Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2a3300b-38ab-341e-b43b-8c7fda001317.roa
File:                     c2a3300b-38ab-341e-b43b-8c7fda001317.roa (raw, json)
Hash identifier:          aTG6L+pF/ovil81TXiw0TXNDcN7ul9WJC/8DWaMA5Jk=
Subject key identifier:   E1:34:2B:44:65:2D:AA:CF:E0:B2:95:9E:21:43:CD:C2:CB:5A:FC:89
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE0F39EB9E2EC222F2D2F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2a3300b-38ab-341e-b43b-8c7fda001317.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        23.251.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0f:39:eb:9e:2e:c2:22:f2:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=80ec9ab3-ee8d-4617-85d6-622ce6ec9311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:f1:d9:38:b8:2a:82:a1:e1:e5:da:bc:69:
                    52:82:e2:0b:62:93:87:e7:49:b7:38:3e:4e:96:c2:
                    00:c3:33:75:ff:eb:14:81:ed:70:78:67:dc:70:fd:
                    e5:0b:df:f8:83:29:0d:96:19:45:18:b6:ee:60:a9:
                    71:ee:f3:16:27:0c:af:12:23:cd:15:e0:8c:9c:0c:
                    de:1a:1d:5f:62:9d:aa:5d:a8:69:6d:1a:b3:1b:5e:
                    c4:2d:8c:aa:d9:28:df:25:ec:87:e4:55:40:c8:0c:
                    8a:f9:20:f4:da:fd:4a:35:d1:4e:31:4b:61:58:77:
                    a2:a1:f0:2f:ff:da:11:e1:35:0b:48:2b:87:21:b2:
                    84:d6:d5:c6:60:5b:0a:a8:64:93:0d:0a:e9:90:6a:
                    a4:b8:b0:c0:23:25:b3:26:1d:95:31:28:27:ff:c0:
                    ca:ff:e2:6c:6a:c5:d0:7f:70:7b:4b:13:55:1b:20:
                    5c:da:6e:e4:68:e3:7f:3a:2d:0b:7c:c3:49:e7:af:
                    a4:3c:0e:f6:ca:50:b6:c4:53:04:a3:ac:d7:7d:df:
                    0b:c2:a8:9d:29:f8:12:a3:56:c5:0e:5b:b4:25:f7:
                    ed:ce:a6:cc:34:86:76:52:88:9b:a9:e5:60:21:3e:
                    7e:29:af:57:65:fe:10:23:c9:fa:33:e5:8a:51:8c:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:2B:44:65:2D:AA:CF:E0:B2:95:9E:21:43:CD:C2:CB:5A:FC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2a3300b-38ab-341e-b43b-8c7fda001317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:9a:8a:8a:d9:90:61:ac:84:ee:84:24:74:a9:6f:10:51:
         1a:29:74:1c:f5:70:63:e9:e0:6a:36:ae:33:2e:c0:e6:53:12:
         96:5f:a8:a3:e1:8f:f7:ba:db:75:0c:61:07:77:e9:a6:50:83:
         51:43:a0:ba:1d:dd:19:07:22:ac:4b:ee:fe:38:93:9f:81:b1:
         61:fd:37:d7:ba:fc:ca:a2:18:59:7f:cb:79:9d:fe:1a:37:0c:
         a2:41:11:d6:4c:c9:a4:27:f8:bb:15:3c:09:22:8e:7b:ed:58:
         a7:ba:8f:ee:07:b3:de:c0:d9:07:1b:f3:a7:8a:42:ac:61:ec:
         12:14:1d:1b:1d:6d:c2:ee:55:9c:01:b0:4e:d8:88:a8:cc:e6:
         2a:f8:97:78:56:6a:67:df:36:ab:79:c6:9d:19:30:11:fb:a7:
         ce:f7:5e:c6:69:00:16:4e:70:1e:86:2f:2b:9f:47:ec:8a:eb:
         09:a3:46:22:43:31:81:82:2c:41:19:ae:81:e2:84:d4:fe:3f:
         e9:4a:df:a4:59:70:3d:64:33:0f:d2:7b:a0:29:04:8c:5e:aa:
         85:07:3b:c0:44:1f:44:17:0e:af:31:77:25:c5:6d:35:59:78:
         a5:f5:1f:bd:50:9b:5b:41:98:fc:9f:7b:e3:4c:93:36:6b:aa:
         13:66:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:02 2025 by rpki-client