Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa
File:                     99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa (raw, json)
Hash identifier:          gZxj28f7GgiU9knrRM/ubJ+nsApYiiyYXIzBDQI/+/w=
Subject key identifier:   8D:AE:CC:B9:4C:D6:CC:76:AD:68:30:EA:1E:6D:27:D5:B3:20:EE:19
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F4328584AEE268865E1E604FC83A92400
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     400550
IP address blocks:        23.133.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:88:65:e1:e6:04:fc:83:a9:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=ff563f10-64f0-44b3-ae98-39a326644738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:c5:1c:c5:92:51:99:4a:cb:42:c6:b7:c5:
                    d6:de:6a:00:a7:13:fb:cd:ce:17:94:f5:24:eb:30:
                    c8:78:c5:72:62:de:db:e9:c0:3b:a6:8f:63:29:64:
                    dd:23:9d:50:a6:71:ec:9c:4e:97:31:62:40:ec:ca:
                    d1:07:d4:1b:f2:2f:4b:22:36:16:61:f3:91:45:f3:
                    b8:a5:67:5d:2b:c9:2e:2e:fe:88:f3:96:ac:75:11:
                    f1:fe:1d:d5:3c:8a:7f:6f:ef:6c:5f:e3:99:71:53:
                    68:e3:8e:cf:b0:72:26:99:60:20:c0:50:a8:80:c6:
                    c3:ed:a3:d2:b6:5a:34:7f:12:b1:76:d0:84:8b:c6:
                    04:4e:9c:1b:5f:6d:6c:ae:18:0f:f4:15:de:7b:13:
                    b9:a7:ab:c0:31:cc:4a:91:c7:34:72:d5:70:1e:c2:
                    db:a0:a6:6d:48:e6:2d:1f:95:4c:42:ba:3a:e9:5e:
                    66:94:a9:f7:47:ed:6e:e6:7a:88:91:0d:d5:e4:ad:
                    5d:a7:e9:c4:33:c6:48:e3:22:2d:47:3c:81:1b:6e:
                    c0:13:a1:21:a0:2e:71:ef:2a:35:ee:bb:4f:96:b6:
                    34:ce:a0:d7:0c:b9:e8:37:8d:f6:16:83:96:66:f7:
                    94:f2:79:40:8e:0d:d4:4c:ea:18:51:9e:f5:1a:11:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:CC:B9:4C:D6:CC:76:AD:68:30:EA:1E:6D:27:D5:B3:20:EE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:88:b8:c1:a2:3e:2a:9c:f0:fe:34:ba:ba:1f:6b:6b:32:70:
         db:a4:ce:be:1c:d8:78:b1:e9:c7:83:3d:ad:78:69:5b:54:30:
         7d:7b:a4:91:49:05:76:8b:e8:14:91:83:94:30:56:e2:3a:2e:
         68:5f:6a:5b:af:64:f3:cd:33:92:57:25:42:c5:c4:46:90:a7:
         9c:24:91:85:ef:de:d2:f8:c7:55:60:64:5d:b3:38:3e:47:aa:
         af:78:27:f1:58:f0:e4:a2:88:25:e4:5f:fc:0c:25:79:31:c5:
         1b:d7:0c:38:25:65:b6:ab:31:8d:f7:2f:0d:ff:4b:10:7c:41:
         65:55:ff:f4:56:89:fe:33:73:bc:e9:91:d6:7b:f4:65:b2:8e:
         12:82:09:4d:49:f0:d3:90:6a:54:ba:48:9f:96:4c:12:07:6b:
         28:52:0f:e5:09:c5:aa:bb:6d:a1:6f:15:fa:61:e0:d8:6c:c1:
         cd:23:46:7b:3a:da:32:48:58:e2:1c:fe:0f:21:79:41:0b:63:
         f6:c8:b6:98:08:d2:76:39:4b:a9:67:97:ed:60:60:c9:0c:ab:
         26:f9:c0:12:be:04:d1:5f:b4:0a:db:53:51:49:85:3f:b9:b4:
         ad:64:ae:3b:86:30:40:75:a6:e9:b7:e4:bc:12:38:24:30:b6:
         0a:ef:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:26 2025 by rpki-client