Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa
File:                     8459abed-f045-31a6-8fe6-16d82354e576.roa (raw, json)
Hash identifier:          VNmmxctoGpSL8qz7oiKrH0ESGxfNT1R5bOIpVh6btic=
Subject key identifier:   15:51:F0:B0:3D:A2:1E:C8:52:44:67:8C:37:B9:D5:86:9B:74:25:24
Certificate issuer:       /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Certificate serial:       010D0C9F4328584AADF11442B6C284321666BA40
Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        23.153.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:14:42:b6:c2:84:32:16:66:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=0bef0fe0-f515-4f77-a772-e5d0e7557056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:f3:f0:af:48:79:16:ff:97:8d:09:93:ee:
                    45:27:f0:ce:1c:09:a1:ee:63:6c:19:ae:3d:74:7e:
                    1a:ae:fc:87:0c:a0:cd:24:ed:4a:1e:ad:0a:63:d7:
                    26:9d:fb:1d:fd:b7:bf:26:52:53:7c:91:7e:51:96:
                    67:6b:ff:ab:d9:32:e3:16:ed:d3:5b:7c:5a:2b:21:
                    32:bb:7b:7f:36:02:c5:27:7f:ac:48:1c:58:89:2d:
                    eb:9d:49:15:92:21:48:88:db:be:1a:1a:1c:7d:ea:
                    6c:01:e8:0b:4d:37:1a:94:2c:e0:99:ac:5b:f6:45:
                    89:59:eb:40:e5:41:1e:24:6b:61:64:f1:1e:b8:af:
                    66:62:01:4d:bc:c5:ba:23:b1:1c:51:24:95:59:be:
                    6e:2b:48:3f:77:dd:2a:27:f5:03:ed:3a:31:47:21:
                    d5:20:58:5f:cc:e0:92:00:d8:da:e4:d5:6c:5a:b6:
                    2f:22:47:e9:b6:44:08:33:67:2a:e8:7e:cd:2a:00:
                    b2:e6:c1:11:be:9e:89:c6:4f:e1:7b:2b:16:36:2c:
                    04:de:0a:92:3d:5b:82:7b:73:02:a0:32:b0:14:37:
                    c7:32:b2:e8:39:23:fe:e8:b6:ad:dc:a9:5b:4a:23:
                    04:0d:76:11:de:4c:19:b4:36:c8:47:54:b0:42:46:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:51:F0:B0:3D:A2:1E:C8:52:44:67:8C:37:B9:D5:86:9B:74:25:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl

            X509v3 Authority Key Identifier:
                keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:7e:78:da:ef:e9:10:21:2b:83:32:1a:f9:63:34:7c:04:
         fe:67:c3:b6:8f:0b:e8:01:56:95:eb:0c:5c:05:b9:af:1f:21:
         fd:e0:17:fe:e9:49:24:77:e0:5e:e8:c3:15:ca:c2:48:ff:21:
         90:61:99:e6:4b:de:42:26:1f:5e:19:9a:18:c4:c3:29:88:4e:
         5f:38:72:fe:6e:4a:93:70:1a:70:16:ec:bc:cf:04:20:99:20:
         30:fa:ec:93:c2:65:32:cf:9b:fe:a7:3a:e2:ff:ce:7c:5b:18:
         75:f9:3a:f6:63:3f:4e:b9:5a:72:0e:da:04:3c:27:0b:c9:23:
         59:89:00:8f:cb:6e:3a:2a:84:fa:31:db:3e:d4:b4:e1:03:f6:
         31:3f:c6:6c:20:fa:2c:53:da:5b:ea:06:4e:f0:c7:85:d5:98:
         db:1d:1d:33:fc:25:6d:cd:3e:39:d7:90:0c:ac:77:48:f7:0f:
         2a:04:d5:77:ab:e8:27:5c:41:b7:c0:f4:f0:60:b8:50:24:54:
         46:de:a8:c7:55:c9:b8:97:ef:3a:72:23:35:b4:b9:08:a3:24:
         59:be:1c:f4:91:fa:52:8e:b2:0a:86:7a:2a:e9:f7:49:42:36:
         f9:da:15:ff:40:1c:da:1c:eb:18:01:f3:1b:55:16:75:6b:05:
         6c:41:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:12 2025 by rpki-client