Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/4ef84e97-b572-3840-86c2-3a5da22197e3.roa
File:                     4ef84e97-b572-3840-86c2-3a5da22197e3.roa (raw, json)
Hash identifier:          4agpj2fZ1maGQDs+6WWxHzAdTChGxmG6dm5QhuuQYAg=
Subject key identifier:   17:04:E7:64:0A:64:E4:9F:7E:45:9A:E9:3C:D1:5C:57:CA:E3:26:98
Certificate issuer:       /CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
Certificate serial:       010D0C9F4328584AA0DE58C5C1F0A44626C13B00
Authority key identifier: 41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/4ef84e97-b572-3840-86c2-3a5da22197e3.roa
Signing time:             Thu 24 Jul 2025 20:38:06 +0000
ROA not before:           Thu 24 Jul 2025 20:38:06 +0000
ROA not after:            Wed 22 Oct 2025 20:38:06 +0000
asID:                     36352
IP address blocks:        23.92.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a0:de:58:c5:c1:f0:a4:46:26:c1:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
        Validity
            Not Before: Jul 24 20:38:06 2025 GMT
            Not After : Oct 22 20:38:06 2025 GMT
        Subject: CN=0e259965-8ebd-4768-ae45-7ba1aed3cd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:f7:26:50:f7:ba:47:a2:99:8c:7a:d3:59:
                    d0:ca:3c:cf:c0:f8:07:de:eb:a2:6f:62:25:d9:a4:
                    80:2c:61:f4:ca:6a:4f:89:88:95:13:78:ad:ae:4e:
                    cb:f0:38:50:bc:3e:32:6e:dd:1d:4c:4d:32:02:c2:
                    79:3e:53:50:cd:34:2e:2e:45:6c:4b:11:52:61:7c:
                    be:f8:82:d2:85:b1:20:ff:9e:1a:08:fc:e1:e0:e7:
                    e9:3e:81:c5:a0:6e:1e:ed:57:ba:b9:f4:88:e3:36:
                    20:ce:3d:02:ee:dd:71:c2:91:5f:bf:b7:00:f9:ae:
                    26:7b:f7:08:f5:5f:18:3b:44:48:ec:df:9d:9d:82:
                    62:2c:96:79:91:56:6c:bd:a0:72:90:cd:c2:c6:c9:
                    aa:f5:09:eb:16:0a:4f:7c:57:e8:5f:7f:9c:92:2b:
                    81:df:b5:45:8d:24:39:9f:a8:60:26:78:72:6c:7d:
                    e3:3f:4e:c2:78:e3:84:f0:18:40:d0:d8:cc:e4:bd:
                    7d:18:56:c8:48:3e:34:40:f7:e8:a8:b2:41:10:20:
                    73:2d:0b:52:27:59:ea:02:c0:64:9b:7e:3b:c1:1a:
                    35:24:9f:af:34:91:22:5a:02:c9:9e:11:df:5a:99:
                    30:44:7e:3b:4d:56:a1:b4:4c:b4:8d:21:91:fa:a9:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:E7:64:0A:64:E4:9F:7E:45:9A:E9:3C:D1:5C:57:CA:E3:26:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/4ef84e97-b572-3840-86c2-3a5da22197e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl

            X509v3 Authority Key Identifier:
                keyid:41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:7d:3d:0b:bc:7f:87:29:51:5a:1e:dc:88:77:e2:a3:b1:
         97:5f:77:4e:6f:d8:bd:49:aa:15:3c:e0:3a:2c:68:96:0c:f0:
         4c:f0:98:12:67:89:39:51:3b:ec:fb:91:f6:8e:64:a8:26:b3:
         74:24:8c:d9:f4:5c:b7:4f:f7:8b:a5:17:b8:d4:be:42:58:3a:
         9f:ea:70:69:4e:89:0d:e5:9d:6c:fb:7e:b8:b3:c5:f1:1e:09:
         b5:4f:52:58:85:f3:cd:5f:15:4f:67:f7:55:6d:0e:f3:c5:5d:
         59:c8:e4:90:59:80:9b:a1:8d:13:07:06:41:54:58:45:73:e6:
         6d:1f:33:50:19:b7:6d:39:bd:fb:31:d9:34:ac:d2:82:e6:fb:
         0c:d7:33:9e:4f:87:94:58:31:77:38:49:b0:66:b7:7f:96:97:
         3f:4b:51:de:fa:9a:02:5f:b2:0c:e1:cf:14:50:09:3c:59:2d:
         13:c4:eb:ac:8f:fe:ce:89:27:0f:61:d5:ea:81:17:6e:bb:30:
         1f:a5:56:36:be:12:fa:9a:22:a9:1b:80:4d:46:c1:0f:68:27:
         aa:f3:b9:0e:44:f7:46:88:50:01:1b:8e:6b:d6:4c:01:26:20:
         1e:78:da:73:e3:8b:c1:0c:89:65:8d:86:b1:52:c5:3f:60:46:
         e5:1b:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:30 2025 by rpki-client