Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5549826e-4854-3950-afde-ced4fcc37247.roa
File:                     5549826e-4854-3950-afde-ced4fcc37247.roa (raw, json)
Hash identifier:          x7lWMIyqgQ5PYHm3EXpS0+4G8vDfKp/8w/4oLrSzvxc=
Subject key identifier:   4A:8C:9B:64:EE:B3:97:E0:2A:EB:32:C4:30:E6:25:08:99:9D:82:E3
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584AC8764423A3244A31515CC6A0
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5549826e-4854-3950-afde-ced4fcc37247.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     396998
IP address blocks:        23.183.240.0/24 maxlen: 24
                          23.183.241.0/24 maxlen: 24
                          23.183.242.0/24 maxlen: 24
                          23.183.243.0/24 maxlen: 24
                          23.183.244.0/24 maxlen: 24
                          23.183.245.0/24 maxlen: 24
                          23.183.246.0/24 maxlen: 24
                          23.183.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:44:23:a3:24:4a:31:51:5c:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=e7b9465c-d3ca-45a6-a547-1ebd6c74ecc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:34:a5:2f:49:2a:18:1b:88:c0:e8:bb:85:
                    2e:59:b4:c1:e3:21:04:6a:50:06:56:3a:fc:bf:44:
                    3a:df:ef:5a:59:3b:e3:87:9b:20:c9:39:c1:45:f4:
                    24:93:6c:af:7a:f4:2c:18:3e:4b:af:28:36:33:42:
                    f5:9e:80:9c:2d:b9:f7:b9:65:83:44:75:0e:0d:a7:
                    72:cb:ff:fe:30:95:0c:23:ac:44:6d:5d:81:64:3f:
                    8f:99:67:b0:30:41:22:fe:bd:3b:c7:c7:40:c6:ca:
                    2e:12:ff:2b:aa:00:68:5c:8e:c2:30:b0:6b:e8:03:
                    da:b6:8c:c8:69:a7:cb:0a:65:37:5d:ff:a1:d1:ac:
                    0b:1d:8c:96:c1:bf:3b:23:e0:0f:bf:8e:68:af:f2:
                    32:6a:5f:ab:0c:78:29:20:a9:ba:5b:83:e3:76:17:
                    df:5a:3f:82:35:6b:9a:05:4d:ee:ed:07:ae:d8:b6:
                    ff:e4:12:6e:3d:60:28:a7:90:f0:27:13:3b:8f:5c:
                    ad:d3:1f:67:ba:7b:71:e8:1e:a3:41:72:98:c8:e4:
                    b9:29:aa:a2:26:31:9c:98:5b:81:42:ba:20:02:5d:
                    a6:d6:0b:72:96:ef:cd:bb:40:2f:f6:8e:d2:a0:a2:
                    43:fa:a9:d4:11:07:74:2e:53:81:70:41:1b:1c:2a:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8C:9B:64:EE:B3:97:E0:2A:EB:32:C4:30:E6:25:08:99:9D:82:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5549826e-4854-3950-afde-ced4fcc37247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:9d:f2:a8:1a:a7:35:c7:2c:e1:4f:e4:43:40:6d:89:ae:
         d3:e7:42:b3:9b:e3:5d:be:ee:71:56:5d:2f:be:af:a2:a9:95:
         43:4e:70:49:01:55:3d:68:01:b1:d1:ba:79:b0:d2:ae:a9:6d:
         1e:fd:82:d3:7b:32:68:39:9f:8f:b1:17:23:70:55:3a:47:58:
         ac:17:2f:b3:45:7c:f3:24:96:bf:6a:0a:94:bc:b9:cb:f9:4e:
         dc:cf:b4:c9:ce:97:1a:75:7f:e9:d4:ba:0c:06:97:70:a1:33:
         77:97:25:55:cb:00:da:4b:c5:0e:56:4d:44:32:7b:41:e2:44:
         64:27:3c:66:21:a2:09:fe:e0:0a:fe:a5:68:24:18:00:7c:a6:
         19:4e:3d:62:34:54:6c:d3:9f:eb:06:c2:31:cc:e4:a0:c2:61:
         9e:d2:6d:85:05:71:62:cb:6a:66:32:08:c6:b3:29:a3:dc:f8:
         ac:a5:ac:cd:7d:7d:f5:76:5c:3c:85:07:b3:03:7d:2a:bc:99:
         6d:01:b1:54:64:fc:cc:f1:88:5a:b1:f3:aa:3c:bf:4e:80:cf:
         5e:79:11:c6:ba:f4:2e:0d:2c:59:fe:48:7b:9c:0b:f1:ac:a9:
         55:61:2f:3a:9c:f5:3e:e7:c9:7c:cc:bf:e4:ba:d8:50:c1:fe:
         12:88:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:52:43 2025 by rpki-client