Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/88332e72-e80d-399b-9011-6cec57811083.roa
File:                     88332e72-e80d-399b-9011-6cec57811083.roa (raw, json)
Hash identifier:          EvuK9G6FP2/MdzFHb0sYPfYaKaI8sJmCEoB+Yudohak=
Subject key identifier:   0A:FD:78:8C:B1:CB:F2:D2:04:0C:FB:E1:10:AB:A5:75:B3:FA:C1:FD
Certificate issuer:       /CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
Certificate serial:       010D0C9F4328584A360D56DFDD6E561B77FD9DA0
Authority key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/88332e72-e80d-399b-9011-6cec57811083.roa
Signing time:             Mon 16 Jun 2025 14:21:17 +0000
ROA not before:           Mon 16 Jun 2025 14:21:17 +0000
ROA not after:            Sun 14 Sep 2025 14:21:17 +0000
asID:                     401753
IP address blocks:        23.140.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:0d:56:df:dd:6e:56:1b:77:fd:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
        Validity
            Not Before: Jun 16 14:21:17 2025 GMT
            Not After : Sep 14 14:21:17 2025 GMT
        Subject: CN=6c031c06-bb54-4f1b-8125-c44fe8f2458b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:95:f1:e9:fd:49:b5:c7:f3:e4:b8:eb:8a:6f:
                    ad:33:8e:7c:3c:23:74:4d:74:14:1d:cf:37:ed:42:
                    07:f3:07:2a:e7:a9:1f:82:7d:a5:76:1b:74:ad:fd:
                    cf:ac:58:55:96:a6:b3:57:89:86:76:8a:09:ae:d0:
                    92:6c:d4:a5:39:ec:3b:15:24:b1:f9:dd:21:7d:65:
                    b3:fb:a8:2c:30:a0:ec:28:ee:b2:2a:51:2e:43:c7:
                    97:c5:b5:f2:a1:ce:e6:19:6f:1d:90:68:c8:00:e3:
                    cb:f5:c5:dc:30:eb:60:5c:c0:b3:51:fa:c8:8d:94:
                    d7:19:38:27:93:f7:e1:19:9b:f0:1e:5c:7f:34:3e:
                    eb:f4:86:6b:54:2c:d8:f6:f6:73:1b:dc:7c:10:3b:
                    99:24:fa:6e:ff:a8:50:27:a8:cf:8a:9d:08:0c:29:
                    84:73:8b:eb:5f:b8:0c:9f:19:35:ad:25:4b:6b:5c:
                    16:db:f1:f3:22:9e:a5:4b:d1:05:c6:3f:2e:24:34:
                    2a:fa:db:36:0e:b7:ad:df:a4:64:df:40:6f:2d:77:
                    86:bd:cb:bd:9f:32:84:78:f0:6e:b1:b9:6a:fe:7c:
                    1a:2f:e6:74:5c:80:c9:17:04:a4:b2:97:1d:6a:c1:
                    a4:fd:27:52:03:4a:d8:5f:eb:b3:97:58:6c:d1:0f:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FD:78:8C:B1:CB:F2:D2:04:0C:FB:E1:10:AB:A5:75:B3:FA:C1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/88332e72-e80d-399b-9011-6cec57811083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl

            X509v3 Authority Key Identifier:
                keyid:10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:00:50:c3:72:d2:cd:98:e3:15:d5:ae:0a:68:dc:44:15:
         6a:51:f6:c6:c2:33:5c:d3:15:43:79:cc:95:29:80:6a:d9:be:
         5f:e0:b2:cc:91:24:1f:23:18:49:db:8a:59:45:59:9b:04:20:
         53:b2:7d:1f:5d:40:ee:f1:ff:3b:1f:3e:87:1e:52:12:b1:13:
         02:7a:4b:47:17:91:62:0d:fb:8b:04:1f:03:82:33:7e:30:49:
         a3:f8:7d:d5:8b:4e:5b:98:d3:50:1a:1f:c4:a0:c5:36:93:f7:
         73:66:58:9c:9e:51:3b:87:37:87:84:c8:2e:a9:03:f5:94:cd:
         a4:96:8a:28:fa:21:d6:19:6e:c6:44:44:8d:43:fe:c0:92:a1:
         12:77:43:d3:0a:92:c5:7f:5d:a0:eb:ff:5c:5d:06:27:66:da:
         f1:8d:1f:bb:83:62:d4:16:3c:96:94:34:28:84:33:42:d4:9a:
         b7:49:42:9b:5e:0a:4b:f1:07:5f:db:b9:82:75:df:f2:6c:ec:
         cf:8e:1f:4c:e5:b2:81:4d:e6:af:b2:6a:91:8f:fe:3a:a0:b3:
         0a:66:5b:1b:4f:e7:6c:bb:42:dd:1f:8c:17:cf:24:2a:ea:10:
         3b:f1:45:54:47:27:a5:2f:3d:03:56:3e:ad:5d:e7:da:8c:51:
         50:06:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:28:13 2025 by rpki-client