Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa
File:                     01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa (raw, json)
Hash identifier:          rAwn7dFq5yGeig5DHFcVuP0UU5xN5k8di5AujgblIxg=
Subject key identifier:   53:0E:A7:67:25:7B:85:82:20:85:F5:53:E8:B5:E6:65:7A:AD:C3:C4
Certificate issuer:       /CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
Certificate serial:       010D0C9F4328584AF0F1325F84295AFF2F9D3980
Authority key identifier: 44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     20119
IP address blocks:        23.136.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:32:5f:84:29:5a:ff:2f:9d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=023d9584-20c4-4605-9a55-afa2a22241ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:fa:f8:73:17:42:dc:62:46:fc:24:70:2e:
                    c5:90:32:b7:cd:b1:f4:4d:da:9a:1a:e6:bf:9a:9f:
                    6a:78:45:35:ef:5d:3a:ad:7d:f5:22:08:04:97:3a:
                    dd:83:09:2d:6c:30:be:9f:92:4b:bf:37:98:ad:f7:
                    cc:bc:fe:52:c7:c0:a9:6b:55:9d:b2:e8:08:99:3f:
                    a0:46:7e:d3:ee:ff:a2:64:f4:08:d6:00:cc:3e:65:
                    c6:ba:14:40:df:85:e1:ed:05:03:5f:db:c7:77:b9:
                    41:70:8a:f8:5e:21:cf:ac:0a:b5:be:5c:b7:fb:53:
                    01:2d:42:bc:0a:75:99:56:c2:cc:7c:06:91:20:73:
                    86:87:83:16:20:13:90:5e:2f:bd:6f:e1:26:ab:87:
                    eb:f3:32:cc:0f:ef:43:af:bc:1f:60:16:40:a6:0c:
                    8a:59:20:9a:66:36:3c:cd:19:8f:74:f3:16:aa:4c:
                    4e:c5:58:51:f0:3f:69:b1:17:1b:b3:3f:cf:d4:5c:
                    d1:21:89:a0:7d:ae:1d:b4:31:0a:47:d6:1d:d8:44:
                    8b:a0:06:08:9d:77:64:57:10:8d:bc:1c:fd:93:30:
                    e7:48:0b:a7:f5:bf:0d:a9:10:9d:1e:33:f0:22:de:
                    b3:60:f9:0c:6a:f0:ec:79:e0:05:ce:b8:c6:e3:dd:
                    b3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:A7:67:25:7B:85:82:20:85:F5:53:E8:B5:E6:65:7A:AD:C3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl

            X509v3 Authority Key Identifier:
                keyid:44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:80:c8:90:63:60:bc:4f:01:c3:9e:20:57:8f:f9:46:84:3d:
         63:ba:9c:3a:00:49:f1:7c:6a:6e:a9:fa:ad:af:1c:97:4f:c1:
         c3:41:1a:a5:c3:82:e0:76:65:cb:a9:11:f7:f2:0b:78:8b:ff:
         69:cb:8d:3c:40:1f:14:b9:4b:60:26:06:80:03:5e:39:50:c8:
         45:bc:01:b6:b7:c4:59:ae:a0:a3:50:c4:e4:3c:26:e0:d5:1b:
         0d:45:a2:69:05:2a:50:8a:c6:69:71:6b:d9:bf:48:92:ab:02:
         9e:c4:c2:2f:16:aa:45:df:6a:bd:55:98:91:f2:d9:5c:5a:56:
         91:76:99:8e:1c:27:5b:cf:a9:e7:06:54:0d:b3:b2:6b:1d:b5:
         77:f1:25:fc:09:3b:f2:0e:ad:69:7f:af:fe:ac:f0:55:52:b7:
         87:29:00:da:18:44:a0:86:7d:50:66:bf:dd:81:48:ab:33:e8:
         03:9f:2d:77:1b:bd:46:e1:32:8b:da:76:89:79:e8:70:91:8c:
         f7:8e:6a:db:31:dd:b8:83:b0:c9:2d:62:f8:5e:55:f4:ba:55:
         19:10:cb:69:25:b2:24:2f:06:b9:95:b8:e3:48:94:bf:3d:06:
         f6:a4:b1:0b:43:ea:69:fc:a0:94:80:7c:26:6d:d0:11:d2:3e:
         ef:a8:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:17:15 2025 by rpki-client