Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/696d539a-82f5-391f-ac16-9de334c939cd.roa
File:                     696d539a-82f5-391f-ac16-9de334c939cd.roa (raw, json)
Hash identifier:          zxZHQiZ6/ShOb8BcjDkS/zriVPoZBB07SXpZ7u1NmwA=
Subject key identifier:   92:5F:D5:F1:1D:7B:23:A5:B2:90:24:62:6D:79:BD:3F:0E:3D:C9:D0
Certificate issuer:       /CN=27f24f9e-ef46-4828-9575-be547ae0263d
Certificate serial:       010D0C9F4328584AF5214E85B5D6F0A79CAB7440
Authority key identifier: 5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/696d539a-82f5-391f-ac16-9de334c939cd.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     46475
IP address blocks:        23.131.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:4e:85:b5:d6:f0:a7:9c:ab:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f24f9e-ef46-4828-9575-be547ae0263d
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=53d12a02-a253-4bd0-8996-289a2f4327e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:d7:27:50:01:33:ff:12:83:7e:dd:0c:95:
                    68:94:44:c6:06:de:24:49:be:b2:95:88:38:70:a3:
                    5a:59:09:9d:95:21:69:4b:9f:91:7f:ef:f7:ed:1b:
                    7b:71:f0:dc:65:eb:f0:d4:db:27:7c:5f:38:a6:a5:
                    9a:31:37:68:54:0a:3c:32:99:d3:18:14:1b:60:46:
                    3e:9e:ae:a4:75:a7:82:43:85:0a:44:87:93:10:15:
                    5d:33:5a:13:a9:a7:c0:0e:3d:26:55:f9:9b:89:af:
                    9b:06:fe:0e:2d:6a:5e:80:c9:51:9e:a4:80:f8:3a:
                    7f:90:85:19:4f:eb:0c:93:89:2e:37:c2:c4:bd:6f:
                    11:8b:04:41:70:b3:2e:8f:6d:82:5b:5e:81:d6:51:
                    1d:78:b3:77:26:49:c2:eb:09:80:fb:54:09:63:05:
                    35:37:ed:da:7a:02:07:c8:f9:f9:3c:9a:4d:e0:f6:
                    0d:26:84:f1:96:00:cc:10:1f:49:a8:72:3d:dd:8e:
                    bb:d9:ed:25:34:53:3a:cd:31:f3:da:8a:fc:6e:d7:
                    7f:ee:a0:31:8a:1b:e9:1a:97:39:44:9f:8f:b7:38:
                    a3:5c:f2:50:bd:b8:42:d3:f7:bb:8f:49:8c:88:a5:
                    ce:e7:e2:87:c2:1d:a3:3b:01:32:b9:37:cc:ca:1d:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:D5:F1:1D:7B:23:A5:B2:90:24:62:6D:79:BD:3F:0E:3D:C9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/696d539a-82f5-391f-ac16-9de334c939cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:23:a7:03:51:10:70:ba:9c:7d:93:b1:8e:6f:cf:44:79:94:
         58:c5:e6:56:e1:98:24:c5:e7:ad:d5:71:d8:21:67:4d:ab:7a:
         5c:99:db:bf:70:f8:d9:a7:79:01:17:33:0d:b9:8e:ac:86:27:
         ce:f8:7f:b1:73:33:7e:47:63:a0:33:e6:ad:b8:e3:51:cb:02:
         ef:bc:b3:cd:fe:1b:75:9e:2d:07:00:21:56:83:2f:56:ec:5e:
         12:b8:d6:00:95:5b:ae:00:0c:e3:b1:c4:bd:ee:41:b7:a8:56:
         59:84:fb:63:3f:17:77:a0:07:c1:9c:4d:e1:59:8a:3e:a6:c4:
         31:ae:71:98:17:d4:ed:cf:0f:c8:6b:d7:cb:8d:43:b1:65:0e:
         44:78:d3:11:a5:48:62:48:90:12:66:85:79:90:d6:09:ad:ef:
         64:2f:5e:6c:13:a6:24:13:d1:14:de:ed:c7:f1:ce:65:a0:a4:
         92:a6:d0:f1:e6:f9:b8:af:fb:0a:ea:31:af:4a:de:26:a2:34:
         56:47:69:5b:71:33:be:c7:4e:61:34:84:0b:04:e2:81:32:6e:
         c9:ee:09:72:74:af:fa:b3:fd:22:49:3a:69:aa:e0:67:5b:f6:
         0e:a9:ef:a3:50:26:86:25:b1:d4:42:bf:ce:d2:c9:cc:87:bd:
         d7:77:5e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:59:36 2025 by rpki-client