Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa
File:                     467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa (raw, json)
Hash identifier:          f7TjXZnwcg/f0juIaB60NWrYLrECzFlK9wWPb8L8bvc=
Subject key identifier:   FE:99:4D:09:1E:56:A0:9F:57:E3:E2:1E:E6:78:64:6A:66:1B:BE:A6
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A5765CDE115643C91492BED40
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     36007
IP address blocks:        43.231.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cd:e1:15:64:3c:91:49:2b:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=8da2af93-696e-4a28-b24b-65c119fead0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:d0:5c:92:0e:55:2a:c5:f4:01:15:5d:ee:
                    05:16:5d:fb:4d:96:4e:78:a7:7d:28:3e:1c:25:0c:
                    c4:97:91:96:56:5d:1d:6b:79:36:7f:ec:5c:78:e4:
                    6b:e9:e0:3c:07:5f:c9:27:a9:26:0b:b8:1b:a8:02:
                    6a:46:ac:e9:ca:09:57:20:ea:c0:22:ce:36:ec:c5:
                    2a:7c:9b:3f:3a:d3:49:31:a0:79:6a:0b:13:8a:a1:
                    83:e5:c8:a9:4a:49:07:7c:75:d2:06:1c:ac:64:99:
                    b9:80:d9:25:f3:67:8e:63:44:68:ea:ff:d8:93:86:
                    fc:e5:97:df:a1:82:fe:86:0e:7d:b5:ad:e3:e7:4e:
                    1a:d7:4a:22:0f:de:4b:00:78:51:af:03:1d:49:aa:
                    80:41:bc:76:31:c5:e9:c5:65:17:5a:fa:73:13:74:
                    38:88:e8:fa:d8:95:32:69:83:99:75:88:83:c1:d3:
                    5f:7d:26:be:45:6b:0d:10:14:21:c1:48:84:1e:cf:
                    76:b4:6b:4e:01:b1:ce:94:3e:93:14:e6:fa:17:25:
                    a8:a7:d8:80:9d:87:a2:04:72:05:0c:8b:9d:a4:1e:
                    30:65:a6:02:5f:ff:83:05:e5:93:34:5b:39:d8:3b:
                    25:99:1c:97:b5:dd:21:d9:ff:17:6a:3c:70:8b:aa:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:99:4D:09:1E:56:A0:9F:57:E3:E2:1E:E6:78:64:6A:66:1B:BE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:05:fa:d0:f1:df:fe:86:d0:2e:a5:95:c3:34:6c:54:63:2c:
         54:92:85:04:fd:29:4d:67:96:f2:6b:5c:95:4b:35:2d:2f:f0:
         52:fd:9a:69:db:72:82:02:2a:b9:d0:0d:b1:63:6b:f3:ef:8c:
         d5:0a:28:57:c1:9d:63:20:eb:df:33:fe:ec:75:52:be:22:6b:
         9b:6c:52:4c:b5:3d:5d:a5:2a:96:86:ad:1e:f4:90:ff:a7:aa:
         64:74:b2:a2:f2:d0:90:bf:87:9e:d2:dd:e6:c8:88:0c:ab:23:
         32:0c:49:67:4d:3f:b5:69:19:b3:e6:7a:87:ab:0e:2d:98:bd:
         1e:c2:e6:3a:ac:ad:82:33:08:46:a0:0a:24:ae:db:30:47:6d:
         26:6b:cb:bb:47:09:ad:81:cf:34:57:f0:31:bd:76:a3:56:fc:
         35:38:6b:ed:34:84:a6:f5:be:d2:2b:67:2c:e6:30:46:1c:78:
         bc:5c:f7:25:6c:ab:b0:86:27:9d:c5:9b:b6:e2:31:93:55:87:
         4a:a7:a5:26:a4:1c:bf:e1:98:fb:ff:dc:8a:64:2b:c8:fb:a6:
         09:8a:de:ea:1b:21:41:68:3b:d9:c3:e3:5c:68:2a:60:e1:4c:
         05:0d:dd:02:2f:af:17:25:bd:3a:8e:a0:59:87:ff:e0:52:0e:
         86:cb:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:53:19 2025 by rpki-client