Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa
File:                     d2f04f8c-515d-3df4-8344-ef2648f062f4.roa (raw, json)
Hash identifier:          t9mFMqI4U1kFiNAyCvn/PHkdEpfZKeUny+h9malDMDU=
Subject key identifier:   F1:4C:5A:07:DF:75:F4:C3:2D:86:E6:04:98:06:E5:DE:00:9A:55:69
Certificate issuer:       /CN=d575d3fa-017d-4991-9edf-39101e5d78b5
Certificate serial:       010D0C9F4328584A6F207AE2D7543AC38580C000
Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     401461
IP address blocks:        23.128.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7a:e2:d7:54:3a:c3:85:80:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=fda32a4f-3ab9-4fca-89e3-a5b7ce5e860d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:9f:7f:64:98:37:20:4d:15:da:97:4b:6f:
                    a3:cf:39:c5:44:c4:38:83:fd:d2:e0:a2:88:24:15:
                    9c:af:a0:dc:ee:dd:59:6c:09:ba:7a:f7:70:63:ec:
                    b4:4a:36:ec:7a:22:78:c6:f2:62:a9:dc:99:79:45:
                    76:28:a4:c8:9b:d1:4a:cd:1b:ef:5f:fb:70:51:36:
                    68:79:1b:0f:f0:fe:53:e7:e0:9a:e0:1d:28:a7:30:
                    98:77:bf:53:4a:97:c5:59:ae:62:75:b9:aa:62:80:
                    e5:e1:63:09:14:12:7b:e5:93:e0:81:71:67:fc:4f:
                    46:9f:18:df:c2:c3:92:96:5f:f3:d0:c2:eb:c4:9b:
                    17:c4:0f:ac:fe:96:36:f5:b1:8e:c8:16:b3:72:28:
                    79:b9:05:28:4f:a7:01:10:73:cc:22:d0:14:d1:62:
                    ad:6d:ed:e2:fc:8b:d4:fc:23:5b:6d:91:61:ba:24:
                    f1:7b:63:0d:74:53:ac:fe:dd:3c:b8:e7:4e:6f:3b:
                    b5:03:e1:5c:16:a0:44:e3:86:da:af:9a:c9:ca:07:
                    1f:6e:59:19:7d:d3:3b:0c:85:f1:1b:82:28:79:f0:
                    79:01:12:50:fc:42:7d:7b:a2:e7:c3:71:7e:04:89:
                    3c:fe:3b:d8:ee:b1:d7:14:4a:fe:c0:b0:67:e1:44:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4C:5A:07:DF:75:F4:C3:2D:86:E6:04:98:06:E5:DE:00:9A:55:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl

            X509v3 Authority Key Identifier:
                keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:15:ce:7f:a0:c8:44:5e:6c:9a:82:3c:44:af:e8:f1:ca:
         64:9a:7f:bf:df:bb:38:37:5f:13:b1:a8:dd:32:ff:f2:21:4e:
         21:88:d6:85:2d:ec:f9:72:60:0f:79:53:5c:62:5f:21:c5:a7:
         5b:1c:a6:5d:bf:ef:fe:6d:51:e5:b6:36:28:cc:a7:2f:69:f0:
         2a:ae:d6:4c:bb:cc:7f:bb:71:a1:f4:63:02:da:f3:c9:d8:e9:
         42:c4:e1:40:2b:ec:06:b5:89:03:d6:35:46:7f:f4:7e:7a:90:
         6a:84:4b:de:35:b2:2c:f8:7c:21:9f:8c:c2:c4:09:20:1e:3f:
         3c:3f:40:8f:e2:70:04:94:9d:1b:94:7b:36:97:41:17:aa:28:
         83:0c:be:97:78:ae:7e:be:4a:00:6a:d2:76:ef:bd:99:9c:14:
         a2:fc:e0:a9:ae:79:2c:f8:16:2d:91:9c:02:21:3e:52:82:fb:
         9d:0f:fd:7c:a1:83:21:0a:df:d5:2f:e9:21:33:90:f7:8c:36:
         0b:68:2a:cb:78:e6:8f:2a:12:ec:dd:16:f5:51:a5:e5:5c:b9:
         77:bb:31:b1:6d:23:ab:2d:25:44:7b:74:7a:fe:54:6e:26:99:
         ee:a7:a9:ca:8b:b7:dd:56:21:00:ec:a3:c9:fe:46:f1:13:e6:
         56:b8:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:18:51 2025 by rpki-client