Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa
File:                     a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa (raw, json)
Hash identifier:          k3vBA1lLlYxOHjC99+VwIMWySPNB0VS5Tcq4Fbu4Pes=
Subject key identifier:   AE:29:F0:F1:85:56:09:44:D6:10:3D:7C:A6:CE:FD:FD:A6:88:93:AE
Certificate issuer:       /CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
Certificate serial:       010D0C9F4328584AA42B6DAC6E706F3434B93500
Authority key identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     8796
IP address blocks:        23.138.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:6d:ac:6e:70:6f:34:34:b9:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=376b3075-d1ec-44a1-8d9c-4c9c8d911087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:28:ff:e7:04:4f:a0:e9:c6:45:f5:97:bf:
                    b9:0c:5b:06:24:7c:58:14:8b:50:cf:85:72:c9:ad:
                    e0:b2:39:c9:92:7f:d8:bb:47:90:32:54:4d:00:5d:
                    6f:dc:d0:08:6e:82:af:f1:5c:88:d1:b2:be:43:59:
                    a5:32:9e:73:cd:91:ee:90:85:1d:50:20:bd:09:e5:
                    03:32:01:b0:0e:df:33:62:92:3f:f9:30:96:3f:38:
                    6b:09:20:0c:3f:b6:16:1a:54:85:eb:d9:d3:1e:85:
                    a0:12:8a:f4:ab:28:c4:48:41:28:4e:87:e7:13:d7:
                    dd:87:ef:30:ba:14:b5:16:18:f0:6f:3b:05:e3:d7:
                    d0:98:55:2d:34:66:18:0b:d2:f9:38:95:00:2b:a6:
                    78:39:cc:b3:06:62:eb:72:44:ef:f6:bc:e9:03:61:
                    8e:5c:eb:44:45:1d:cd:be:71:d9:7f:ce:86:6b:a7:
                    e2:e5:54:d5:0a:dd:e4:2d:6a:e2:16:72:56:fb:1a:
                    0b:c0:d2:10:39:75:90:22:72:28:fa:37:70:cb:59:
                    b3:36:28:4d:e2:ec:d3:e6:2a:cb:46:9f:a1:a1:d9:
                    b7:a7:3e:7a:6c:78:cb:7e:48:7b:25:00:40:93:83:
                    de:c4:b4:ac:8b:69:4c:32:50:ae:ad:dc:ce:2e:c8:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:29:F0:F1:85:56:09:44:D6:10:3D:7C:A6:CE:FD:FD:A6:88:93:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl

            X509v3 Authority Key Identifier:
                keyid:DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:8d:c4:af:e2:9b:f0:53:05:fe:96:7a:b9:d1:d1:b1:2c:
         2b:d7:cf:89:f5:f6:cd:3a:69:20:8e:c1:1a:4b:83:55:16:b9:
         1a:eb:5d:ad:a5:7e:9c:98:6a:ee:79:a9:f0:dc:8f:95:c9:99:
         8a:ef:5e:ae:d9:47:05:bb:41:de:e7:b3:36:8d:29:e1:8a:11:
         24:68:c9:70:41:28:62:cc:9d:62:d7:af:3e:28:70:82:27:ce:
         08:ae:10:d9:d1:1f:dc:3a:82:96:bc:1f:b1:bc:99:79:e6:b0:
         22:62:2f:8b:1a:3f:29:ff:89:f6:45:bf:69:02:19:3b:ec:e4:
         ab:16:71:d7:27:53:87:ac:f9:f7:68:ac:0c:d3:1b:24:ce:98:
         1b:d5:29:91:f8:38:65:0e:54:30:17:d9:c4:aa:43:c3:29:bb:
         7e:21:86:2b:8b:fa:db:2e:8e:63:b0:7b:bd:19:fd:3a:b2:30:
         84:e6:df:58:8c:94:21:40:c1:6c:29:3c:99:bb:7e:d2:73:91:
         1e:67:2e:1a:c6:5c:3f:a0:11:31:ca:31:a0:bb:6a:0f:bd:ca:
         f3:93:f6:15:f7:01:03:a5:94:6c:b6:57:b5:7a:90:fb:92:3d:
         de:84:07:ff:98:e9:b8:a7:5e:c9:b2:79:e3:77:87:4d:2e:c5:
         4e:a9:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:17 2025 by rpki-client