Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          CjAgzzVN6TDxnLb1hQh+DFFl4vlIcpoFsNgoaZLoO60=
Subject key identifier:   37:1B:2B:FD:93:20:09:6A:CB:1B:2C:31:E6:E8:5F:33:F1:0F:FA:E9
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F4328584AD9365FB9E9BAD6E05831EF80
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5f:b9:e9:ba:d6:e0:58:31:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=48e3295a-8e24-42bd-a4c7-4f84ce602a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:fc:dd:9f:1f:80:a3:7e:8d:fb:e3:fc:9f:
                    47:38:5f:8f:82:1c:48:71:ac:60:2a:0c:d2:0d:43:
                    ed:55:20:a6:17:68:5a:cd:65:aa:aa:f7:b6:5d:12:
                    46:22:0e:80:5c:30:23:e3:4d:3c:ca:60:ca:56:97:
                    3f:dd:d6:1a:be:e3:58:fd:ec:1d:16:dc:45:90:01:
                    2c:85:7c:fd:d6:5d:02:f8:b1:bd:3b:b6:3d:d8:44:
                    0c:52:a4:05:ca:ac:6c:30:64:e9:f2:b9:16:5c:7f:
                    45:f2:ec:cd:07:22:88:9f:f2:fc:f2:c4:a8:5b:85:
                    17:f9:eb:be:66:ca:71:ad:15:a2:c0:df:14:1e:d6:
                    5b:90:95:4f:6f:5f:ad:3f:a6:eb:5f:1a:7e:af:4c:
                    9f:94:bc:09:44:e3:7f:11:fc:71:92:77:13:48:07:
                    2f:aa:d9:40:6f:c7:32:22:d5:cb:81:57:38:37:df:
                    33:99:62:8d:82:9e:1f:29:db:04:ef:af:c5:06:76:
                    8e:00:0f:f1:a9:01:51:c9:4e:af:d8:d7:b7:1f:1a:
                    e2:07:54:cf:d8:f5:19:5c:a8:9d:07:bb:d2:82:0c:
                    59:53:63:e9:64:54:45:a2:81:4f:5c:f3:34:99:ac:
                    b2:c2:64:68:62:e4:e0:71:a2:a8:de:8a:8e:45:50:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:2B:FD:93:20:09:6A:CB:1B:2C:31:E6:E8:5F:33:F1:0F:FA:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:64:82:2a:1f:e4:fc:c9:c3:5b:74:a1:0c:3c:93:fb:70:
         de:0d:94:c4:c2:51:25:97:0c:99:b1:5a:55:73:c6:ce:f5:cd:
         28:52:f3:83:dc:46:d8:b9:ec:8b:49:d8:02:98:0d:c0:89:bd:
         fb:10:35:0d:59:a0:e9:da:f1:30:7e:2a:f1:36:45:d6:33:c6:
         8f:4b:52:22:46:6a:4b:49:af:51:da:80:dc:f3:36:48:ff:6f:
         a3:4f:45:99:97:e1:fd:a9:64:7c:3a:12:f6:2d:12:a8:1b:38:
         5c:ac:60:ca:03:2d:98:96:5a:0d:b4:b3:e8:94:75:86:be:7e:
         77:5e:db:1c:17:b2:ad:a7:7a:60:44:7e:3d:f7:40:c4:73:68:
         30:ba:ab:61:72:13:0f:68:4a:ce:90:08:62:3c:6f:b4:66:0e:
         3d:8b:34:1e:fa:f4:df:44:2b:41:62:52:b1:f9:9f:e7:38:0e:
         7a:6f:e8:2f:95:8e:e5:19:11:f4:48:9d:52:e3:e0:01:9c:14:
         97:17:f2:06:0d:3f:23:66:0f:c5:f8:3d:36:35:e0:b4:43:91:
         8e:c5:ed:7e:9a:4b:b9:69:99:43:de:29:98:1f:c2:1a:d3:9e:
         67:d2:49:48:fa:00:51:c4:ce:43:5a:18:37:47:07:60:fc:f5:
         b9:b7:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:30:41 2025 by rpki-client