Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa
File:                     a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa (raw, json)
Hash identifier:          5a339lZiHb4xA28g5KVQ8KknlEIaGVXdzBGvNuvxHfQ=
Subject key identifier:   42:E5:50:72:E7:20:3B:AD:92:F6:DE:34:0B:1C:54:98:0C:7C:85:96
Certificate issuer:       /CN=457522b0-cf44-4757-ac16-6215c2516e52
Certificate serial:       010D0C9F4328584ABABC2D553522D2D6FA02FE20
Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa
Signing time:             Sun 03 Aug 2025 03:00:16 +0000
ROA not before:           Sun 03 Aug 2025 03:00:16 +0000
ROA not after:            Sat 01 Nov 2025 03:00:16 +0000
asID:                     401890
IP address blocks:        23.143.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:bc:2d:55:35:22:d2:d6:fa:02:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52
        Validity
            Not Before: Aug  3 03:00:16 2025 GMT
            Not After : Nov  1 03:00:16 2025 GMT
        Subject: CN=6672fb3f-c889-40b5-a6a8-d3687383f686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:13:f3:30:46:7c:00:b8:e0:61:a3:94:a6:
                    b8:64:f2:16:a2:55:3b:17:36:92:1b:b5:05:24:4e:
                    32:ca:a8:43:14:0b:ea:47:49:00:f6:1a:d2:ee:37:
                    d2:21:4b:f2:dd:9d:f1:14:04:9f:55:3d:55:a7:62:
                    8a:41:35:cb:69:2d:38:aa:2e:67:71:7a:20:39:5b:
                    b3:ce:18:6d:6e:e0:b2:e3:9c:ce:cd:aa:69:15:7b:
                    9a:5b:7a:73:8b:36:26:4c:db:0e:de:39:26:60:00:
                    19:e6:65:1d:9c:c7:6d:43:ce:51:c9:b6:24:ac:95:
                    2f:93:4c:bf:5c:ef:bd:df:36:25:0b:57:7e:9e:f4:
                    bd:25:e6:29:f5:54:22:8a:de:09:4e:f3:a1:8c:53:
                    7b:2b:9a:1b:d7:1f:7e:77:67:d5:dc:4b:87:df:88:
                    e6:9f:cf:a7:0b:5a:16:a6:c2:61:ca:3d:19:39:cf:
                    b9:88:08:a0:f3:92:a1:4c:25:ab:0e:5c:2e:4e:68:
                    1d:e0:d6:bc:1d:1b:1c:8c:6e:07:a6:bb:05:87:e8:
                    9c:12:b1:b2:2c:9f:c2:3f:5c:cc:03:00:25:6c:85:
                    bf:41:b4:b3:ab:21:a0:f7:ba:fd:52:36:9a:ac:b5:
                    d8:e9:b0:bc:66:2f:c9:81:95:d5:97:2c:f0:ad:75:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E5:50:72:E7:20:3B:AD:92:F6:DE:34:0B:1C:54:98:0C:7C:85:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl

            X509v3 Authority Key Identifier:
                keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:97:57:31:96:4e:45:22:80:60:f8:96:41:5b:aa:59:9b:
         d5:24:19:d6:a6:ba:32:8a:f9:6f:a1:4d:c3:54:04:47:a2:c2:
         83:24:c0:eb:da:a5:86:71:da:5e:74:da:dd:94:84:22:cc:da:
         2c:91:e3:cd:50:96:15:a3:80:35:60:1a:2e:d5:ad:24:91:6f:
         db:a5:b4:db:85:36:6f:01:6e:6e:e7:98:52:c7:79:44:f0:d7:
         b0:43:e3:e8:f8:d5:cf:8f:bc:d9:ff:16:05:8d:3b:ec:d0:7b:
         5b:5e:c0:8b:1a:2b:72:35:70:b9:dc:d9:4f:51:4b:1d:95:c9:
         e0:8a:f5:d3:64:3b:9f:2f:b0:78:2b:0c:76:8a:41:68:e6:42:
         f7:81:4c:a3:e2:06:30:47:86:f0:40:e1:71:65:02:32:12:31:
         84:06:d9:41:0b:6f:8d:3f:13:01:ba:da:55:ac:96:70:fe:cb:
         1f:fd:e3:34:52:dd:ca:27:24:b2:9b:a8:2f:39:e1:59:85:d8:
         4c:14:87:9c:90:e2:98:d8:d1:d7:9a:7a:8d:20:5a:e2:3a:9f:
         45:7e:9d:24:4e:99:a0:30:7a:11:77:9e:6a:56:a7:5d:73:75:
         11:ac:66:d1:35:02:46:d3:93:f3:4a:1e:e4:7e:5e:4a:d2:d9:
         07:a4:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:02 2025 by rpki-client