Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa
File:                     a43f2811-9f68-38d8-af6d-9e854929690d.roa (raw, json)
Hash identifier:          YZ4HkwXMTEFi0l866eI8aPgGmctwvwy6g5/DxSe4be4=
Subject key identifier:   FB:15:2B:DD:AE:FF:1B:0A:5E:6F:D7:A6:1A:42:2C:5C:21:8E:01:48
Certificate issuer:       /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
Certificate serial:       010D0C9F4328584AC2E102E2A0DD95B57F7FAD00
Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399788
IP address blocks:        23.189.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:02:e2:a0:dd:95:b5:7f:7f:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=88ae5a2d-65c5-461f-af02-38395b21bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:05:82:e9:8e:9a:94:a7:bf:88:90:0a:9b:
                    41:6d:41:26:64:98:5f:9d:7b:3b:98:9c:76:b6:86:
                    a5:62:a9:40:b6:bc:25:89:3e:32:5c:06:44:9d:5a:
                    99:b0:40:fd:84:11:f0:0c:55:41:ad:d1:b6:71:99:
                    54:ed:2e:65:9d:9a:11:4b:2d:1d:a6:93:e4:e3:29:
                    10:89:ca:0d:16:58:48:84:54:f7:66:b8:e1:fa:f9:
                    f9:e1:e7:01:de:64:0c:1c:24:d9:5c:f9:8c:79:b2:
                    97:7b:65:f8:3a:93:03:52:31:b4:4c:0b:b9:fc:53:
                    77:24:b9:15:7d:f2:14:f8:f8:3d:70:50:62:3c:42:
                    f8:d1:d9:ee:0c:4f:fe:33:bd:0a:b7:a8:50:07:fc:
                    ec:12:d4:d4:f8:93:65:53:11:d4:55:91:65:c9:f5:
                    17:3e:81:a0:64:f8:2c:68:fb:4c:11:4d:a4:0a:f1:
                    cd:60:b4:e1:f9:20:0a:00:c0:a8:2d:2f:e2:76:ee:
                    4f:b8:ea:96:d4:0c:90:c0:a2:41:37:03:d8:ec:e2:
                    ff:15:8f:c5:6c:36:47:49:89:7a:0b:46:78:2d:d6:
                    72:8e:a7:90:65:49:c7:7c:ff:a6:c1:ca:10:a6:8d:
                    1d:9c:ba:78:d4:a1:01:94:f6:80:22:43:c0:76:45:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:15:2B:DD:AE:FF:1B:0A:5E:6F:D7:A6:1A:42:2C:5C:21:8E:01:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:2a:f6:f8:27:10:c0:33:94:1e:ba:24:88:2b:94:be:51:
         8e:95:2e:ba:7f:a7:c6:13:5b:e6:3c:d7:12:02:2d:c7:a7:3c:
         c2:e2:7c:88:8a:07:75:f2:f5:38:f5:d2:87:59:d9:b1:05:29:
         34:4d:49:5e:2f:98:5a:92:cc:23:22:7f:94:fa:9a:01:bb:8b:
         5d:40:c8:56:75:18:e7:21:24:34:1f:84:0a:f2:58:3d:4e:9c:
         e5:d7:25:60:04:d1:71:17:44:9f:de:26:d3:d4:e9:2b:a3:80:
         50:3e:3c:41:a7:f5:1b:24:d4:7e:e6:f1:3f:5d:1c:f0:17:46:
         5b:ff:39:71:81:87:0c:9a:3b:6c:b9:4b:98:98:eb:11:5c:cc:
         b9:f3:51:e2:fc:fd:8c:e4:d3:12:a7:ed:f1:83:f1:3d:8f:2c:
         f6:77:a0:64:48:66:62:29:bd:5c:90:88:b8:90:06:0e:c3:de:
         f2:d8:7c:bb:60:8d:9d:2b:22:45:fa:57:36:33:16:74:ce:c7:
         21:9d:61:3d:61:17:23:c7:e5:02:90:ae:90:f0:38:09:63:56:
         01:fb:d0:19:8c:e4:d7:0c:ff:43:a0:e9:29:99:06:bd:b6:3b:
         78:18:91:2d:83:f4:41:3b:ec:a3:2b:27:0d:47:68:92:1f:13:
         64:8d:99:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:06 2025 by rpki-client