Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa
File:                     8b0ed026-e0d3-3184-87c2-e9755bc80733.roa (raw, json)
Hash identifier:          c101BnjA/IAuPSYJrA/vS7KGHK/PNEKnkAXSDwaIqZE=
Subject key identifier:   D1:CC:D1:80:A0:AB:83:2E:11:F7:3C:63:0A:02:BD:08:B3:63:34:37
Certificate issuer:       /CN=deaf388e-6941-424e-9f96-abe06598e29c
Certificate serial:       010D0C9F4328584AB3862B3FFC74E73779D31400
Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     401371
IP address blocks:        23.138.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:2b:3f:fc:74:e7:37:79:d3:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=e7964011-f87e-475b-b60f-60dea4fce6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:e4:e4:da:39:3a:96:8c:8a:60:b2:c3:f1:
                    69:69:2a:a2:b9:0d:d9:87:5c:aa:d6:f9:c1:05:a3:
                    8e:11:ab:2d:ba:50:92:25:df:11:6d:39:cb:07:3c:
                    97:b0:b4:dd:fd:67:d1:d3:5e:f0:87:39:37:b3:e4:
                    ec:59:05:1f:a7:3d:32:7b:6c:26:21:41:b2:75:31:
                    f7:db:9d:da:5c:bc:c7:d8:c6:4a:9e:c6:5b:87:c2:
                    26:b6:1b:dd:e8:3c:0a:5c:67:65:74:c6:7e:76:d4:
                    01:da:b5:c3:34:1e:e3:19:04:1b:17:73:56:68:69:
                    e9:c9:16:3a:25:40:98:d7:55:da:8b:79:26:d9:11:
                    b6:6f:98:90:48:7e:eb:4f:cf:4c:39:4e:a0:fc:40:
                    00:6d:c6:1b:2a:79:5b:1e:6e:ef:a3:9b:c6:de:4e:
                    f4:b2:22:8b:37:c7:b2:c6:41:1d:19:cc:da:18:b7:
                    72:05:21:c4:fd:74:8b:6f:58:84:7b:71:4e:79:eb:
                    06:54:fe:78:75:a9:27:c9:8e:51:bc:35:a0:de:49:
                    b8:d1:eb:d0:0d:b2:28:78:09:13:37:c0:f6:19:fc:
                    7b:27:41:f3:2b:d3:44:61:f0:44:18:53:04:f7:8a:
                    3a:f6:0f:c5:8d:c2:fd:17:a6:b0:da:8e:e6:f1:fc:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:D1:80:A0:AB:83:2E:11:F7:3C:63:0A:02:BD:08:B3:63:34:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:0a:d2:62:a7:49:d5:ea:38:34:fa:ba:59:e7:1f:42:f9:
         a7:17:3c:ff:2a:7a:e4:fb:73:39:63:48:d3:4f:7b:c8:67:ec:
         30:02:b1:a4:c0:1f:22:b5:10:4b:75:91:bc:23:b5:9f:52:b7:
         0d:33:23:e1:ba:fd:38:8a:a7:70:d7:63:52:6d:1d:d2:e8:54:
         dd:fb:47:f2:30:d1:84:ee:13:13:8f:be:90:26:c6:b6:91:37:
         1d:e1:3f:66:a0:7d:44:6d:02:78:d8:2c:22:03:e1:6e:60:10:
         b1:57:93:14:49:be:54:0d:b9:95:db:6a:7e:37:e6:3e:a6:7f:
         f4:d5:2f:46:d9:66:b7:25:14:a0:ae:ff:46:1a:f0:7b:ac:01:
         5c:3e:3d:89:20:76:07:1d:db:70:49:d8:b1:11:01:06:e5:f2:
         06:80:b4:eb:9e:4f:18:c3:8c:fc:7e:6a:03:52:70:b2:33:f7:
         1d:d9:e2:d3:55:fc:b9:3a:f1:1a:02:d6:e7:9d:f6:7a:f1:54:
         5a:b6:b8:ac:36:d7:63:4d:b8:be:37:84:64:4a:0d:85:c2:f5:
         82:02:fc:a8:0f:e0:93:33:c5:77:05:78:b7:ff:88:11:fc:9a:
         e6:f2:0d:49:ef:f2:61:f9:97:c4:63:dd:0a:86:ea:fa:8c:8c:
         47:c7:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:21:13 2025 by rpki-client