Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa
File:                     4332eacc-e724-3376-9a5d-fe44540381b1.roa (raw, json)
Hash identifier:          o/OiNW81/4FMVSHo+RCXqg1yNWwsYk+wF4ey3qYfTG8=
Subject key identifier:   43:DB:B8:64:09:53:1E:5C:1B:25:B5:53:C0:EA:4E:E5:23:D3:92:B5
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584A89A6185BB35A3389E4E4EE00
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     61112
IP address blocks:        23.158.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:18:5b:b3:5a:33:89:e4:e4:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=49289b76-42e7-47b0-88af-ebc21d2e90e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:33:a4:20:5c:bb:d6:11:b5:19:48:51:06:
                    15:08:de:59:1e:9a:7f:9e:51:c7:a7:dc:fb:7c:f6:
                    af:16:65:a5:81:a5:02:63:99:89:8b:52:57:db:e9:
                    18:ae:99:8f:26:bb:e5:fa:fc:33:f6:17:59:35:c2:
                    68:23:f1:bf:b3:87:a2:d2:8d:54:77:90:5a:e0:66:
                    b9:a4:98:22:ae:3f:d0:01:7d:a7:28:90:30:6c:ce:
                    8f:a5:c6:ba:51:28:bb:69:41:09:2c:87:e9:cb:e0:
                    48:2b:00:aa:91:ac:d7:4a:1f:61:e7:9d:54:ea:8b:
                    42:aa:d1:57:d6:23:9e:05:7d:5b:aa:76:ec:c4:f8:
                    54:dd:ed:22:fe:c9:e4:df:8a:02:8f:f2:72:5a:1f:
                    f1:1e:c4:43:42:41:27:ee:b1:e9:5b:91:90:0f:1e:
                    3e:cd:25:51:57:a8:04:87:6f:36:c0:1a:7c:ef:c4:
                    9c:47:2a:3a:b4:41:e3:32:1c:81:25:8d:b1:89:ec:
                    51:73:83:7e:98:84:d4:94:0f:c7:e7:17:7b:5a:52:
                    1f:33:1d:c1:de:fa:fb:0d:f2:05:5e:e9:c3:ab:77:
                    45:db:2e:02:d6:ee:a2:19:c4:b6:f2:bc:23:ea:46:
                    55:9f:ee:ac:7c:8c:05:52:0b:0d:c7:71:0b:e9:b7:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:B8:64:09:53:1E:5C:1B:25:B5:53:C0:EA:4E:E5:23:D3:92:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:00:4c:dc:2a:08:c1:e3:b3:ff:f4:ca:c7:5f:f7:1d:a2:00:
         07:52:8f:07:ac:55:72:37:cc:4e:fd:9b:d7:c5:2e:fb:fe:67:
         9a:87:e4:31:08:2e:01:45:4b:44:8e:ea:19:c2:43:fd:d7:41:
         c2:d9:59:ff:39:8a:c5:5e:68:c4:4d:54:c5:92:65:26:af:44:
         7e:73:86:75:7d:8e:1a:22:80:a9:e4:c5:f6:c9:7d:d6:bf:f0:
         58:8d:9a:b6:fc:a1:ef:30:2c:1e:e1:62:06:bd:ed:5a:6f:9d:
         e2:04:24:63:fa:0f:15:03:a9:68:a1:26:72:28:87:27:87:6c:
         b3:3c:a0:63:cc:e6:8d:bc:9c:b1:b5:fb:8f:12:48:52:27:ec:
         4d:66:ed:9b:ec:38:85:d4:71:e4:bd:04:e6:47:bd:c0:2f:03:
         4c:8f:a6:8b:f9:71:3c:d9:95:b1:b9:73:50:85:9e:26:84:c0:
         e1:74:3a:a7:2a:2e:bc:71:b3:4c:a5:e5:64:5a:85:75:6e:e0:
         56:f5:0d:1f:a7:1d:78:ee:b9:02:6a:14:a9:35:4a:c3:79:ee:
         a2:e6:04:8b:23:ac:cb:d5:bf:ad:4c:53:3c:45:97:e2:20:21:
         c4:5e:72:cf:6b:16:82:1e:6f:46:a0:85:dc:54:58:27:2a:d1:
         a1:eb:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:36 2025 by rpki-client