Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
File:                     31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa (raw, json)
Hash identifier:          7Og04mgCmbwQe7t+WLMRdSsEV5UTEiHqLn1hr3vFjXU=
Subject key identifier:   94:0D:84:C4:4D:C0:CD:22:EF:B8:AC:D0:C0:9E:2E:22:90:EB:B7:84
Certificate issuer:       /CN=dbb1226f-fd99-41be-a461-4cbad0381988
Certificate serial:       010D0C9F4328584AE1968E03D8DE607DEDAC8B80
Authority key identifier: DF:51:B7:F5:5D:AD:FC:71:1E:63:10:E7:83:2C:53:B1:B5:75:31:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396997
IP address blocks:        23.155.96.0/24 maxlen: 24
                          2620:54:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8e:03:d8:de:60:7d:ed:ac:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb1226f-fd99-41be-a461-4cbad0381988
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=83558c86-81da-4abd-8095-8e817b5a0080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:1a:53:3f:0a:00:a1:8a:a4:3e:d6:46:2e:
                    31:97:c4:37:69:71:20:a8:a2:a5:a3:80:30:13:5d:
                    fe:96:c0:e0:75:4e:41:89:fd:6b:df:af:ea:61:fb:
                    88:f1:c4:1b:db:03:9f:65:51:bc:fe:dd:ea:d2:b0:
                    14:4f:be:2e:e6:c8:51:0f:be:29:1b:12:c3:f6:eb:
                    9f:51:1e:b4:71:93:64:4b:c6:f2:eb:43:57:54:68:
                    21:b0:00:4b:45:ad:16:e2:ca:1e:94:fd:65:05:95:
                    6f:6f:40:6d:de:c8:3e:16:e3:fd:8d:91:bf:96:cd:
                    8d:f7:78:93:26:72:71:f6:2c:ce:2d:f0:40:7e:c9:
                    f8:32:7f:f2:4c:ab:38:83:dd:ad:5a:02:4c:88:3c:
                    aa:7b:d1:af:75:57:7c:38:bf:5b:46:31:25:1a:89:
                    ff:df:f2:98:b5:8b:df:d3:12:a0:7e:a5:94:42:b3:
                    39:69:3f:10:cd:ea:e4:13:d4:d7:d6:4c:57:5f:86:
                    a3:a1:f4:82:d1:bf:e3:19:ff:3e:ef:2c:bb:fc:b5:
                    5b:22:93:33:22:26:92:25:94:a7:de:08:b2:11:95:
                    f6:a6:3b:3f:fe:39:10:c8:77:2e:d3:9d:b2:1f:48:
                    52:eb:7f:1c:4d:44:18:3a:16:d8:70:76:bf:4b:e0:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0D:84:C4:4D:C0:CD:22:EF:B8:AC:D0:C0:9E:2E:22:90:EB:B7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.crl

            X509v3 Authority Key Identifier:
                keyid:DF:51:B7:F5:5D:AD:FC:71:1E:63:10:E7:83:2C:53:B1:B5:75:31:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.96.0/24
                IPv6:
                  2620:54:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:67:4d:d6:aa:02:47:74:e3:ee:bc:b6:5b:22:1b:00:e2:b4:
         d2:aa:64:13:0f:64:77:d9:03:1b:51:c5:a4:a5:be:82:c6:01:
         3e:43:e2:2e:3b:a4:3a:0e:f0:8b:24:59:9e:6e:4a:8f:5f:6b:
         58:48:c0:bc:8e:08:4a:e5:91:19:61:3f:cb:70:5c:61:c5:0e:
         41:62:ca:bb:fb:eb:7a:83:82:02:e3:86:40:7c:fa:ce:08:93:
         15:19:ad:70:8c:a1:6a:92:85:a1:e4:c8:f7:6d:a1:1d:dc:72:
         83:0a:35:f5:45:67:ff:91:ce:0a:44:19:66:be:19:89:c9:dc:
         60:a9:5a:45:27:75:ef:f6:99:a0:12:b2:4f:1b:f0:41:d0:f4:
         d8:e1:d2:cd:8f:65:5b:56:c6:97:9b:3e:7c:d5:72:77:f5:df:
         3e:8d:29:b4:bf:ed:eb:aa:53:05:d6:91:5e:24:6d:0f:d0:25:
         6b:38:50:a9:7c:00:e5:4b:08:7b:b4:5a:74:a3:04:90:91:36:
         66:05:f2:67:cc:27:3c:af:32:76:01:e4:39:84:c0:02:f9:c8:
         d9:2f:a2:ea:d9:0a:a7:6e:fa:0d:1e:09:d3:2a:be:8e:2c:6f:
         56:c5:ad:48:2f:97:11:4b:36:aa:7b:22:11:56:a6:2f:69:a7:
         6a:5e:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:28:56 2025 by rpki-client