Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa
File:                     23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa (raw, json)
Hash identifier:          3yjj4umBCYCcSHyxiiLEr4a0swkPx+OzEC2e6NfnW3M=
Subject key identifier:   76:7D:08:0D:47:BF:23:0F:64:CD:3C:23:92:2D:0E:9A:D8:A3:00:1E
Certificate issuer:       /CN=b2217366-9374-418e-b500-d6b2bd2b5759
Certificate serial:       010D0C9F4328584AA6F62BDAC8867702B2D8A040
Authority key identifier: 74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        23.187.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2b:da:c8:86:77:02:b2:d8:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2217366-9374-418e-b500-d6b2bd2b5759
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=86bbe12a-9c01-4845-b2a3-067f46725d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:0b:29:15:35:db:db:7b:8f:87:bd:e0:14:
                    da:0e:41:a1:ed:db:0d:fc:18:4c:96:d1:4c:55:28:
                    78:b8:7c:45:62:7f:f4:07:98:89:34:ed:f5:a1:ee:
                    25:c5:01:9a:ae:81:d0:e2:b3:a3:3f:90:7e:1b:3f:
                    23:9f:17:31:8d:f1:fb:01:3c:72:90:58:f2:1e:6c:
                    8c:8d:ab:55:eb:4d:e9:1f:39:3f:fb:ec:75:70:ed:
                    f1:10:bb:b3:c9:64:58:a1:0c:b1:87:f5:83:9b:e8:
                    3c:86:ce:ae:4a:53:09:5c:58:7a:37:f1:a2:95:56:
                    40:11:00:e0:81:1e:3e:d2:eb:f1:06:a6:90:76:7e:
                    5e:24:23:d7:b8:6e:31:7f:01:9b:18:5f:65:0b:5b:
                    d9:10:15:31:e4:de:6f:36:a3:23:ae:6b:e2:32:58:
                    bb:25:4d:f9:36:62:ea:32:74:1f:46:fc:d5:ce:34:
                    03:45:b0:a1:0f:a3:11:d6:62:ce:a8:00:09:e6:3b:
                    33:cd:26:03:2b:5e:5e:0d:6b:a9:1c:5f:9d:b1:9b:
                    64:8f:7b:d6:5d:18:da:62:5c:c0:40:37:4e:8a:4c:
                    7e:71:55:d6:74:7f:f5:e4:bb:0b:06:7a:58:b0:6a:
                    3d:06:b3:da:0d:c7:79:b3:b7:cd:ed:79:44:85:70:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7D:08:0D:47:BF:23:0F:64:CD:3C:23:92:2D:0E:9A:D8:A3:00:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.crl

            X509v3 Authority Key Identifier:
                keyid:74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:9a:82:1b:39:8a:82:d3:39:34:8a:e2:7b:8a:a5:9c:9d:
         d7:cc:41:38:d6:df:e4:40:23:ff:3a:c0:da:23:83:36:d0:59:
         de:c4:f1:54:9b:f1:d4:2c:ed:c1:a4:98:e3:6d:34:6d:d0:e7:
         d8:1d:10:d8:a2:af:73:f7:fe:15:76:fe:28:90:22:ff:57:a7:
         0f:fc:2c:32:38:b0:98:5e:0d:37:74:0b:46:51:d9:93:ba:8e:
         5b:c6:45:2a:45:59:fa:a3:ac:e9:3f:3f:5e:9c:0f:93:9f:55:
         de:7f:38:35:10:00:96:a7:1a:d5:9f:a6:06:78:4b:f3:04:4f:
         22:8d:72:d4:d4:bf:8c:b4:50:cb:07:0f:c3:e5:6c:bd:c5:22:
         f7:e1:ba:62:93:60:81:e0:af:85:ab:be:a1:ff:15:0c:d9:61:
         d4:d8:60:c1:39:2a:28:1b:cd:29:d3:03:c5:9a:b0:7a:ee:ee:
         34:e7:c5:de:b8:fd:6f:33:95:2e:90:b5:06:ff:21:29:24:d9:
         57:11:2c:00:7c:a5:ff:ce:73:09:b8:42:66:00:52:cc:ed:4d:
         4f:38:83:b5:9e:ab:00:84:6e:e4:2f:59:69:52:73:65:16:15:
         e1:a3:7d:d1:35:21:c8:0e:8d:e1:d5:d0:c9:a8:13:35:a1:89:
         f0:99:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:04 2025 by rpki-client