Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa
File:                     99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa (raw, json)
Hash identifier:          vz5fGy4uqxhJifTBvy34ovxLXnGdPiL+3/yjHyPzWvs=
Subject key identifier:   BA:78:58:87:74:C2:AB:82:7B:10:81:86:E1:22:0C:DE:E4:E6:CB:00
Certificate issuer:       /CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
Certificate serial:       010D0C9F4328584AA6F61E3EB609AED81945C480
Authority key identifier: 01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     57844
IP address blocks:        23.247.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:1e:3e:b6:09:ae:d8:19:45:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=ac97ac0c-c61f-4172-a2bd-2b54bd125f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:d5:7d:e9:ef:c6:4d:ff:c2:d9:5f:ea:56:
                    2c:68:ef:11:06:66:b7:55:11:20:34:cb:a2:c7:e9:
                    4b:3e:16:ae:05:78:0d:db:d7:fe:3b:b6:7b:b9:79:
                    ac:6d:79:df:dd:03:86:e7:dd:80:7e:79:8d:64:85:
                    79:f7:b2:54:c5:12:a8:46:a3:39:d8:57:2d:8c:f4:
                    de:a4:6a:16:bf:60:e6:8f:bc:6e:32:bb:e7:44:1d:
                    14:86:88:85:de:5a:14:d1:43:91:75:6b:14:05:7c:
                    7a:30:d4:86:1b:52:6c:a8:68:f7:39:f5:a2:2a:59:
                    71:37:1a:c9:38:bc:c1:e5:ed:36:ff:b5:1d:6b:6a:
                    05:fe:5c:bf:7c:38:e4:e2:9f:98:21:26:dc:e0:04:
                    a7:77:27:ff:c6:ab:63:df:b6:5f:14:6e:11:a8:87:
                    51:75:94:02:05:d4:67:70:3b:9b:e7:ad:49:a0:d7:
                    73:6b:b0:e3:20:d8:61:2f:86:2b:2a:f9:44:a9:3d:
                    87:bd:fe:e6:5d:41:e0:a1:e9:b2:b4:c3:13:46:0f:
                    ee:f5:7f:e8:05:9f:8a:66:25:d6:2b:47:16:f1:5b:
                    6a:0b:46:cf:03:3e:d8:cd:d3:3d:64:a1:a9:f2:6e:
                    26:c5:c7:c1:f8:05:96:9c:9e:76:2f:de:e6:06:f6:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:78:58:87:74:C2:AB:82:7B:10:81:86:E1:22:0C:DE:E4:E6:CB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/99fdfe21-c9ae-3b20-a169-18b7db3d0ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl

            X509v3 Authority Key Identifier:
                keyid:01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f2:e0:8b:d3:33:e8:ae:a1:59:14:b7:c5:9b:60:79:16:2b:
         8d:31:e7:cd:26:52:1f:58:f3:ec:4b:06:92:da:30:a0:95:9d:
         f9:9c:f8:2b:ca:4c:46:12:9f:4f:32:e7:1c:ac:a1:44:18:d5:
         2a:eb:ad:d2:ca:25:5f:97:b4:4d:db:ad:63:0a:4e:50:f2:a9:
         ab:60:06:9a:9c:98:2a:48:98:97:9d:48:da:4c:f7:cd:36:4e:
         28:e0:24:f8:f4:b5:a5:1d:f5:f7:50:85:f5:bb:d4:2c:34:9c:
         a9:4d:bf:0f:d5:cc:24:a5:af:3f:12:bb:86:64:0c:31:0e:ae:
         36:ff:12:d8:06:09:7f:3f:9a:47:ae:4a:da:b8:11:f2:d1:74:
         18:87:35:66:6e:b1:9c:9f:a2:16:91:07:84:e8:4b:a7:9c:56:
         77:83:69:7f:94:d9:1a:46:e0:9b:44:63:c6:92:9b:16:76:61:
         c1:36:03:91:1e:ae:8b:31:fd:4e:d5:7a:14:0e:71:da:00:3f:
         97:4d:0b:e7:bd:5e:d3:ab:17:52:92:02:b8:08:c0:0a:f2:c0:
         52:52:de:ec:08:9b:6d:c1:64:2f:e2:ab:5c:27:3d:c3:08:6e:
         70:7a:fb:21:b6:d0:a6:ee:2b:27:d7:2c:18:3c:9b:57:f5:b2:
         b0:df:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:28 2025 by rpki-client