Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa
File:                     c5f99082-735a-3bc4-848d-adbcd08fa635.roa (raw, json)
Hash identifier:          Knhw+PcxM/gO83sDLhvnIfdgHod+BYiZ0PtoyeDh5tc=
Subject key identifier:   20:D9:AF:11:4B:A7:69:68:FE:47:BD:E5:3D:8B:A2:C7:83:D6:A2:FB
Certificate issuer:       /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8
Certificate serial:       010D0C9F4328584A1A11CD2566DD92750A2E89C0
Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa
Signing time:             Fri 06 Jun 2025 13:47:39 +0000
ROA not before:           Fri 06 Jun 2025 13:47:39 +0000
ROA not after:            Thu 04 Sep 2025 13:47:39 +0000
asID:                     21859
IP address blocks:        23.139.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1a:11:cd:25:66:dd:92:75:0a:2e:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8
        Validity
            Not Before: Jun  6 13:47:39 2025 GMT
            Not After : Sep  4 13:47:39 2025 GMT
        Subject: CN=482a602b-86f8-4a47-b910-407baf427195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:4f:b3:8a:cf:2b:14:1d:c8:cd:93:4a:d8:
                    85:8f:57:06:1c:5d:c1:ce:37:71:43:76:dd:d2:a7:
                    07:14:cf:5a:bd:09:c4:29:ba:d2:93:c9:d9:a3:bd:
                    63:8f:b3:00:69:a1:90:5a:8f:ee:c7:32:01:e2:13:
                    0a:12:8c:ff:ea:92:3b:7b:4b:8e:5e:f9:8e:3c:03:
                    44:90:e4:23:ef:dd:85:76:57:8f:0f:ef:54:a5:fd:
                    7c:b9:b5:16:a9:33:08:b5:e7:a7:03:0e:e5:53:02:
                    c6:e7:a2:19:e7:08:ea:c8:50:20:7a:ca:03:16:a7:
                    cf:45:02:fa:54:33:4f:15:01:82:13:5c:08:ca:c9:
                    be:b5:60:d7:dc:ed:30:6b:10:a5:59:ee:eb:cc:44:
                    82:5f:45:51:7b:d4:23:da:27:3d:9c:de:ed:c7:ff:
                    27:e2:3a:27:1b:00:84:1e:d2:f1:23:ab:a5:6d:a5:
                    42:ea:e4:50:d6:8f:5d:3b:e5:9a:4c:9b:75:4b:bb:
                    84:8d:2e:5f:17:b5:e2:1d:59:c2:5e:1d:51:12:49:
                    f8:52:e2:fc:89:46:b6:3e:fe:99:d5:21:53:a1:ab:
                    ff:56:2d:0e:c1:07:3e:e5:e3:0c:d7:fe:0f:6b:3f:
                    db:eb:00:fc:2e:a3:6e:07:59:48:6b:c5:0d:0f:d1:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:AF:11:4B:A7:69:68:FE:47:BD:E5:3D:8B:A2:C7:83:D6:A2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:16:d1:8b:bb:87:f4:aa:c1:17:03:7a:52:f0:f3:e7:0e:
         92:41:91:bd:b7:52:dd:1a:d0:d8:71:dd:5e:77:4f:d1:46:65:
         8f:67:49:ca:70:ec:d0:59:0e:32:6f:2b:2b:69:07:69:24:00:
         13:20:68:8a:8a:d2:fd:e0:8e:58:bc:38:20:69:dc:02:2d:c2:
         80:32:77:4c:d4:a3:4c:9c:38:6b:99:3e:e4:2c:c5:7d:0d:50:
         1c:10:48:d3:94:bd:47:f9:07:3c:69:bd:d8:57:bb:d5:dc:89:
         3e:e3:d1:2b:03:c7:75:0d:fc:45:0f:61:66:14:2a:6b:3a:a7:
         4e:38:84:b9:aa:2a:78:fc:28:76:25:8c:ec:8b:70:91:e8:ba:
         ac:f7:62:12:b0:65:ca:4a:d7:90:9c:2f:99:fd:07:98:58:2a:
         b7:3a:bf:58:6d:da:39:fb:71:3f:9e:8e:23:ab:ec:70:d3:d7:
         21:e1:2c:bd:11:a9:6f:f3:46:ec:68:96:57:97:96:94:a8:b1:
         30:88:9d:bd:50:1b:45:4d:bf:5b:60:5c:fc:17:44:26:95:ef:
         02:72:da:4d:78:4b:4a:8d:4d:92:d2:9b:e3:46:76:a0:49:e5:
         c5:f5:2c:34:8e:ca:0c:35:71:ac:33:72:a2:41:af:6e:ba:d3:
         63:80:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:31:48 2025 by rpki-client