Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
File:                     9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa (raw, json)
Hash identifier:          Vq3CKcn38qZM2dHAHFTPMLLijUvBaHHiJosyK2V8iOA=
Subject key identifier:   5E:9D:FE:C1:8C:FA:63:DA:0E:AA:DC:70:23:C5:93:BF:BE:A5:C0:10
Certificate issuer:       /CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
Certificate serial:       010D0C9F4328584AD7D11DB87583D07471DA8BB0
Authority key identifier: 58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     53680
IP address blocks:        23.176.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1d:b8:75:83:d0:74:71:da:8b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=592d83f0-293b-4063-bba9-97555f2e41b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:4e:e4:7f:a1:67:20:5c:fa:70:a0:e9:0c:
                    5a:bf:d6:f6:dc:df:38:3e:3e:d4:e1:3a:a8:b6:b5:
                    22:82:58:8e:cc:fd:2f:19:e4:99:a2:a8:5e:c5:35:
                    3a:61:7b:a4:e7:46:0f:4c:8c:94:98:4f:c1:63:b6:
                    51:05:43:a4:08:02:5e:4d:c1:7c:d4:80:b0:fe:71:
                    44:41:10:b7:c8:76:ab:51:db:96:7a:7e:00:ca:b8:
                    e2:6e:4b:b7:02:e7:09:f6:ab:84:64:2a:fb:cf:32:
                    f9:8e:5a:f3:25:41:59:3a:e0:19:ea:33:82:43:64:
                    ab:79:bd:c8:03:9f:78:2b:68:c0:ab:58:75:c7:e6:
                    8a:8a:ae:4e:81:8a:36:13:0e:10:38:17:ee:58:90:
                    51:15:5e:5f:c0:cd:9b:70:a8:fa:4e:25:4a:df:1c:
                    79:24:36:bc:2d:76:b9:a7:ee:23:6d:69:67:9f:46:
                    de:c8:75:e9:c9:1e:40:d9:04:f2:99:56:a7:3d:d0:
                    ef:62:2c:cd:60:ad:71:a4:13:97:56:8d:61:03:d7:
                    a6:8e:d5:bc:ec:1a:d8:59:f7:de:51:63:62:1b:3e:
                    9f:fd:8d:89:6b:04:34:c5:f6:2c:c5:81:f5:c9:ca:
                    2d:52:8d:62:78:67:c3:5c:9c:cf:c7:eb:79:c9:97:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:FE:C1:8C:FA:63:DA:0E:AA:DC:70:23:C5:93:BF:BE:A5:C0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:7a:df:22:c8:b8:14:1e:80:56:7e:a2:0b:01:b3:b6:4c:
         f2:55:6c:58:ec:ef:a9:6b:a9:02:f7:c7:79:29:b4:9a:ba:cd:
         d3:74:74:e8:21:d6:d8:46:bf:5a:ab:b3:86:a7:a7:7f:d9:85:
         aa:a0:61:d1:be:d7:9c:49:76:c6:9a:0a:f4:bc:c1:2f:64:d0:
         70:9d:25:b8:7c:4e:1c:e2:ca:ed:95:06:f9:d4:49:d0:d5:85:
         dc:99:1b:2e:96:9e:35:be:97:56:03:dc:12:98:88:f5:b4:d5:
         68:9b:68:8b:1e:9b:ff:60:02:7a:9a:df:9f:2c:38:89:a3:5a:
         a9:f9:5b:a6:e1:4e:f4:e7:12:77:15:fe:8e:38:c7:f7:14:d3:
         b3:b1:aa:42:f9:62:73:41:c2:73:f8:e4:8d:27:99:18:54:23:
         31:ac:22:99:3b:34:82:d7:44:88:37:0a:a2:4d:a9:d0:55:1f:
         76:83:ec:d0:87:20:3b:04:29:c4:8c:ee:d3:43:e4:ec:ca:63:
         22:3e:31:91:7a:66:c8:3b:28:39:c9:1e:72:e6:ef:96:b6:1d:
         09:62:b9:85:38:8e:f9:ee:f1:2d:40:51:01:0a:4d:81:0b:4e:
         af:e1:d3:b1:2d:e7:9f:25:91:01:4c:7e:94:44:5a:1f:cb:61:
         50:e0:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:27 2025 by rpki-client