Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/f338e865-bea7-3bab-9ea2-2469041b2ed1.roa
File:                     f338e865-bea7-3bab-9ea2-2469041b2ed1.roa (raw, json)
Hash identifier:          lPu6pFVBBqds5yahUp6b3oBqK34MeFzg+KZHitHD5Ok=
Subject key identifier:   D0:28:FA:57:51:85:9E:D5:16:C7:5B:FB:86:A1:0C:37:6F:A1:75:3C
Certificate issuer:       /CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
Certificate serial:       010D0C9F4328584ACB40E581187D5BAA4C62D4C0
Authority key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/f338e865-bea7-3bab-9ea2-2469041b2ed1.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     399568
IP address blocks:        23.181.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e5:81:18:7d:5b:aa:4c:62:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=7e9a4d52-31fe-4c15-9d64-658f02282630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:00:74:f3:f1:56:82:51:34:47:0c:9f:07:fe:
                    73:3b:6b:80:f2:47:b2:31:c6:46:52:12:68:8c:25:
                    b8:62:85:5e:15:41:db:25:57:11:02:35:39:3c:55:
                    18:37:8a:d5:ac:6b:2b:ef:86:e5:44:0f:4b:a6:76:
                    f6:1e:a0:c3:16:37:1d:6a:8b:be:00:2b:1e:0c:5b:
                    2f:aa:b6:e3:2c:4a:c3:b4:c5:3e:2c:21:6a:12:14:
                    5e:cc:39:5e:f5:55:62:76:e8:61:80:75:25:e0:02:
                    eb:d0:b5:0e:1d:e3:20:b2:1c:57:5d:86:a6:90:70:
                    be:f7:0c:0e:59:f9:da:eb:cc:89:25:69:bc:19:b7:
                    a2:ec:2e:27:f4:22:b8:b4:65:0f:65:30:55:84:c3:
                    06:34:d4:ed:6c:b4:17:bf:23:02:ac:1e:00:62:b6:
                    66:6b:2c:0f:3d:ae:90:27:b4:b3:47:de:da:a9:40:
                    97:53:85:7b:bb:a3:8c:27:1f:b4:9e:b2:51:51:a7:
                    46:22:8b:9f:0d:8e:d7:24:e0:0b:bf:0d:ab:34:57:
                    7c:b5:ad:f2:49:89:9f:6b:2d:32:30:2c:d3:ee:c0:
                    80:cc:45:90:65:84:fe:95:fd:5f:5b:dd:0f:33:0b:
                    a5:6a:6d:32:b4:94:94:d2:25:6b:8f:75:f2:4b:ee:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:28:FA:57:51:85:9E:D5:16:C7:5B:FB:86:A1:0C:37:6F:A1:75:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/f338e865-bea7-3bab-9ea2-2469041b2ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:25:a8:0a:4f:d4:9a:28:b5:4f:8a:c1:d4:c1:e5:a5:b6:5c:
         77:5f:3e:29:b7:94:07:63:61:65:86:a4:c5:71:a3:75:c1:c0:
         49:73:23:68:a0:7f:08:c9:a3:3c:81:ef:00:32:26:7c:ba:a0:
         00:1e:33:61:80:8e:dd:46:c0:d7:03:c7:bb:bb:21:f8:d7:fb:
         36:08:57:52:10:d5:8a:e3:cf:a7:9f:dc:66:10:e5:45:56:1f:
         5b:72:72:2d:d7:81:9f:c4:38:5d:1d:2f:ef:97:fa:fd:8b:a2:
         b3:ed:e5:39:cb:d6:d5:18:be:e1:c4:c2:a9:ff:7d:41:87:93:
         70:2f:ec:8b:d2:52:b3:77:d3:be:be:91:3c:64:7f:b8:41:8a:
         24:3f:bf:4c:30:37:46:14:4f:a7:05:ba:a0:56:25:2e:18:7a:
         2d:74:2e:4f:8d:82:a5:8c:cf:3d:8e:bf:67:77:25:c1:72:f6:
         77:f8:25:8e:a5:b7:2a:e6:25:92:0e:b9:47:03:92:35:51:86:
         9e:1b:9a:88:26:fe:3e:9d:0a:70:c8:f2:ae:96:b5:aa:f5:84:
         33:d5:0e:83:1f:0c:5a:97:58:bc:37:8e:32:41:0c:34:29:12:
         0c:92:91:3a:2d:68:f7:38:cc:92:45:f0:cc:1a:e8:d7:d8:a3:
         fe:4c:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:20:07 2025 by rpki-client