Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa
File:                     ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa (raw, json)
Hash identifier:          39QcYaI0QIrqIXW9g35VuKHdOFi4Scn/qyNq/DdP340=
Subject key identifier:   9B:CF:D9:4C:AA:C0:61:DE:05:17:FC:CD:96:E8:59:48:39:BB:F2:A2
Certificate issuer:       /CN=9945234d-5624-4733-92d1-ade3a2f33d87
Certificate serial:       010D0C9F4328584A6825F8497CB3BD194EC61AE0
Authority key identifier: D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397614
IP address blocks:        23.137.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f8:49:7c:b3:bd:19:4e:c6:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9945234d-5624-4733-92d1-ade3a2f33d87
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=44d974bf-3fc1-44b4-8089-dcce995a78c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:7a:26:70:00:a5:aa:e6:9c:9d:7a:38:c6:
                    b3:2c:83:3f:4f:57:8e:bd:60:de:d8:85:81:28:68:
                    d0:c1:de:a8:7f:ff:ec:0c:99:6c:83:e6:7c:92:5e:
                    a1:a5:70:3b:4d:fb:66:77:d5:59:fc:1e:42:2c:6b:
                    1e:6f:97:9b:39:40:c5:6d:8b:cd:f1:da:d2:5b:d1:
                    e1:51:de:e3:b1:9a:79:85:fd:1e:87:15:1e:60:0b:
                    d8:31:c0:63:e5:17:75:03:dd:68:c1:ff:15:b7:49:
                    86:3a:fd:63:a4:8e:13:c5:5d:7e:61:04:78:78:40:
                    ca:14:7a:9f:78:97:35:a2:10:eb:99:0d:fb:cf:51:
                    ba:e6:8d:a5:d2:d6:e4:12:e3:51:13:7c:a4:e7:ca:
                    93:84:36:fc:05:6a:a9:b9:4a:5c:90:a6:7e:1f:07:
                    30:60:25:78:2b:76:83:0a:c7:31:a6:fa:a6:08:a5:
                    9c:93:c5:04:0f:e3:a4:53:c8:99:33:19:15:b6:f5:
                    0d:cb:48:6a:c8:70:3c:7f:59:47:47:3c:cd:97:af:
                    24:1a:a9:43:87:c3:66:0e:3e:f7:99:0c:62:15:97:
                    68:34:e8:33:6f:ae:34:65:9e:f8:0e:9f:f3:13:b4:
                    03:8d:ef:37:6f:f5:4e:ae:62:fd:39:f0:a5:67:3c:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:D9:4C:AA:C0:61:DE:05:17:FC:CD:96:E8:59:48:39:BB:F2:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl

            X509v3 Authority Key Identifier:
                keyid:D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:24:d6:55:e8:06:94:82:0d:7b:1b:52:5b:d1:9f:1c:6c:
         83:5d:43:6c:c5:3e:38:38:9e:74:ce:75:f9:8e:e2:0b:a6:da:
         8f:62:66:ff:5d:5b:0c:fc:66:52:83:9e:8b:64:1b:50:e4:87:
         5e:19:60:90:2c:4e:58:02:5b:9d:98:20:33:b8:31:d4:2d:97:
         93:fd:99:9a:c1:ae:df:2d:d7:14:05:fb:1f:cd:d0:f1:d8:73:
         52:ad:a1:fe:ed:c4:95:f3:42:58:b8:0a:ef:84:28:a7:56:72:
         61:12:32:ff:25:2c:aa:1e:f6:de:3d:8c:86:5b:52:d3:17:57:
         88:05:b4:2d:19:72:f8:a6:e4:a5:85:03:d7:b0:61:91:9b:e6:
         89:5d:5e:a1:ae:9d:ca:d2:29:79:38:f0:f2:96:f6:a7:80:ae:
         3a:97:27:ea:97:a3:40:26:69:c0:03:f2:0e:bd:24:5c:69:64:
         ab:b8:a4:65:c5:ca:4f:22:1c:cb:bc:13:9d:30:be:8d:3c:7d:
         32:d9:fb:9f:bb:0b:83:2a:27:7a:c9:93:44:ea:3c:51:2c:d9:
         47:4f:8f:cd:3b:31:a2:77:5d:7a:73:c4:23:e6:3e:5d:17:f5:
         fd:89:fb:0a:ac:91:a0:36:d7:85:33:62:28:d2:32:cb:78:9a:
         f7:89:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:41 2025 by rpki-client