Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa
File:                     79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa (raw, json)
Hash identifier:          DkkJ6TpG2fXMl/M0pf0RELGgCZYbBjtcarK4ulhEuUA=
Subject key identifier:   59:1C:67:2A:63:72:B9:44:99:D7:D0:5C:45:9C:9E:37:FB:DB:39:41
Certificate issuer:       /CN=5a3c1ef7-d18b-4bf7-a6a9-d8959334423b
Certificate serial:       010D0C9F4328584A8C70C336D14BAA28125CC380
Authority key identifier: 43:4E:A8:C1:E7:39:79:C9:C0:B7:35:80:0D:7A:E5:85:26:8E:0B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     401541
IP address blocks:        23.132.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c3:36:d1:4b:aa:28:12:5c:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3c1ef7-d18b-4bf7-a6a9-d8959334423b
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=94eaa45a-d6e2-4ad5-b97f-5f5d49f1d0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:ea:62:4a:c5:35:d6:1e:5a:dd:48:69:c4:
                    7c:92:7d:49:05:57:60:da:c3:d2:2a:f8:23:2b:b0:
                    a1:e0:e9:d7:94:85:0a:e1:a2:51:0d:40:4b:37:50:
                    db:d2:fc:50:1f:e9:88:8a:15:f7:0b:e8:65:d6:f5:
                    32:d3:22:79:1b:ce:04:32:cc:f3:e9:ef:ac:ef:0f:
                    3d:29:96:37:20:11:ab:d4:4e:44:af:f3:82:bb:b9:
                    97:db:26:31:40:63:22:74:b8:66:5e:e9:36:fc:8b:
                    a9:5b:7f:db:29:0c:e3:4f:ab:d3:c6:6f:49:f0:5e:
                    f3:64:6c:b6:2f:7b:4b:ac:6c:fa:72:64:e5:d8:7f:
                    58:c6:62:e3:f5:8c:15:18:c4:57:8c:24:27:61:9e:
                    9b:b3:a1:f3:ea:05:c2:5a:42:6b:3b:c8:9c:5f:38:
                    14:ac:72:3b:35:d6:a4:99:96:21:77:9f:7f:19:74:
                    85:a4:bd:24:a4:7d:93:31:9f:a3:8e:51:b3:08:e7:
                    4c:34:4c:15:83:c5:7e:2a:76:b2:2f:38:2c:55:a3:
                    20:7c:f8:cd:fb:ec:94:07:b3:54:1b:a8:c4:a1:be:
                    44:a5:ff:59:f6:fd:1d:a8:6d:7b:64:b2:22:a4:75:
                    5c:76:e1:88:23:c8:4b:19:2a:61:0f:7f:2f:60:07:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:67:2A:63:72:B9:44:99:D7:D0:5C:45:9C:9E:37:FB:DB:39:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.crl

            X509v3 Authority Key Identifier:
                keyid:43:4E:A8:C1:E7:39:79:C9:C0:B7:35:80:0D:7A:E5:85:26:8E:0B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:30:27:77:43:2f:b7:54:df:b3:66:84:5d:90:89:84:97:
         62:09:c7:ae:00:20:98:5d:ce:45:95:33:4d:49:88:77:f3:79:
         28:3e:65:99:a5:87:67:2a:94:48:ca:00:fd:e9:10:aa:d0:77:
         71:93:4a:03:c3:7b:0c:98:27:6d:46:89:f2:1f:ad:06:ba:6b:
         eb:59:c9:20:85:14:66:ae:03:c0:69:41:d3:b1:a9:dc:c4:f8:
         90:23:ea:1b:fe:8f:03:6d:6a:34:c6:73:65:8c:cc:77:57:8d:
         19:c0:f7:f8:11:71:ad:0f:40:c3:36:a3:2a:48:91:10:fc:10:
         b4:40:3d:b5:a3:28:a4:32:ce:90:8b:62:f6:13:5f:92:ab:88:
         47:26:7b:04:49:3d:9b:f1:1c:e1:c2:b6:e8:1c:f5:f1:b7:2b:
         f4:d2:5c:ba:8f:90:45:2a:07:c0:eb:b0:af:5e:4d:0e:e4:c1:
         3e:1e:36:77:d2:70:49:f7:bb:cf:bb:36:6f:00:46:c5:41:42:
         f8:01:d8:77:90:1b:93:79:4f:c5:e1:5e:b3:69:d1:7d:7f:55:
         f8:a2:77:f2:44:b0:2d:39:4b:9b:70:cc:32:bd:22:88:15:02:
         5d:7b:d4:3e:cc:f4:9e:d4:e9:a2:f2:ef:84:01:58:05:f8:93:
         1b:ff:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:50 2025 by rpki-client