Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/67679c3d-d4b3-3596-9478-58c3982b5449.roa
File:                     67679c3d-d4b3-3596-9478-58c3982b5449.roa (raw, json)
Hash identifier:          Klwwyf1k/SFKrMijzV6H211qXAMP6Y8hSZPQDv6V+oA=
Subject key identifier:   86:AB:45:E0:47:87:8C:2D:65:50:F9:E1:A7:63:5B:8B:71:3E:8E:DF
Certificate issuer:       /CN=a104eebe-1440-46ec-8e49-7cb808ab3600
Certificate serial:       010D0C9F4328584AD7D1206DD2BD537CCFB3E240
Authority key identifier: A8:83:F4:7E:F8:CD:D4:64:C2:FE:56:EE:40:F7:F5:31:6D:0A:95:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/67679c3d-d4b3-3596-9478-58c3982b5449.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     397257
IP address blocks:        23.174.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:20:6d:d2:bd:53:7c:cf:b3:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a104eebe-1440-46ec-8e49-7cb808ab3600
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=379fe28d-c29f-4fbc-b04b-d088a7dd17fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:9f:f4:cb:48:55:fa:e0:04:b1:53:c6:86:
                    8b:f4:5f:16:92:fd:ef:14:b0:ad:55:be:dd:86:15:
                    33:24:6d:78:0b:b0:35:75:9f:1e:46:c7:1c:f7:1a:
                    64:78:a1:27:8c:0e:9e:ae:16:10:cb:b2:d6:78:e9:
                    00:bc:34:88:0f:e8:b3:00:a0:1b:6b:1f:b2:8d:85:
                    48:b6:c4:8d:e4:85:24:22:41:a6:19:ab:e0:fa:54:
                    fb:95:fd:93:ec:ba:91:09:2c:28:3b:9e:bf:6c:78:
                    a6:54:87:ba:8b:25:cf:ca:e2:31:64:bd:5f:80:27:
                    ae:22:f4:59:81:5e:e5:d4:81:0c:0e:67:53:7b:84:
                    44:58:60:5b:c6:dc:4b:18:c2:e4:6b:35:94:b8:b7:
                    a7:35:a3:20:54:d7:3c:1d:c9:c0:81:35:81:41:b5:
                    2f:d8:74:bd:4f:fc:e3:b5:00:77:da:99:22:6e:dc:
                    02:c0:8d:bd:5e:f7:08:1c:ad:6a:a7:18:eb:8d:4b:
                    d4:9a:2a:05:21:ad:17:e1:7c:b4:07:8f:ee:83:a5:
                    20:97:26:f5:83:99:08:a8:c2:c3:ca:61:0c:71:c0:
                    4f:df:42:e3:f0:af:c6:9b:6d:bf:d3:96:18:36:d9:
                    65:29:f8:f2:44:61:6e:21:a6:29:29:be:33:1b:b2:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:45:E0:47:87:8C:2D:65:50:F9:E1:A7:63:5B:8B:71:3E:8E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/67679c3d-d4b3-3596-9478-58c3982b5449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.crl

            X509v3 Authority Key Identifier:
                keyid:A8:83:F4:7E:F8:CD:D4:64:C2:FE:56:EE:40:F7:F5:31:6D:0A:95:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:af:43:ed:34:91:d8:01:78:15:49:37:d5:ef:7d:de:5d:
         83:51:e0:ce:94:c8:01:43:79:fb:eb:a0:b5:1c:5f:c0:48:53:
         3f:0d:58:0a:52:d0:ad:cd:84:53:b2:39:4b:7f:42:00:63:cc:
         94:e1:cb:7a:3f:e5:ec:e3:a6:77:5b:f9:66:1b:4e:36:8e:c5:
         28:bc:0e:9b:71:76:0a:a6:98:c7:e9:39:cf:46:c4:7b:3d:b3:
         e0:69:d6:be:8f:a2:ed:c3:55:28:d5:dc:7e:04:68:9d:8c:ca:
         38:36:6c:c7:95:47:c0:a0:09:5a:ab:48:5b:23:06:36:25:7e:
         1b:47:e0:c7:07:a7:27:bf:f8:a8:91:46:ac:54:c1:c4:b4:e9:
         d6:1d:3f:da:a5:0b:c0:36:c7:34:cb:4a:0d:54:6e:7e:91:ef:
         58:61:ce:4c:33:46:77:ba:78:18:e5:3b:08:52:8c:22:04:a6:
         fc:18:3d:04:74:29:8f:3f:43:a6:63:a1:3b:36:60:fd:fd:42:
         f0:86:8e:e1:44:de:14:c6:f9:63:2f:ec:e2:47:9b:08:6d:e8:
         f2:46:45:2d:83:47:e6:66:2c:45:4b:53:a1:be:7a:e7:b7:5f:
         85:cf:92:3d:0d:ed:a7:39:f4:90:cb:e9:70:b9:ea:f4:32:5b:
         62:f0:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:04:24 2025 by rpki-client