Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa
File:                     0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa (raw, json)
Hash identifier:          E0/S56mg0Lq60Pse5/YXySo4oRHNbq8dbFHApy2pdeQ=
Subject key identifier:   15:EB:11:DF:E9:6A:49:52:6D:C0:55:C0:0E:00:9C:CB:48:13:DA:C6
Certificate issuer:       /CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
Certificate serial:       010D0C9F4328584A90E93A401364CB2DCDFDFF80
Authority key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa
Signing time:             Sat 19 Jul 2025 03:27:05 +0000
ROA not before:           Sat 19 Jul 2025 03:27:05 +0000
ROA not after:            Fri 17 Oct 2025 03:27:05 +0000
asID:                     401561
IP address blocks:        23.130.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:e9:3a:40:13:64:cb:2d:cd:fd:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
        Validity
            Not Before: Jul 19 03:27:05 2025 GMT
            Not After : Oct 17 03:27:05 2025 GMT
        Subject: CN=b9f9ceb8-24bc-4bc4-ae8c-ad3487362143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:45:8f:90:85:34:3a:5a:62:33:d0:fd:43:
                    80:46:53:75:ac:43:e1:ac:0f:c5:b1:f1:2a:b2:36:
                    90:8e:45:d3:19:88:9b:85:70:64:1f:90:a2:be:21:
                    7d:58:ae:94:58:5c:5f:37:94:9f:35:bc:62:e5:0c:
                    a6:98:ad:22:97:ca:9f:d2:03:90:6b:42:b0:46:16:
                    88:41:81:37:b1:54:cb:bf:d2:29:a8:cf:f8:8d:ed:
                    6d:cb:35:ca:59:2f:8e:14:f9:84:4a:37:eb:a6:8c:
                    0b:99:d6:d3:2b:f2:4f:16:b2:ff:cf:17:41:75:d4:
                    1b:e7:39:c4:51:43:70:fb:a9:1a:8d:ca:2d:88:09:
                    80:ee:4b:65:1e:8a:80:0b:65:c9:61:10:d0:14:bd:
                    a7:e2:b0:99:d9:75:68:d3:7b:7c:0f:e2:b7:70:09:
                    53:a0:04:c3:78:c4:53:04:34:c1:65:e6:21:83:1b:
                    bb:f9:93:af:29:d1:69:e9:e3:9d:7d:52:6c:ef:1e:
                    c5:66:7b:49:6f:01:c6:f3:a3:a7:63:d2:22:2f:df:
                    94:f4:3a:c7:58:d3:86:d7:6c:76:6b:22:5d:16:44:
                    6d:53:93:3b:f7:ec:c2:73:15:10:19:c4:c4:e5:98:
                    7d:29:d7:cd:3a:1d:70:dd:67:f8:5f:53:9c:4e:ab:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:11:DF:E9:6A:49:52:6D:C0:55:C0:0E:00:9C:CB:48:13:DA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:93:05:d4:b6:81:6e:8c:af:c8:84:18:22:62:80:f2:c4:
         52:74:21:bd:4d:40:4e:ad:7b:c1:2d:5b:2d:8f:31:41:8e:1c:
         c1:cc:09:46:00:92:88:a7:db:43:37:d4:58:3f:3e:5f:5b:50:
         00:c1:fe:8f:58:be:6c:e2:4c:f5:67:ab:1c:6d:c5:3f:31:ee:
         b2:93:91:67:17:33:1b:5b:58:2d:12:2d:e3:69:5a:34:31:aa:
         58:0c:a5:ee:2e:5f:52:f7:cf:89:66:c9:bc:a4:1a:e9:b6:66:
         86:99:2c:8a:b4:e6:b4:09:bf:17:8e:67:f2:64:3e:78:16:52:
         e0:60:45:a5:f3:e7:d1:39:3d:28:2d:f3:1f:6e:f7:b0:5d:36:
         c0:c6:b8:09:1c:34:90:3c:6f:d8:95:85:6d:91:97:11:d5:69:
         6e:dd:49:5c:58:96:e6:05:98:de:f8:e0:31:59:51:c7:19:3b:
         d5:42:43:34:ca:04:fe:f2:58:93:12:5b:80:cf:1e:a9:be:ad:
         5b:33:04:8c:95:f4:9c:a0:8d:b0:82:c8:2e:58:fd:0f:00:31:
         e9:e9:a3:b7:0b:f2:f1:e8:b4:b9:76:47:ca:11:a6:53:d5:46:
         57:04:84:4b:3b:c5:51:e3:e6:ba:b3:6a:0a:c0:4d:c0:cb:05:
         fe:9c:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:31 2025 by rpki-client