Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
File:                     431ff5e4-1113-3827-ae60-a56d271454c4.roa (raw, json)
Hash identifier:          /+ssfxCmyhziwhtqzN+6MmFKwm+BOwVAetwMIPyBdZY=
Subject key identifier:   23:37:C9:D7:D4:BD:8A:C5:BB:4B:30:74:B1:B5:A0:8F:F9:C7:14:92
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584A549B2059CCE23AA8C0C776C0
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     36530
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:20:59:cc:e2:3a:a8:c0:c7:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=21c50f02-6984-47f1-916f-f9d29e749abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:f2:4f:11:67:26:4f:14:5f:78:39:2c:61:
                    08:dd:ad:bd:f8:ea:75:91:39:7a:c0:26:36:e0:cd:
                    38:29:7b:43:a5:f6:54:e6:3b:f2:11:69:6e:49:c1:
                    a2:0e:5f:e1:cf:ec:62:4a:b6:6e:d2:ba:94:f4:dd:
                    2a:ad:88:a5:7a:eb:e6:b0:b6:a2:0f:3a:7d:87:9d:
                    d6:1a:95:a8:5f:69:bc:88:9b:61:48:47:ef:bf:45:
                    7c:0b:e1:97:ca:51:fd:53:b9:07:e0:68:96:d3:81:
                    5d:4a:ba:0c:88:ba:f6:12:89:48:42:74:4b:bc:79:
                    fb:9d:22:48:94:4d:36:54:8a:a3:70:59:50:92:9a:
                    70:97:d9:bf:c6:5c:a3:1c:eb:5e:64:eb:a5:ca:0e:
                    c0:e3:22:92:83:90:aa:c9:e0:20:cb:7f:c8:db:bc:
                    96:42:d5:24:8c:2c:1c:4f:c9:3d:24:3b:43:9e:d8:
                    00:2e:02:20:c6:69:b4:47:f4:f7:22:c0:92:b0:e8:
                    aa:1a:bb:53:d7:02:eb:b4:54:c7:f5:32:d3:1e:13:
                    be:6d:bb:97:01:c4:3a:df:06:67:32:32:31:c3:93:
                    25:ec:b7:58:5f:95:f2:ae:93:1e:f0:14:a5:c1:4a:
                    77:07:c2:58:cb:6f:28:20:44:b2:be:27:7f:35:59:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:37:C9:D7:D4:BD:8A:C5:BB:4B:30:74:B1:B5:A0:8F:F9:C7:14:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:aa:2d:ab:00:6b:e4:c3:8a:35:ef:07:2b:41:06:70:e6:60:
         65:49:e2:80:e6:df:e9:0d:64:58:6b:46:3b:e7:fe:e3:c4:f9:
         7e:2d:d3:9a:cd:2c:65:10:22:4c:9f:7f:97:6f:7e:43:24:c4:
         35:1c:2d:98:4f:e9:84:9a:b7:7c:e3:ad:6f:ad:43:ae:8b:1f:
         f8:df:7c:24:40:b5:d5:c6:e6:75:fe:67:36:a2:8b:5d:ff:33:
         86:b4:a7:8d:f7:7f:32:5f:9f:29:d1:52:5b:c5:45:ce:6b:f7:
         76:65:1c:98:76:87:fe:41:d9:88:70:50:b7:4b:a6:ec:73:7f:
         a5:e1:f0:76:8b:ed:01:df:5b:58:ac:7f:12:2a:f1:10:e5:28:
         3b:3a:6b:e1:14:be:6f:64:50:36:98:ca:64:87:0b:f1:cb:10:
         2e:56:96:b7:5d:8d:12:c8:b8:56:aa:b5:35:85:b9:2f:09:ed:
         56:1d:48:ab:5d:0d:2c:19:b8:67:74:82:52:d0:87:60:72:05:
         02:71:dd:a2:2a:6f:11:a8:eb:7a:9a:f1:60:23:fd:49:85:1c:
         ac:6c:88:80:41:21:b9:72:5e:a3:96:17:69:a5:a3:77:ee:6d:
         af:13:e9:2b:43:94:47:7c:35:c9:8d:be:b9:ec:d5:e1:ba:d8:
         68:67:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:11:32 2025 by rpki-client