Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/0745313a-11f6-3abb-a87b-e8f665c76567.roa
File:                     0745313a-11f6-3abb-a87b-e8f665c76567.roa (raw, json)
Hash identifier:          WXqRNjDhXMIu5i1odT4YdGsTd9gKRWwwHaCjFNDfSTQ=
Subject key identifier:   E1:D9:35:F4:8D:52:D0:62:2B:0E:AA:D6:31:4B:F2:48:E9:8F:B5:3E
Certificate issuer:       /CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
Certificate serial:       010D0C9F4328584AE891315419C6FE0571F22480
Authority key identifier: 49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/0745313a-11f6-3abb-a87b-e8f665c76567.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     1027
IP address blocks:        23.142.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:31:54:19:c6:fe:05:71:f2:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=25b728fb-9b4a-4b82-a217-c4298fb5cf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:62:f2:c1:92:40:6e:8a:2e:f4:2f:11:f7:
                    af:f0:4e:ae:b0:3b:ed:2f:43:97:8c:64:e0:5d:5e:
                    43:75:c4:61:36:99:c0:d2:d7:cd:f5:96:19:f8:92:
                    3c:bc:6b:9a:68:3f:2d:ca:58:e8:62:1c:f1:f7:9e:
                    f0:0f:01:8c:b2:30:0b:75:56:7b:89:2b:74:9f:6e:
                    03:85:04:93:aa:4b:65:cf:61:e9:13:d7:24:bb:6e:
                    89:f5:cd:7f:54:05:a6:de:58:9f:8c:e9:a5:54:8c:
                    84:59:ff:d1:4f:47:32:39:dc:aa:4d:05:ed:ba:89:
                    03:b3:0f:ac:c5:c1:fc:81:a1:cc:36:af:64:1f:e4:
                    ce:02:1c:e0:2b:57:a1:fc:bf:90:9e:17:fc:b3:dc:
                    f5:26:b2:fe:e3:0e:e6:b4:a9:c9:c8:68:a3:63:b5:
                    07:68:3a:21:83:5d:6f:50:2b:72:7e:ca:7f:0c:63:
                    7d:40:d4:50:2c:b1:3d:68:30:6a:79:93:10:48:f0:
                    08:6b:60:90:c9:cf:84:7b:bd:1a:a1:51:83:33:05:
                    50:7e:94:df:4a:b2:0e:a4:c5:23:6e:d8:df:3e:f5:
                    db:1e:32:af:a6:a7:42:f6:dd:11:fb:40:0c:06:bc:
                    c7:42:65:37:fe:8b:ab:45:4c:fe:56:05:fb:81:2e:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D9:35:F4:8D:52:D0:62:2B:0E:AA:D6:31:4B:F2:48:E9:8F:B5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/0745313a-11f6-3abb-a87b-e8f665c76567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.crl

            X509v3 Authority Key Identifier:
                keyid:49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:37:80:8b:c4:b9:a5:6c:7d:5e:8a:79:0c:de:6a:07:ca:45:
         ea:ea:6a:6d:6b:0e:a0:a8:bb:47:00:e2:b4:35:0b:c8:e2:cb:
         3e:c1:18:a8:d1:e3:eb:c6:03:b3:c2:d8:ae:ea:9b:72:01:b1:
         5e:c9:72:50:f8:95:ee:2f:54:54:60:43:b7:e0:75:1b:88:17:
         13:1c:b9:8e:e0:a4:ce:3c:a7:db:1e:46:ef:96:88:55:55:02:
         b4:f6:dc:97:ff:5d:7d:a3:90:97:9b:6f:30:8b:1f:88:1b:e0:
         53:4d:3e:ea:cc:51:b6:28:16:2b:00:80:bb:24:51:6e:c2:33:
         86:51:79:2d:00:de:21:19:86:bf:77:ff:22:40:14:08:7f:7c:
         c7:3c:de:c9:e2:ce:52:7a:52:90:da:b0:d4:10:e6:2c:68:3e:
         b8:d1:ed:87:de:e5:39:49:32:92:c3:48:16:c5:66:c0:12:a0:
         4e:1f:0d:11:70:73:5a:1b:13:ed:e8:98:36:05:b7:b3:58:2a:
         54:ec:f4:3e:74:88:4c:a2:84:69:a9:a6:69:cb:aa:15:bc:2c:
         27:a4:a1:05:23:8d:55:85:c7:c9:33:62:fc:dd:95:4f:dd:af:
         6f:88:22:e5:4f:70:41:2c:c5:d8:16:3d:01:e4:7b:1a:48:83:
         22:83:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:39 2025 by rpki-client