Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa
File:                     72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa (raw, json)
Hash identifier:          mhTOhPdpvELE/y1uKyed06zWjPih+85fy4pjrq+ScTA=
Subject key identifier:   A0:72:ED:C7:20:6F:4B:5E:D3:EC:64:7E:58:AF:CE:CA:A5:5F:55:8E
Certificate issuer:       /CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf
Certificate serial:       010D0C9F4328584AA2C645787EA7ACD90BBF2A40
Authority key identifier: B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     53850
IP address blocks:        23.147.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:45:78:7e:a7:ac:d9:0b:bf:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=c8efb5c2-8fbb-4b16-9c56-aabdb7b2088e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:85:5e:62:8c:dd:e0:a1:e2:cd:84:88:2a:
                    3a:8a:29:bd:8a:de:51:83:4f:64:a6:97:d6:d2:93:
                    b0:ce:88:70:07:13:7e:59:15:af:f3:9b:1c:5e:34:
                    f4:b9:36:9b:91:c0:4a:83:3f:93:82:9d:53:87:17:
                    f8:39:43:2e:ed:d0:00:9d:70:22:3d:1b:8c:14:98:
                    cd:95:26:06:d2:4c:ee:73:9e:2d:4c:f6:13:f7:4f:
                    c7:61:4d:c0:d1:8b:55:c4:0b:81:71:30:39:32:81:
                    09:53:18:3b:bc:a5:7d:23:b2:b3:19:ab:57:b5:dc:
                    51:e3:92:38:82:d4:a0:a1:8f:9e:fc:75:1f:1c:fd:
                    91:b7:06:05:ab:69:8a:46:8a:e8:f6:8d:36:27:da:
                    5b:32:2e:cc:f4:1e:5f:11:ad:e1:ef:20:4b:bc:db:
                    b3:fe:44:7f:10:f7:85:31:e7:02:69:d4:29:4d:ac:
                    55:d5:8b:d7:21:fe:9e:9a:b4:e1:38:15:f7:7a:4c:
                    60:3d:ce:48:3c:29:e1:79:72:59:36:86:37:a6:3a:
                    13:48:51:7c:01:60:fe:62:94:36:be:13:08:c3:23:
                    90:66:2b:4e:16:50:cc:c6:cd:ce:33:5d:d7:f5:1b:
                    f6:cb:bb:a3:eb:6b:fb:de:86:1f:d0:6c:78:2b:48:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:ED:C7:20:6F:4B:5E:D3:EC:64:7E:58:AF:CE:CA:A5:5F:55:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:38:0b:41:85:b1:a4:90:fd:a4:29:d2:ed:fa:df:ea:90:06:
         8b:cc:e8:b1:80:68:07:a6:67:55:59:cf:ca:75:44:e4:5f:92:
         aa:c0:2a:32:4e:47:ca:a9:ee:5c:a6:4f:29:7f:2d:c2:c3:4c:
         5a:e1:35:e6:68:3b:37:03:df:8b:eb:e5:b2:35:8f:69:21:78:
         a7:dc:70:e6:23:b8:89:0d:6a:4a:d4:8a:10:4a:f1:cb:3d:7d:
         da:87:d5:e8:a9:43:ca:dc:2c:8c:d6:20:76:18:aa:26:a4:86:
         55:77:32:60:56:77:2f:93:bf:01:5e:59:3f:3c:13:bd:ce:5c:
         35:94:98:2f:fd:50:6d:a2:ff:56:ba:93:a8:a5:d6:14:e0:87:
         6c:bd:1a:17:3b:f8:1e:1c:e0:6b:be:ce:27:11:92:ba:0d:ce:
         fc:09:56:42:60:46:ee:95:b9:e7:27:4d:e1:3c:a4:90:f9:e9:
         ea:bc:fc:88:36:9f:a6:8f:7a:49:d0:56:69:df:81:4b:98:e6:
         71:dd:88:51:14:09:d4:14:49:d0:39:88:7c:04:06:b9:49:80:
         8e:92:06:33:3a:a9:a5:94:c6:db:d5:9e:96:0d:d0:57:a4:f9:
         0d:37:f6:39:d1:1f:c1:c6:48:f5:b9:d9:2a:6e:ba:e8:dc:2d:
         41:6d:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:08 2025 by rpki-client