Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/30320625-d116-3559-87e5-180403858f57.roa
File:                     30320625-d116-3559-87e5-180403858f57.roa (raw, json)
Hash identifier:          nkTUfcUKcimaa+q+mFmEeAPtslUetoB+VTbNFpXG7uE=
Subject key identifier:   52:1A:EC:D3:E4:07:CC:8F:36:2A:51:ED:2C:6B:88:BC:CB:59:5F:F4
Certificate issuer:       /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial:       010D0C9F4328584A25257087DA10D23E625A5B00
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/30320625-d116-3559-87e5-180403858f57.roa
Signing time:             Tue 10 Jun 2025 13:01:03 +0000
ROA not before:           Tue 10 Jun 2025 13:01:03 +0000
ROA not after:            Mon 08 Sep 2025 13:01:03 +0000
asID:                     401541
IP address blocks:        23.131.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:25:70:87:da:10:d2:3e:62:5a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
        Validity
            Not Before: Jun 10 13:01:03 2025 GMT
            Not After : Sep  8 13:01:03 2025 GMT
        Subject: CN=2427f248-5fa5-41b7-b78a-008c0c132174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:dc:b2:55:5e:39:e9:fa:07:12:4b:49:35:
                    ee:da:31:ec:15:70:2f:c7:df:87:f1:97:6c:1e:d8:
                    f9:ff:be:fa:d6:4f:38:cc:a4:e0:2b:f2:00:a4:3a:
                    e5:7c:79:ce:73:4c:49:21:f8:ad:e7:ed:87:f4:64:
                    cf:b4:bf:fc:f7:9d:da:fb:50:f0:88:e2:d5:64:b5:
                    8a:57:ff:f2:b5:0a:01:08:f5:08:8f:a7:1e:86:11:
                    9c:fd:b4:06:11:b4:57:1e:17:0e:c2:f8:c4:b5:76:
                    4e:9b:be:80:bb:f0:36:f5:43:fe:0d:b3:69:ae:78:
                    11:12:4e:33:ce:e0:53:d9:55:f4:2c:ac:aa:2f:7c:
                    38:d8:dd:1b:82:ac:29:52:40:08:66:fc:99:d6:86:
                    08:0e:4f:00:c0:57:bd:dd:28:49:1a:7f:f5:83:a0:
                    0b:6c:e9:26:c4:4a:2b:6f:1f:ef:31:55:e6:04:97:
                    a9:31:49:05:e7:30:a8:ae:46:2a:64:22:de:94:b5:
                    cf:2c:a3:cc:03:37:b8:7b:6a:cb:b1:bd:97:7d:67:
                    13:e1:c5:33:48:55:c7:fd:72:5b:c1:f5:a4:d0:aa:
                    0f:14:3d:9b:a2:05:2f:f5:c8:84:14:f3:15:6a:a0:
                    36:38:86:40:af:1d:3f:b2:39:ef:04:94:26:69:00:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1A:EC:D3:E4:07:CC:8F:36:2A:51:ED:2C:6B:88:BC:CB:59:5F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/30320625-d116-3559-87e5-180403858f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:c8:95:cf:ca:db:24:ba:56:13:1b:c5:30:e0:d0:db:2e:
         af:44:d2:31:f2:a1:2b:b3:cc:f3:fe:88:04:7c:af:92:71:e1:
         42:e9:6a:b0:a6:4b:06:cd:70:9a:34:bd:7b:e0:31:9a:31:85:
         64:23:fa:d2:7d:69:03:02:63:73:64:9b:84:80:19:b4:ae:21:
         09:f3:30:ad:97:a3:b6:cf:ff:38:4d:c8:28:a5:1a:af:2d:10:
         ea:f5:79:cf:f7:91:3f:51:df:c0:f2:6f:67:0d:5e:f3:0a:c0:
         fb:d6:27:7b:a5:cc:5f:7a:76:04:ea:ad:19:e0:d0:dd:68:06:
         6f:84:20:05:7f:b0:1d:57:b7:de:43:23:72:46:64:53:19:fd:
         0b:d1:fe:37:9f:58:71:ce:b9:64:b8:a7:b9:e2:76:58:a7:75:
         bd:1a:41:f0:22:d5:92:8a:ff:1e:b3:7c:54:ba:13:15:26:3d:
         5f:1b:7d:ca:b9:d5:23:5d:2b:31:14:d9:e0:98:dd:29:49:bf:
         6e:9b:f6:0e:ef:d9:0a:2d:04:b7:4c:6a:1d:44:6f:97:9c:f1:
         9c:ca:ca:8e:8a:78:47:86:cd:4e:f5:1e:38:94:9a:56:26:23:
         31:26:79:42:0a:18:3c:0a:7c:e5:56:f4:ff:a6:db:52:07:4d:
         06:4d:58:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:47:42 2025 by rpki-client