Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa
File:                     9787b498-f81f-37d7-a779-d4e727560c5b.roa (raw, json)
Hash identifier:          Hr3OniR5dhw71YyrTMrtojoI2trSUTkrU6YURsLgYSg=
Subject key identifier:   FB:7D:F1:C7:97:C7:E0:93:AE:7B:12:ED:5B:C3:42:93:D0:B4:02:B3
Certificate issuer:       /CN=f838c026-61f9-443d-b867-26f60a99d561
Certificate serial:       010D0C9F4328584A8B0B62102717A8B4E10953F8
Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     30205
IP address blocks:        23.168.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:62:10:27:17:a8:b4:e1:09:53:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=c94bda02-0de9-490f-8a3c-6901b18cf554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:30:c1:db:a1:f1:11:e6:35:75:de:aa:f2:
                    ac:b7:60:f7:c1:e9:60:84:76:b0:85:09:1c:78:59:
                    cc:f1:f7:b5:8d:4f:70:ba:28:e1:23:7d:a3:01:81:
                    a0:31:ac:fd:f0:8e:a8:ea:63:e3:a7:92:3a:49:33:
                    45:30:f4:67:38:f8:70:29:a2:a3:32:cc:55:33:54:
                    70:db:fd:5d:73:ae:10:a0:0e:53:91:1b:a3:c7:c4:
                    01:55:3b:d0:78:39:68:83:6d:43:17:14:39:8c:b1:
                    ea:e7:96:e1:b2:ad:67:ce:ff:b9:43:ee:a2:da:a0:
                    6d:b6:84:45:0d:57:c9:3e:ba:f1:28:54:80:df:a1:
                    79:4e:e7:65:6c:2d:e9:1e:10:79:35:8a:b7:99:42:
                    ea:22:34:5a:be:9c:21:1a:62:16:89:62:43:08:3a:
                    f1:57:ee:a0:b1:f9:39:70:d8:d4:72:f9:08:d4:f4:
                    da:2c:a4:b8:1e:49:ac:92:1c:89:ac:49:d4:05:a7:
                    f4:98:79:ab:9a:18:2d:7d:78:1e:df:52:64:65:cf:
                    e2:1a:c1:b3:9a:a4:69:58:5d:15:3f:f7:2e:0f:04:
                    69:a3:d7:03:06:c3:59:6c:2b:0e:93:e4:00:eb:36:
                    44:41:47:75:49:74:e9:39:4c:c2:15:fe:37:b3:33:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:F1:C7:97:C7:E0:93:AE:7B:12:ED:5B:C3:42:93:D0:B4:02:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl

            X509v3 Authority Key Identifier:
                keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:82:6b:c5:8b:06:de:0c:5e:32:26:13:19:f9:b4:07:c8:a9:
         2d:e7:d6:60:81:53:98:68:76:fc:ff:5e:41:d2:03:fd:a3:96:
         3f:18:3f:1a:f0:ad:a1:7d:70:bb:e9:57:cc:75:a5:09:b3:f8:
         93:9a:5b:05:49:2c:f5:49:0d:4f:8d:62:32:a1:a8:ae:47:d7:
         41:73:63:4f:cc:e8:db:d7:b6:fb:09:1c:ff:d4:18:9c:ed:19:
         65:03:d7:54:58:2b:35:8d:3a:e9:5d:09:4e:7c:9e:fa:13:e1:
         e5:58:71:e4:5e:ed:e8:9c:1f:c6:f6:a2:37:e4:87:3d:35:75:
         18:e8:f7:d5:df:5d:56:37:ed:0f:cb:2c:c3:c9:76:2c:2b:95:
         dd:c2:66:bb:87:35:c9:c0:2c:c4:4d:40:26:c8:8d:80:99:67:
         77:c0:37:d2:c1:d9:d1:04:81:6b:b8:51:2c:ca:28:07:46:4d:
         39:7b:09:81:d2:7f:f1:cd:5a:a4:c3:ac:cb:f5:73:48:e8:cb:
         96:3b:b2:31:ae:d8:30:28:2d:4e:7c:da:ca:5d:fa:4f:71:b7:
         5d:9d:7d:bc:aa:f2:30:1c:b9:b6:aa:de:74:ac:70:f2:3d:ac:
         91:83:10:39:f0:35:67:61:9e:11:b0:e2:07:0d:41:ee:9d:f4:
         65:14:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:46 2025 by rpki-client