Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa
File:                     e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa (raw, json)
Hash identifier:          T21u0ZTyBRM7Xot2lkKbefpwwEiiGHefQ39oCEq6sRo=
Subject key identifier:   08:24:B0:D9:9A:31:61:28:E5:43:64:C4:0D:4A:0F:05:E8:B9:92:8C
Certificate issuer:       /CN=5aa08268-5ec4-4fb1-b2a8-05d6a90ac091
Certificate serial:       010D0C9F4328584A71EB26E5F98A112A33DF9C00
Authority key identifier: F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     395898
IP address blocks:        23.137.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:26:e5:f9:8a:11:2a:33:df:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa08268-5ec4-4fb1-b2a8-05d6a90ac091
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=dd8469d6-af10-479b-96f4-12b51535543a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4b:18:90:85:ce:06:51:ae:c8:78:ae:80:f6:
                    04:ea:01:6e:9d:c6:80:d4:92:2a:3e:fb:d2:65:98:
                    27:67:94:ef:94:28:ba:4f:ad:1a:70:1b:61:bb:20:
                    48:e1:d4:24:18:c6:49:fc:c3:57:5e:de:43:25:3d:
                    aa:2f:2f:3d:fd:e9:98:a9:d4:12:eb:b8:1b:c1:35:
                    c6:93:30:60:d6:03:44:fc:50:11:f3:ad:3a:6e:eb:
                    af:9e:f8:75:ba:05:67:31:4e:3b:0c:ec:36:12:93:
                    36:8b:3d:13:fa:92:21:e4:80:04:d2:39:a8:04:39:
                    07:6c:c0:e5:86:32:5e:15:7a:d5:bb:e1:73:c9:e1:
                    e0:9a:de:14:e1:9f:39:df:e8:59:34:b3:c8:91:55:
                    47:2f:79:dd:29:db:60:32:7a:ff:e1:3c:92:03:3c:
                    4e:f3:e2:f4:b1:e3:58:e4:ad:83:e1:70:f1:d3:8b:
                    0e:8e:b3:71:a7:f2:b9:4d:c8:97:b2:69:c3:21:ed:
                    b9:9f:65:ed:57:b0:25:a0:b2:59:86:88:f3:5f:eb:
                    73:7c:24:b5:a3:f8:73:0c:9a:7c:06:6b:fa:b1:bd:
                    bb:a5:b9:25:28:06:02:d6:c8:84:6e:88:72:0e:89:
                    4c:da:1a:b4:e1:92:e1:04:77:91:18:30:ac:56:0a:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:B0:D9:9A:31:61:28:E5:43:64:C4:0D:4A:0F:05:E8:B9:92:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.crl

            X509v3 Authority Key Identifier:
                keyid:F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:71:0e:8f:c5:6a:a9:c1:ff:68:01:c1:6d:0c:c0:7d:a9:6e:
         02:c6:34:20:b0:5e:f0:9d:c1:47:30:a3:c9:e1:24:c9:d3:3b:
         9d:1d:ef:85:02:c0:03:a7:62:62:11:ab:c9:60:8a:3c:a8:33:
         93:37:a1:c5:80:a8:ed:26:10:7a:7a:8e:ff:28:6e:04:1f:46:
         b5:59:7f:90:46:9c:16:f5:5d:0c:ca:82:5a:6d:fa:f3:43:80:
         e4:d6:25:70:4d:0f:d4:55:70:f7:4c:bd:c8:55:30:38:1e:ad:
         29:63:0b:41:41:aa:9a:18:dd:b9:0a:20:45:89:90:b2:04:9f:
         69:ba:6a:91:ea:97:db:3b:fe:bb:70:15:91:08:bb:2e:1a:6c:
         86:2d:66:19:1a:6a:02:a8:9a:5f:41:bf:74:cf:92:ff:e9:39:
         90:5e:bf:39:15:9c:4d:3e:2a:c7:8a:1f:30:15:f6:e9:d2:c0:
         f7:7c:84:d6:55:35:5b:65:30:a2:bd:bf:22:a1:18:50:6c:61:
         c4:aa:e9:48:8b:98:e7:60:75:5a:85:c7:8f:45:69:3e:5e:37:
         fa:fa:80:68:e8:2d:e3:8c:9f:b1:0f:11:dd:b3:11:e3:1b:a9:
         ed:7a:1d:f6:bf:40:6f:96:d2:15:31:d6:e2:a2:63:39:65:a1:
         94:83:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:02 2025 by rpki-client