Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa
File:                     c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa (raw, json)
Hash identifier:          AtF9IomVsp7m5QsDRynMvPojLMxuTsf1ZInTBv/cqrM=
Subject key identifier:   C3:55:23:5A:74:00:DF:F0:C1:C7:ED:52:56:94:5D:8B:36:A0:66:0D
Certificate issuer:       /CN=756004e4-ddca-45b3-bf76-89761c8369fd
Certificate serial:       010D0C9F4328584AC87679190C712E8CE3498000
Authority key identifier: 89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     401052
IP address blocks:        23.187.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:79:19:0c:71:2e:8c:e3:49:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756004e4-ddca-45b3-bf76-89761c8369fd
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=ac346b0d-0905-407e-97b2-9c46535b54cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:7f:39:8e:55:3b:b2:1b:70:17:17:d9:df:
                    74:f6:b9:2b:9b:46:f4:4e:1a:33:67:9d:15:da:c4:
                    4d:0f:4f:e5:a6:c4:f4:c6:ba:54:8f:90:23:43:49:
                    42:16:1c:92:88:31:a3:a6:a1:d0:d1:9b:f3:e0:87:
                    e7:4b:7c:83:d6:c1:46:25:11:97:56:7b:82:95:9c:
                    03:e8:68:ac:78:ec:e6:42:b0:1e:cf:b3:c6:b1:7c:
                    ea:b6:d9:5f:b8:6a:5d:e5:8c:54:4d:d5:07:a8:17:
                    1a:3c:11:43:e1:d4:94:d6:3a:bb:cb:27:f3:7e:78:
                    d4:c7:83:36:9d:ec:ec:28:dd:a0:38:f7:6c:6e:77:
                    3b:1d:6d:dc:29:a7:82:07:40:ba:5c:bd:bf:fb:da:
                    15:f3:28:85:18:33:78:b5:25:fd:a9:93:2c:ba:80:
                    18:fc:8b:01:44:d0:2f:50:65:08:04:99:ec:ef:a6:
                    fd:bb:26:5c:67:cc:eb:f4:c0:88:42:47:d2:25:a6:
                    72:64:54:64:4a:41:32:04:0c:27:c4:7e:44:fc:2a:
                    a6:6a:ed:bb:9a:e1:40:a6:f4:20:7f:60:83:fd:84:
                    45:9e:a7:e2:31:0d:dc:38:71:44:09:8a:11:29:fe:
                    ea:35:7f:55:e7:44:3f:8c:4f:56:e8:d6:af:97:62:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:23:5A:74:00:DF:F0:C1:C7:ED:52:56:94:5D:8B:36:A0:66:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl

            X509v3 Authority Key Identifier:
                keyid:89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:d5:6a:93:02:76:e8:c1:9c:db:fb:47:3e:4a:b3:74:5d:
         19:ac:d1:fa:11:bb:b6:96:bf:d2:26:16:84:73:b2:02:5d:f6:
         a8:94:9f:16:f0:ef:58:46:23:78:0f:43:05:4b:c1:dd:3c:7d:
         d3:80:33:56:5b:c8:2b:fc:3d:9e:38:1e:eb:59:2d:eb:80:9a:
         df:3f:39:3d:be:01:b9:95:b9:f2:57:41:d3:df:93:1b:00:ba:
         81:87:22:01:41:1d:1c:9e:81:17:d3:cd:f6:a3:7e:1c:7d:ce:
         e7:07:e4:21:f9:1c:50:f7:4b:4c:c9:c6:66:f9:25:5b:ed:bf:
         17:78:56:49:0c:54:31:a2:46:df:54:24:c1:b9:bc:38:c2:71:
         4f:54:a6:13:25:ca:20:24:8b:c7:45:6d:a5:48:37:c3:61:6e:
         92:27:10:75:89:6c:02:48:f7:9b:1d:27:b6:7f:34:5e:b3:dd:
         3e:8c:0d:94:3d:51:55:eb:be:d2:f3:97:a2:93:a0:91:14:36:
         2a:29:f0:82:8f:52:19:70:09:e9:0f:f1:9f:d0:82:18:f6:69:
         e0:d9:5c:7c:74:79:69:4a:f3:2b:d7:47:8f:18:80:2d:3b:5d:
         81:34:21:08:5a:af:c3:ef:ad:17:0c:17:75:eb:fb:da:66:3a:
         37:3b:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:22 2025 by rpki-client