Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa
File:                     85f13155-42f7-31a3-917f-c70710547a23.roa (raw, json)
Hash identifier:          bFUDcc/A76z4bdWpOhWRKMmg4BaEUH/CWsetep1wZ3c=
Subject key identifier:   7B:1E:5A:10:90:1C:20:43:BE:F9:03:99:7B:18:25:F4:C0:4C:C8:DC
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584A66C07A1315268E5885E78800
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     399870
IP address blocks:        23.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7a:13:15:26:8e:58:85:e7:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=dc2f2201-20b1-4c1a-996b-e047f06c99d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:a5:e7:51:d2:d8:7f:d5:e8:fc:e1:72:22:
                    b6:0f:b9:14:8f:79:bf:a5:4c:3f:32:5f:b6:2c:93:
                    c4:cf:ec:5e:46:e5:af:49:84:ce:27:b6:26:52:fc:
                    60:ce:c1:ae:49:f4:c7:9b:54:45:eb:2c:0b:93:25:
                    25:e8:d9:84:0b:ae:c4:07:86:35:d0:d9:62:d6:44:
                    78:0b:03:1a:58:ef:b8:c4:cb:2c:10:59:29:b1:28:
                    91:b5:0d:0d:f6:77:e3:7a:54:3d:76:c5:33:fd:51:
                    6a:5c:7e:a6:f6:5c:64:60:38:71:0e:0f:a7:87:52:
                    84:e8:8b:68:54:fc:ba:23:34:8a:24:3f:13:b6:b9:
                    6c:df:47:25:bc:bb:e4:11:6b:c4:bb:a0:cd:81:c8:
                    a1:e8:31:d6:41:4e:48:d4:ec:51:d0:92:6f:4a:9f:
                    18:51:7e:0a:fd:bd:91:f3:3e:5e:e5:7a:8a:5e:57:
                    fb:d4:db:bf:6c:67:50:f2:9d:0f:34:cd:f8:c8:6a:
                    3f:f0:b6:af:f6:0d:4b:58:1c:f8:01:5d:d8:74:48:
                    27:04:d6:8f:78:04:99:ee:89:8a:b7:66:cb:5c:86:
                    e3:14:46:64:5b:a5:ec:1f:7c:c3:2d:ca:97:ac:a3:
                    0c:62:ab:a5:47:fc:02:16:34:31:c3:3c:87:30:8e:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:5A:10:90:1C:20:43:BE:F9:03:99:7B:18:25:F4:C0:4C:C8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:fd:ab:af:17:26:eb:8d:eb:57:00:ef:66:9a:ec:06:2a:
         03:db:b7:65:2b:63:8c:3e:a6:62:8b:47:e9:f4:e4:63:e7:11:
         96:65:b6:48:a4:0b:a1:e3:09:8c:b3:8b:11:01:ff:8b:0f:c6:
         bf:34:c7:ac:e1:3e:69:8b:d3:4e:ca:0f:3d:85:2c:80:93:86:
         b9:f0:7c:fd:23:67:cf:0e:d1:07:c6:02:44:ce:f3:de:b1:c8:
         97:f9:40:5f:61:8b:15:1b:7e:2e:5a:c6:e8:02:38:65:69:a4:
         1c:1e:5c:52:63:e9:77:10:d1:7e:36:cf:fe:b8:df:9c:25:5c:
         db:f6:f6:6b:7e:05:05:65:97:ab:9a:4b:1b:1f:c3:27:5f:ad:
         b2:64:44:f8:0f:28:40:41:27:f9:b5:09:3c:ee:11:52:3e:14:
         2b:d7:6f:1d:e4:8c:41:d4:5d:45:17:5b:41:b9:b7:8c:04:d8:
         d5:c0:1d:dc:4c:0e:37:5e:fb:d2:ec:c6:c7:3f:3f:62:3c:7f:
         1b:3c:d7:f9:b8:7f:bd:b9:a9:be:d6:13:ae:90:e4:1f:0b:a0:
         91:9b:7e:ee:f7:37:be:c4:33:45:af:79:c3:4e:89:b7:19:c3:
         0f:5b:84:fe:f1:43:8d:ad:70:46:a5:4c:da:e0:65:00:72:11:
         bf:ec:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:36 2025 by rpki-client