Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/bae9914a-ee77-385a-acba-db83fdf78cea.roa
File:                     bae9914a-ee77-385a-acba-db83fdf78cea.roa (raw, json)
Hash identifier:          /V5Ksn+9IhVZs0j89UkMDsYR44X6tZy20jolLoYHEF0=
Subject key identifier:   C8:57:95:F2:98:82:01:35:AA:82:F1:5E:78:C8:67:60:31:59:AE:22
Certificate issuer:       /CN=a076692a-65ec-4598-b231-91f6d6e63c63
Certificate serial:       010D0C9F4328584A3FAADC867DE9770D590CA700
Authority key identifier: D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/bae9914a-ee77-385a-acba-db83fdf78cea.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     401418
IP address blocks:        23.128.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:dc:86:7d:e9:77:0d:59:0c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a076692a-65ec-4598-b231-91f6d6e63c63
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=125cfdb5-908e-4833-a0d3-86f566ae4370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:85:ab:23:a0:b8:d2:f5:db:ed:f9:c4:f5:
                    7b:57:b1:71:f3:11:57:fe:11:66:d1:3f:5c:3e:3d:
                    8d:80:42:ff:76:09:8a:38:0b:80:23:81:d8:89:c2:
                    72:ba:20:5f:1e:d9:3a:ca:34:d9:12:73:fa:9a:2c:
                    0d:20:cf:61:78:b4:b0:23:c2:bc:da:76:66:88:83:
                    f4:6f:6b:f7:be:fd:4a:b5:a8:6e:9a:79:28:9d:53:
                    9a:f2:1f:53:71:7c:f8:78:5d:44:2d:11:05:53:ae:
                    81:83:f9:d7:57:74:83:11:f2:f3:79:f9:b0:af:64:
                    76:7b:b2:ee:2d:3d:b1:30:fc:a2:26:a9:9e:7b:82:
                    f5:fa:44:69:fa:82:24:b8:b9:69:31:8c:40:b5:ea:
                    d5:32:ed:b1:07:d8:65:c6:3c:1c:ed:2b:70:ae:81:
                    68:8a:5a:f4:c1:ab:ac:de:2a:e7:57:ce:16:8c:1c:
                    e3:53:aa:0b:9c:a1:76:1f:2c:e3:3c:7f:bf:bd:f4:
                    05:b4:30:de:7b:27:93:cd:f0:b9:d7:29:21:e2:6b:
                    6f:5c:83:5a:2e:57:f1:c9:6f:6f:15:58:41:c8:3d:
                    5a:04:1f:b0:d0:5d:26:e3:46:97:5c:6b:f3:88:d1:
                    65:ee:98:79:31:83:5b:bb:d1:34:ee:75:c6:fb:b2:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:95:F2:98:82:01:35:AA:82:F1:5E:78:C8:67:60:31:59:AE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/bae9914a-ee77-385a-acba-db83fdf78cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:50:89:97:55:0f:3a:06:f5:a5:0d:1a:78:b8:de:80:90:b3:
         e0:5d:f6:96:80:cf:6d:fd:f3:72:44:72:33:f5:3d:c4:e6:12:
         a9:c6:b4:ca:d5:d2:6d:e7:15:ab:b1:b4:55:2b:7a:6a:50:6d:
         5a:88:b8:bc:71:ec:ea:3f:53:30:c9:b9:74:f4:6c:40:20:82:
         a0:d0:86:5d:65:a0:27:38:33:c9:35:bd:5f:4c:62:64:e9:04:
         2b:bf:62:29:73:35:99:36:b9:d3:cd:d8:55:6b:22:ca:dd:cb:
         3f:93:d2:f9:f5:48:82:de:26:9e:b8:98:a8:43:78:bc:a1:49:
         cd:39:3e:a7:95:e5:49:a3:dd:b9:a4:a0:ef:59:7e:70:d3:a7:
         be:5f:b4:df:6f:b3:01:95:a5:89:88:42:f4:d0:99:e7:2c:ab:
         98:81:1b:8c:d9:31:90:bb:47:9d:ec:8d:db:c7:8a:90:0e:dc:
         b2:69:cb:f7:78:b0:22:62:65:88:f6:6e:b1:d8:75:92:44:a2:
         3e:59:8e:cd:0b:27:eb:7b:2d:17:58:d4:ff:4e:9c:44:c9:f6:
         14:bd:b6:a2:99:52:d2:32:fd:f8:3d:1a:3a:81:c4:b7:7b:95:
         c4:a3:72:fc:e3:9f:36:54:40:db:89:20:db:20:ce:ca:c2:dc:
         34:41:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:47:47 2025 by rpki-client