Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa
File:                     a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa (raw, json)
Hash identifier:          U8TsoSmSril2k8lpUlZ7xesKYWxSIed0lDCVT6bMxCg=
Subject key identifier:   B0:9F:81:71:9D:65:25:4E:C0:B8:1D:B7:4D:36:8E:85:48:D2:2B:3F
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F4328584AE72BB62A4AA7DC92DA470D00
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa
Signing time:             Tue 19 Aug 2025 01:00:32 +0000
ROA not before:           Tue 19 Aug 2025 01:00:32 +0000
ROA not after:            Mon 17 Nov 2025 02:00:32 +0000
asID:                     18779
IP address blocks:        23.247.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:2b:b6:2a:4a:a7:dc:92:da:47:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Aug 19 01:00:32 2025 GMT
            Not After : Nov 17 02:00:32 2025 GMT
        Subject: CN=eede93df-5942-47e7-ab83-c9268dfa75e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:1d:5b:72:bc:a8:43:d7:be:da:59:18:d1:
                    8c:8a:3b:eb:72:58:bd:1e:49:38:fd:ee:7c:98:13:
                    46:fb:d3:bc:5d:2a:14:56:7d:af:79:1f:e3:0d:29:
                    42:f6:f8:45:af:b6:10:e7:13:be:70:a5:22:a7:dd:
                    93:31:6e:5a:82:94:a4:90:a0:fb:9b:59:5d:5b:dc:
                    09:8d:0f:15:f3:85:94:4a:a9:31:86:5f:a0:fb:79:
                    b8:80:00:24:9c:a2:1a:c0:ee:68:3c:4a:7d:73:ca:
                    34:70:dd:54:bd:37:08:7a:5e:87:91:7c:3a:44:c5:
                    e3:ef:f2:6d:70:80:05:46:26:02:85:24:fa:12:e1:
                    03:66:30:27:7e:85:65:8a:be:1a:30:50:de:d5:fd:
                    e6:f9:f5:68:34:2e:a6:a6:b8:17:75:e3:4c:a2:97:
                    85:ca:cb:00:43:ce:75:26:a1:bf:08:c5:90:8e:4d:
                    bb:db:0c:39:18:c0:80:fa:dc:af:9e:92:51:fe:ff:
                    8d:01:fb:ba:5e:9b:24:6f:a0:34:b7:7c:4f:ef:e9:
                    8c:1f:6b:bf:26:48:e1:57:fb:f9:da:da:48:68:06:
                    1c:dd:ec:6e:78:32:65:83:df:13:92:66:5c:ce:68:
                    56:ac:62:7f:92:fa:61:c7:41:23:e7:79:b9:c9:85:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:81:71:9D:65:25:4E:C0:B8:1D:B7:4D:36:8E:85:48:D2:2B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/a46f9bd4-1176-3405-bfb8-30bdc7ecbb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:72:ca:57:a6:5a:a6:c1:5e:71:de:28:69:53:46:70:18:a3:
         f8:5c:be:8a:1a:a4:fd:ba:4a:1f:e5:fe:7f:eb:5a:74:3f:4c:
         6e:72:0c:27:55:21:e5:77:42:6d:05:8f:24:b2:dc:dc:9b:e7:
         19:79:08:e5:e5:ad:79:76:23:cf:6a:d2:05:02:33:0e:d8:5a:
         7d:d1:ac:21:9e:70:ad:89:0e:fc:ac:3e:e4:c6:c9:e1:1c:51:
         b2:31:34:b0:81:d6:02:cb:e7:4a:62:cd:44:7e:0b:bb:bc:d1:
         a5:94:25:68:a3:31:90:3b:5c:ae:fe:b8:91:81:d9:b7:a3:00:
         fa:5f:df:10:a4:57:cf:82:6a:92:37:ff:89:b2:f0:ee:aa:d6:
         e5:93:06:99:b6:d1:fa:0a:eb:46:a8:9f:e3:63:f5:bb:dc:e1:
         2a:f0:81:22:85:1d:e5:26:d8:72:17:6a:96:58:a2:e9:f2:1c:
         4d:92:d7:eb:a8:96:b2:36:22:f7:99:ab:5f:7e:12:7e:b3:dc:
         90:0b:5c:b7:bc:13:22:35:0d:ad:7f:fb:56:15:1c:d0:f5:b1:
         ce:7c:89:4d:dd:2b:37:87:5a:98:90:75:2a:56:88:70:35:6b:
         91:01:d7:eb:a8:f7:39:38:d8:a5:aa:5c:75:3f:94:01:08:69:
         d3:55:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:05 2025 by rpki-client