Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa
File:                     8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa (raw, json)
Hash identifier:          e1fk5B3UWvVI1MG88jTBxukHuYXOKrBlL9lcDS/oo74=
Subject key identifier:   A4:BB:4F:58:0D:D4:23:A7:10:CA:B3:7D:A2:30:86:B7:80:99:EA:6E
Certificate issuer:       /CN=0113f3a9-36b0-4afd-81ec-5d581325b016
Certificate serial:       010D0C9F4328584A90A0A65641B4CCEC2C3951C0
Authority key identifier: 26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     17378
IP address blocks:        23.169.232.0/24 maxlen: 24
                          2620:c3:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a6:56:41:b4:cc:ec:2c:39:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0113f3a9-36b0-4afd-81ec-5d581325b016
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=43b9d5db-ac33-4b4c-9e73-0c4b8f72c8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2a:c4:96:ef:4a:c7:ca:a1:6e:f6:8e:30:19:
                    c9:c0:f9:be:dc:04:ff:d5:3d:65:3b:9f:ec:11:5e:
                    58:a1:92:21:ad:db:04:20:cd:2a:db:83:e4:64:30:
                    b0:c0:48:da:86:fd:c1:5b:e6:4b:e9:3e:5c:83:f4:
                    d5:a1:57:21:c3:14:b3:68:88:b1:78:f8:5e:d5:bd:
                    f0:aa:be:98:b7:90:8c:15:ce:77:ec:fb:91:2e:c3:
                    5c:cd:80:85:1e:09:5b:ff:8e:f9:c8:42:85:33:6d:
                    42:da:2f:29:5b:da:2e:06:cc:29:aa:27:05:80:57:
                    26:b8:ee:08:25:a0:e9:48:ea:71:0f:5e:0e:16:2f:
                    dc:5c:54:db:cd:3f:28:e2:69:81:7d:07:53:c5:29:
                    38:20:e4:ff:41:28:0d:3f:f5:df:48:5b:53:fe:b7:
                    cf:26:5c:2a:5e:39:06:1c:78:2c:17:f7:f1:b0:dd:
                    0d:6b:a2:40:4d:6f:b0:fd:f1:c0:bd:25:85:6a:13:
                    ef:76:db:68:37:90:c9:65:48:c9:65:d4:95:ab:20:
                    f2:0d:81:51:32:ab:43:40:c1:b6:6d:36:f7:9f:e3:
                    e0:a2:76:b4:a8:5f:25:86:22:e3:17:37:c4:d3:f9:
                    78:84:37:d4:46:f6:50:56:89:88:9c:e2:ab:83:39:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BB:4F:58:0D:D4:23:A7:10:CA:B3:7D:A2:30:86:B7:80:99:EA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/8e8755ab-a7ed-3f3a-9280-bdec671e9fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl

            X509v3 Authority Key Identifier:
                keyid:26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.232.0/24
                IPv6:
                  2620:c3:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:5f:93:40:69:2a:01:76:fa:39:1c:f7:ca:68:8d:8b:76:
         c0:ce:c1:94:e7:2a:8c:e5:ee:f0:6d:29:61:ea:32:76:40:28:
         4a:bc:ae:c7:b5:6e:b8:55:b1:b8:27:20:a3:b8:bd:d9:5b:c4:
         d7:c4:80:6f:83:f6:31:f9:7d:73:20:f3:99:fd:ed:62:c8:36:
         47:5c:bb:d4:0d:21:61:1b:58:4a:5b:89:12:98:8a:2a:20:37:
         5f:c4:4b:6b:d5:f9:11:c8:be:a9:ab:96:8c:8b:d8:b0:79:4d:
         bc:c9:eb:68:21:99:0f:52:ac:a8:8c:a2:04:53:66:48:35:07:
         73:74:1e:20:46:4c:16:a8:e8:e5:2e:2e:93:a1:ec:50:4a:d8:
         2f:83:f0:17:0c:43:d2:3b:95:56:10:c5:19:f9:28:14:3e:56:
         d8:cc:bb:b2:c4:22:9b:32:31:68:7e:24:68:12:f3:ef:01:ae:
         26:da:a3:5f:ef:c7:8a:da:07:c6:54:43:6f:1b:96:b6:c9:16:
         ec:48:3b:c1:f3:ce:45:da:b5:a4:57:09:0f:c7:ee:4b:dd:63:
         ea:d6:c2:aa:b0:a8:9a:33:4d:4c:16:c8:6d:99:22:00:7a:5c:
         42:cc:ad:14:2b:a3:81:16:9b:5d:84:bc:e5:e8:29:b6:5f:d0:
         3f:8e:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:44 2025 by rpki-client