:0a:c8:
         15:18:c5:92:38:3f:0b:4d:60:24:75:81:ae:62:a2:20:a5:3e:
         48:ad:9f:63:65:0e:0c:93:eb:49:b6:ce:7b:a1:8f:87:cc:bf:
         b9:14:71:28:dd:71:6a:8f:4f:7f:4a:80:a5:54:c0:11:82:05:
         f7:4c:00:9f:7b:7b:cf:36:b8:c0:d3:c5:7f:49:6e:03:73:49:
         06:a9:65:59:09:7c:01:0e:b2:7c:4d:9b:a6:08:b3:d1:f9:94:
         4a:83:cd:dc:e6:24:c3:b3:09:5f:86:fe:29:6f:8f:bf:39:63:
         3b:ac:d3:92:c1:a4:b5:59:ed:fe:08:bd:4b:b3:a8:fe:82:25:
         6c:03:58:3b:b5:19:72:d4:a4:ea:8a:60:1b:8d:70:3a:25:36:
         da:be:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:51 2025 by rpki-client