Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/26746238-b6c3-36e1-aa57-16ed62ad27c8.roa
File:                     26746238-b6c3-36e1-aa57-16ed62ad27c8.roa (raw, json)
Hash identifier:          dt5o6h8uPau5eXRfVg3z5uwiDbwZegRaRPnRRiT5hAA=
Subject key identifier:   5C:B3:00:D9:8A:C4:C6:20:2F:F9:4D:6E:9E:F8:A6:38:FB:98:06:7A
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A58CB0185742C77F57FB7DE00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/26746238-b6c3-36e1-aa57-16ed62ad27c8.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     36007
IP address blocks:        43.231.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:01:85:74:2c:77:f5:7f:b7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=cfb41fa6-6a6f-4b6d-a3f8-18313af05b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:4e:b1:3a:e0:ea:0a:1c:6b:50:06:68:60:
                    07:2f:88:e3:1d:54:02:ae:9e:a7:d0:99:35:c4:19:
                    c8:c6:fa:16:01:45:ce:d2:f8:9d:0f:dc:90:40:33:
                    6e:fc:e9:f9:df:a0:89:1e:db:ae:c7:c6:9e:c0:12:
                    74:f0:c0:49:20:d7:50:17:62:db:98:ed:42:03:fb:
                    b2:38:64:5d:b0:0f:a9:21:65:01:65:f7:36:cc:1c:
                    22:57:99:d7:bc:ce:44:51:ef:7b:b2:4b:9c:e7:9b:
                    88:52:34:dd:b1:37:35:8f:d1:43:ea:46:db:4e:08:
                    84:e6:47:61:46:69:b4:08:38:fd:aa:79:cb:0e:e0:
                    47:42:cc:3b:01:c5:cd:d6:a4:7d:ad:1f:dd:8c:c7:
                    76:39:a4:59:0b:9e:c4:30:3f:31:35:58:61:21:dc:
                    c9:a6:df:67:b5:b5:2a:3a:e6:d8:dc:98:e2:4e:00:
                    1a:b3:b0:ea:08:ee:51:12:8b:82:a0:d0:0e:c2:ef:
                    53:d8:3e:56:9d:6f:c9:7f:76:2b:8a:e7:f3:e0:3d:
                    6f:16:76:46:4f:a2:ab:87:df:ac:38:bb:d9:22:b1:
                    13:d1:88:fe:ea:3c:e9:dc:5c:d9:87:ae:d5:3a:32:
                    c0:05:bf:19:52:ac:0a:d1:f9:3f:9f:8f:b8:75:f8:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:00:D9:8A:C4:C6:20:2F:F9:4D:6E:9E:F8:A6:38:FB:98:06:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/26746238-b6c3-36e1-aa57-16ed62ad27c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:85:8a:79:d4:1b:d0:08:ca:81:aa:a3:0e:ce:9e:7d:51:92:
         9b:41:91:a5:22:a6:01:1c:ec:74:07:ef:29:5a:e5:f8:b1:40:
         2c:bc:15:db:49:10:57:32:ad:c3:54:78:95:f0:aa:e9:ae:ae:
         cd:b1:19:90:fe:77:a5:28:02:54:6d:be:a2:3e:e0:8c:bc:a6:
         bb:02:d1:a5:7b:45:81:a5:e7:4b:1d:84:ea:29:da:c8:54:89:
         a1:1b:bf:23:05:54:19:7f:24:09:d5:79:a7:24:82:2d:54:9a:
         9b:1c:99:0c:8c:b5:b0:6a:7a:5c:ff:1d:53:db:0e:0d:02:dc:
         22:0a:ba:b1:e9:46:f2:9d:4b:d3:1c:3d:f0:a1:15:e0:a2:bc:
         01:59:c4:20:60:29:2a:a6:74:3a:0d:e2:43:c8:2e:73:6c:3f:
         a6:ea:12:f0:c3:58:86:d2:d3:bf:23:a6:84:f4:1f:50:be:95:
         c9:b7:e9:35:20:8e:0f:ee:d4:74:9a:e8:9b:20:15:a5:33:9b:
         10:b8:21:3e:cf:9a:19:21:90:ae:73:d2:2d:36:5b:1d:35:1d:
         f0:c2:43:b5:e3:49:20:ff:2f:fe:46:65:f8:a7:57:ce:22:86:
         23:94:45:a0:76:b0:eb:5c:3b:5b:b2:fd:46:14:76:9c:b3:5d:
         1b:08:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:05:05 2025 by rpki-client