Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/4d17bd12-5c09-3bc2-b897-fa5676710910.roa
File:                     4d17bd12-5c09-3bc2-b897-fa5676710910.roa (raw, json)
Hash identifier:          VLmdTGvqs11q6lu/0ieUQMl8hvzHkk/dCf8fXSPV6T4=
Subject key identifier:   5C:CE:3E:68:C4:15:5F:C3:B2:6C:67:83:81:F5:64:D4:C6:93:5C:06
Certificate issuer:       /CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
Certificate serial:       010D0C9F4328584A82AB431B93F7F5A8E061C380
Authority key identifier: E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/4d17bd12-5c09-3bc2-b897-fa5676710910.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     8095
IP address blocks:        23.155.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:43:1b:93:f7:f5:a8:e0:61:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=41de25dc-dfa6-4966-be44-3a6cf9b06371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:18:cc:04:cb:a1:ca:5d:2a:38:f4:f7:48:
                    c1:b0:93:db:56:a3:e5:be:60:31:02:06:d4:76:9e:
                    e9:3c:83:62:cc:84:3d:a8:d2:28:eb:b5:5a:e5:95:
                    f3:c5:3f:4e:bb:af:70:14:9e:f9:6b:77:fa:74:0c:
                    52:32:b1:cb:02:eb:e4:c8:52:c7:f6:a1:be:a5:f3:
                    9b:23:f1:44:4e:97:01:0a:aa:10:2b:5e:66:0f:5a:
                    fd:41:0f:86:a9:6a:d1:b1:91:b4:7f:c0:57:53:33:
                    6d:80:a0:e0:a1:5a:ce:72:30:23:18:34:a4:04:1d:
                    21:7b:99:5e:67:0a:0c:1c:49:4b:60:74:53:45:b9:
                    0d:39:f9:16:d0:df:f7:c5:a9:d4:95:53:e9:4b:db:
                    8c:45:ac:4c:8b:85:f7:c4:5c:fe:7b:1c:97:51:17:
                    9b:9d:10:ad:e5:31:a5:8d:26:43:55:f8:ff:af:26:
                    19:6b:75:1d:68:9d:53:b9:41:f6:fd:ae:4b:4f:07:
                    f1:69:ff:a5:f8:a6:42:5a:f2:b6:70:be:7a:44:64:
                    b1:ff:9c:cf:7e:04:89:15:7f:a8:ff:1d:c5:53:15:
                    ee:7c:85:df:f4:0e:7a:64:4b:61:59:15:f8:b7:5c:
                    39:ad:1a:94:d5:94:9e:b4:9d:48:e9:a4:bf:be:00:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:3E:68:C4:15:5F:C3:B2:6C:67:83:81:F5:64:D4:C6:93:5C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/4d17bd12-5c09-3bc2-b897-fa5676710910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl

            X509v3 Authority Key Identifier:
                keyid:E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:74:d1:a4:28:6c:88:d3:76:3a:f2:15:41:02:a5:3a:b4:
         9c:a7:83:b2:89:64:ab:1a:d8:d0:a8:e8:9b:b5:a4:41:8d:70:
         ce:2e:c6:84:50:c6:2c:37:8b:dd:ca:13:75:16:2b:bf:e6:00:
         15:8f:17:04:e3:85:6c:e9:7f:72:de:f0:31:2f:18:c0:a9:4f:
         35:7c:91:b9:16:04:ff:06:3f:e8:c7:b3:e9:1b:a9:08:99:b3:
         44:c7:78:15:81:34:5d:d0:69:a4:35:12:be:33:a6:23:6d:6d:
         0f:02:89:35:d9:7a:63:4f:12:e4:47:84:86:27:0f:39:a8:a5:
         00:24:cf:c3:db:cc:98:b0:5a:69:c3:92:84:05:0b:c5:f9:fc:
         2f:de:7a:10:95:e5:00:47:da:3d:75:27:3a:90:35:57:52:cf:
         18:81:e8:c3:fa:0a:77:23:c4:cf:5c:08:06:96:76:70:6f:6d:
         be:6c:d5:ad:91:2d:3f:99:67:6c:a1:6d:10:03:48:8d:e3:92:
         d5:0f:c8:7c:28:22:ec:2c:46:53:47:60:f3:69:82:cb:06:25:
         8b:6c:39:d6:41:6e:54:0e:dd:45:5d:ce:3d:72:63:10:9b:c7:
         ba:a3:2e:00:59:58:36:1c:6d:6a:72:99:4a:58:23:f1:1d:7d:
         94:12:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:00 2025 by rpki-client