Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa
File:                     707771ce-afb7-360a-9819-67b62be7adc9.roa (raw, json)
Hash identifier:          eKje5tKAYdvGE9/3if1jEXN9eeCdPkHZey0JqSmS0Y0=
Subject key identifier:   00:7B:9A:E8:22:1D:1D:FA:85:1D:84:7E:11:D8:13:15:95:44:B6:65
Certificate issuer:       /CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0
Certificate serial:       010D0C9F4328584A295559D97D1ACDE1FB1B8680
Authority key identifier: 65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     46161
IP address blocks:        23.135.28.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:59:d9:7d:1a:cd:e1:fb:1b:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=5d5679c3-1956-4516-8993-60376ddbb657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:36:9c:eb:5e:36:4a:78:f9:3c:f5:7f:17:
                    ea:ca:c7:ab:0b:8a:1f:fc:d0:b3:ae:f2:57:7e:db:
                    8e:dd:20:ad:e7:22:02:7b:12:0d:ed:d0:c4:12:8c:
                    dd:f9:4d:78:e3:f7:c8:b7:7c:15:e5:b8:ae:ae:35:
                    75:a0:31:f8:d5:b8:ff:c4:50:68:17:7e:7c:c7:eb:
                    2b:13:99:7a:39:64:52:11:e9:24:4f:54:7a:e4:05:
                    42:a7:d4:1d:07:ca:85:c1:e0:de:48:d4:da:62:4c:
                    f1:f2:62:71:75:4f:e2:c0:1a:46:f7:fb:44:0a:a1:
                    94:00:a9:8b:86:2d:b7:2a:a6:27:b7:38:66:b1:fb:
                    ba:00:77:7b:c4:85:0a:1a:c6:47:37:ee:29:77:2c:
                    2b:d7:21:b0:34:98:b8:65:bf:43:50:a2:de:ab:8d:
                    7f:24:b8:18:4d:49:ba:33:1b:4e:f6:59:44:83:b6:
                    5e:4c:4e:65:c0:8a:83:28:f9:69:5a:4f:c9:4f:2a:
                    f3:80:cd:f6:f0:fb:f6:87:e7:cb:19:02:db:66:8b:
                    30:c5:82:4b:8d:f5:5e:01:95:1b:d7:50:58:20:a2:
                    97:2b:08:1b:b2:c5:bc:45:81:c2:94:d6:26:84:8b:
                    02:a1:a3:e5:b9:be:44:9d:56:26:42:9a:95:7b:b9:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7B:9A:E8:22:1D:1D:FA:85:1D:84:7E:11:D8:13:15:95:44:B6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:31:a8:61:97:b0:e8:08:f7:55:64:92:c0:4b:a9:4f:d0:
         5c:87:16:0d:5f:87:fe:c2:00:3a:4f:6b:30:7d:b6:f8:14:f7:
         42:9a:14:e9:74:20:70:82:85:2b:bc:4c:53:53:21:b4:bf:92:
         d6:37:fe:cd:a6:c0:04:53:60:84:07:df:9a:f0:5c:29:4c:50:
         25:2a:ab:9c:fd:b1:28:f4:71:76:a3:ed:4d:76:f5:9d:70:9d:
         5e:98:56:ab:42:11:c6:8b:04:79:67:af:e5:8c:a4:06:e6:8c:
         17:a8:31:f0:44:51:e4:ef:23:56:96:37:85:e7:3d:a2:0e:07:
         2a:3b:2b:98:2e:10:85:b8:e8:44:12:3f:96:b4:98:47:0d:21:
         3d:7f:3c:ca:f7:f9:d4:44:e1:81:7a:e0:b9:60:d5:99:3b:47:
         e4:cd:b2:4d:c2:a0:bb:93:c7:a6:44:94:78:4f:fb:44:4b:9d:
         f9:3e:dc:b6:c3:b4:5a:28:39:bb:c1:b4:bc:01:d1:89:3c:68:
         c3:70:0c:83:ea:d7:62:b0:b9:ca:c9:20:4b:78:5f:a6:d1:99:
         66:ec:93:62:6d:3f:df:0e:06:3a:a3:04:a7:c2:ee:9d:d5:c7:
         ab:a5:b1:7e:79:9a:ea:37:08:12:75:e0:85:aa:88:d0:cd:05:
         98:db:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:47 2025 by rpki-client