Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa
File:                     089fd902-9225-391d-ae0e-3c7cd908bf12.roa (raw, json)
Hash identifier:          JZS56Duqw6BstZWoXGi+cK/BvTjufuPQcAolVG1maDc=
Subject key identifier:   36:76:C0:EB:9D:42:B2:93:38:55:27:73:61:82:68:B5:A8:A3:DB:00
Certificate issuer:       /CN=a07ba476-e067-424c-814a-2b920e23990d
Certificate serial:       010D0C9F4328584A94D0DBB6833E5C8564C3233C
Authority key identifier: 3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     399951
IP address blocks:        23.152.120.0/24 maxlen: 24
                          23.187.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:db:b6:83:3e:5c:85:64:c3:23:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07ba476-e067-424c-814a-2b920e23990d
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=8f22b3dd-e631-44f1-823a-d427dd5c22e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:ca:ff:52:e5:78:b2:06:0a:ed:73:e9:93:
                    8d:d6:d8:67:07:0a:0f:af:1e:2d:79:7f:19:0f:f6:
                    ff:86:ca:32:01:5b:3d:49:2f:4e:a6:05:72:ae:40:
                    e4:02:63:9e:82:31:8f:69:c0:2c:16:da:e1:00:53:
                    32:85:d4:e6:2f:1d:ff:32:36:5b:1f:3b:9c:3b:82:
                    0a:ab:ea:7e:d3:72:01:b7:19:80:35:3e:64:a9:63:
                    c7:f2:27:ae:cc:44:b1:6a:b7:a3:8a:fe:a3:f0:6e:
                    47:f7:40:61:41:6e:b3:99:69:ed:08:34:c3:5c:03:
                    3f:1b:d4:3e:f1:1d:c8:57:ba:6e:ca:03:f8:0d:db:
                    63:8c:ac:fc:b7:e1:6f:03:9b:6a:b5:cd:6b:d9:1f:
                    07:26:d6:ea:b5:93:39:f6:6f:6e:83:4a:01:af:e1:
                    7f:f5:3d:41:19:aa:f8:7d:81:03:b7:b7:f1:7a:08:
                    e8:d1:c1:db:58:a8:27:d1:a5:50:06:93:c6:15:7b:
                    4d:32:09:3c:37:5e:fc:2c:50:df:60:46:11:ff:6a:
                    d5:df:9c:73:53:10:21:53:6a:58:3c:06:24:ad:cf:
                    d7:5c:15:23:4c:98:97:d4:ba:75:95:c9:b9:1e:df:
                    55:e6:52:c6:da:ee:58:3c:99:5d:4c:81:86:a5:b0:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:76:C0:EB:9D:42:B2:93:38:55:27:73:61:82:68:B5:A8:A3:DB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl

            X509v3 Authority Key Identifier:
                keyid:3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.120.0/24
                  23.187.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:a0:2e:b0:be:ab:a4:a7:74:ee:75:7d:28:f6:52:93:47:
         e8:6c:a5:3f:fe:bf:22:ca:a8:89:d9:25:f1:05:5d:db:32:c6:
         24:07:ef:5c:0a:b2:cc:ca:4d:e5:92:a2:33:aa:a6:ba:cc:1d:
         1e:7c:78:ef:5b:09:6b:1a:b6:c5:8c:1a:62:5b:46:b4:f4:a9:
         a7:b4:f8:1b:11:72:49:29:f1:fb:5f:83:60:6c:56:c0:8b:43:
         a4:97:df:11:52:d1:b0:c6:2c:dd:60:fb:fb:cc:c9:52:a0:bf:
         db:1b:e1:90:4f:5d:9d:c5:c1:b3:66:36:bb:bb:8a:60:81:46:
         91:77:e6:04:31:5a:26:0b:e8:d0:cb:ac:1b:8f:cb:73:ad:8e:
         e9:0e:8d:93:31:af:21:01:97:d6:92:e7:5d:3f:84:5a:ce:76:
         2e:e8:a3:e9:c3:31:42:05:8f:1a:f2:3f:7f:8d:8d:46:ab:93:
         27:af:2d:2f:16:d4:10:ac:a8:50:d9:c8:3f:2c:45:1e:48:9b:
         2b:54:5f:81:7d:01:3b:5b:cb:2e:7a:41:2c:e6:6c:1f:22:c6:
         db:8a:5a:7a:b7:8a:43:35:4c:7d:7b:a3:81:86:38:01:a5:65:
         8f:2a:17:b3:db:14:40:7b:69:2c:31:e2:e2:45:9d:9e:24:4e:
         00:fb:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:57 2025 by rpki-client