Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa
File:                     936a75ba-7eb9-3709-9d13-c404379a1254.roa (raw, json)
Hash identifier:          uabOsDoNo93tbvgoSBGyJQcCXcuVbnzM10ys6y3JkTA=
Subject key identifier:   7F:D6:D5:20:DF:D9:E3:DF:D2:10:EE:0A:5A:8C:3B:DC:9C:06:47:2E
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584AF0F13A1DFBDB9778FD465280
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        23.179.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:3a:1d:fb:db:97:78:fd:46:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=02a083f2-6c9c-4d5f-831a-593236040215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:7a:f9:9e:e0:ad:ce:c6:af:de:f8:1b:60:
                    f8:3f:27:77:be:e1:d6:44:78:47:21:54:f2:3d:04:
                    99:c3:77:53:73:d6:ae:0f:c7:f3:54:a1:49:db:8f:
                    22:3c:98:0d:c9:24:56:d0:55:fb:dc:91:c0:cf:86:
                    a9:84:47:e8:b5:4a:60:54:d7:2b:e3:64:18:31:37:
                    fc:08:14:d3:c7:67:d5:9a:43:33:01:b6:11:6f:fa:
                    ff:55:ea:71:d4:91:8e:c7:46:66:94:da:16:5b:b0:
                    6b:a8:bb:5a:d4:b6:fd:e5:fe:7d:69:01:d7:d5:3a:
                    c9:b2:30:8e:70:cd:eb:30:7a:ff:1f:7c:e4:62:4d:
                    72:8b:9f:50:2c:f8:e7:18:ba:30:51:3e:f2:e0:db:
                    81:c5:4b:fa:4d:ab:6a:6f:54:bc:5d:33:09:66:fe:
                    c2:6c:74:c0:ce:4d:a0:e7:8f:10:f6:ce:89:48:53:
                    b2:1e:ee:25:ed:9e:41:85:f7:ad:f5:06:99:26:0e:
                    54:a0:1d:2e:52:bc:43:bf:c2:85:f5:73:5f:39:3e:
                    af:7d:71:5c:de:a8:9f:8f:be:0d:42:bc:13:a2:b4:
                    b3:08:3d:35:8b:6c:c1:98:02:d6:fb:3a:1a:6f:05:
                    3c:dd:dc:9f:99:3f:f4:41:b8:d2:fb:06:ff:ab:7d:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D6:D5:20:DF:D9:E3:DF:D2:10:EE:0A:5A:8C:3B:DC:9C:06:47:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:bb:3f:1a:a4:56:1b:ae:7d:74:13:16:3a:df:5b:ca:07:
         cb:4a:5c:7c:19:a4:9c:6e:cd:cd:6f:95:0d:cf:d5:c5:19:67:
         7c:3b:16:c2:37:96:94:a5:4f:34:70:94:71:50:a5:90:31:9b:
         d8:5b:b5:fe:03:ab:11:8e:3e:f7:2c:ed:f5:87:66:b4:9b:ad:
         95:03:a2:9d:be:17:07:43:66:9d:1c:25:1a:c8:f8:46:73:3f:
         c0:df:99:42:70:93:22:f5:b9:aa:a1:75:e9:e3:fb:06:80:ab:
         ad:24:71:23:0f:9f:34:85:a4:45:5d:05:00:37:00:08:db:08:
         ab:f5:6c:b7:ed:87:2d:8c:f7:86:46:d7:39:65:c8:0c:6d:2d:
         16:3c:e6:d0:0f:2d:af:c6:76:45:f5:81:92:c1:f3:22:83:8f:
         75:11:f7:29:f1:18:e9:e7:74:b4:3f:11:95:e1:b2:e4:df:06:
         eb:9d:98:c9:13:90:e2:a3:3f:18:29:20:2d:d4:44:e2:5b:ac:
         e8:e3:4b:40:ba:15:83:92:db:93:86:ae:68:2e:68:d0:be:47:
         cb:fa:9f:df:99:34:cb:85:41:84:c7:10:b5:12:6b:f5:16:23:
         3a:74:38:32:be:2a:45:15:47:e3:a7:15:5a:87:80:6f:73:f4:
         5b:15:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:20:56 2025 by rpki-client