Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa
File:                     9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (raw, json)
Hash identifier:          1iey107Dp9F6lIBHh7Zvcf8u0eHcrblTN0sI4+Gic/8=
Subject key identifier:   8F:EE:E2:6B:E2:6E:59:6B:97:53:D0:41:11:8B:73:93:9F:45:04:7D
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F4328584AA42B832B4B9B29F9E5493C00
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     948
IP address blocks:        23.152.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:83:2b:4b:9b:29:f9:e5:49:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=d48d56bd-a46b-4c5f-828d-1fb2bd3f5a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:a0:8e:61:86:98:3a:c3:ef:1b:a5:32:3d:
                    c1:2c:f2:78:68:94:87:dc:a3:40:a4:df:88:ff:ed:
                    07:8d:fb:1c:a4:58:a6:8a:42:6e:fa:aa:fa:f1:75:
                    8a:d2:19:49:2c:c2:f4:79:b6:41:9e:52:2f:1f:1e:
                    93:ce:4b:c9:6e:0e:e3:44:40:ff:37:cb:b1:b9:e3:
                    24:46:7a:f8:c3:d1:f0:71:40:c4:45:b4:85:9a:ee:
                    d9:05:48:6e:ae:cc:cd:df:d3:ed:d9:27:c8:ad:1d:
                    6c:15:89:7d:cf:91:17:93:0e:81:da:e4:d5:ce:45:
                    ed:5e:8e:49:7b:59:fd:08:23:39:5f:b4:71:42:d6:
                    1a:3d:75:43:cf:ce:fb:38:64:24:a9:6e:d0:ab:66:
                    b3:8f:1c:b9:c6:f4:b8:ab:b6:e5:05:f8:9d:34:a8:
                    55:9a:c9:d7:74:da:bd:d2:77:96:c9:2f:d8:34:c5:
                    85:66:76:e0:31:b9:2a:63:4f:f4:74:aa:85:66:d5:
                    c7:fe:36:ab:b7:c8:31:b3:e4:70:5a:4f:0e:9b:e8:
                    45:45:a2:bc:61:42:67:cd:d1:5d:3b:4f:60:80:c3:
                    61:04:46:d1:10:94:ac:4d:4e:b4:36:47:0e:da:77:
                    ee:7e:69:73:b5:c1:02:86:13:45:40:0a:0a:52:9b:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EE:E2:6B:E2:6E:59:6B:97:53:D0:41:11:8B:73:93:9F:45:04:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:be:68:2e:ba:88:ce:8b:f2:14:11:36:77:50:1e:ff:69:
         b7:c2:a9:e7:e7:fd:28:3b:37:b4:6b:92:a7:46:29:ff:0b:4e:
         be:43:d2:88:b2:f0:30:b7:db:c9:dc:04:48:fc:ce:30:da:53:
         ac:57:d5:04:25:de:bf:9b:85:85:cd:8f:2b:cc:ae:c4:3b:38:
         de:6f:6f:d6:da:9e:38:3b:22:a2:4f:5a:34:44:51:c0:a1:e5:
         e4:b6:21:c8:8f:cb:62:c7:2f:cc:26:d1:1b:f7:36:f3:67:0c:
         d6:12:4f:6d:c9:05:99:0e:e5:b4:46:54:bb:7f:a6:52:ca:ed:
         e0:47:1f:52:be:28:b2:13:62:a3:79:e3:cb:f4:33:71:be:fa:
         1f:7b:bf:d5:75:68:63:15:bb:34:a5:f4:cb:43:9e:53:50:ff:
         d5:46:16:4e:72:97:32:8c:6b:5b:5e:3a:7d:78:e6:e4:c3:ba:
         86:60:ee:8a:2c:26:88:53:0d:e5:71:63:96:71:f9:53:8d:16:
         75:49:3d:2f:70:4e:7f:99:b8:b8:61:fc:49:bb:11:d2:be:4f:
         c7:4e:04:bc:da:05:72:99:9e:ec:d6:33:53:91:09:2e:d4:1c:
         89:9a:bf:22:e3:28:c6:f0:29:f3:b4:b1:15:c7:ce:e6:2b:0b:
         2c:85:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:45 2025 by rpki-client