Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
File:                     3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json)
Hash identifier:          Uwb/DhTOeLq2wsjpamvE590prZtw6RjVu9USNz/8iF4=
Subject key identifier:   96:63:8E:AF:26:56:AB:08:20:E2:97:DF:87:28:79:41:31:6E:73:A2
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328584ACE0BA685579CE8579EB65000
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     149020
IP address blocks:        23.131.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a6:85:57:9c:e8:57:9e:b6:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=c1be0397-1ab9-4634-97be-82a224d62a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:27:43:42:78:e3:e6:ca:03:da:ce:2e:cf:
                    a5:c7:75:d3:4f:75:ac:5e:37:e3:41:93:a3:4f:08:
                    c2:30:f7:9a:c1:32:3e:44:63:16:b4:1a:4f:6e:61:
                    c5:25:cf:24:fd:9b:0d:3b:08:8e:95:57:f2:3a:34:
                    9a:65:63:aa:66:a2:c5:a4:42:02:e2:17:87:0c:19:
                    10:b7:a5:37:8e:2e:1a:cf:25:54:fc:df:96:fb:69:
                    d0:58:25:0b:a1:7d:76:92:ea:b9:96:47:f1:13:29:
                    da:d2:33:e0:eb:5c:26:f2:39:64:01:ba:96:ff:25:
                    62:c8:75:2f:3d:41:60:cc:6e:84:e5:a0:2e:42:be:
                    32:6d:ee:ab:71:a1:29:fa:d1:0f:39:38:d1:7b:1a:
                    54:4d:13:ba:4c:79:99:b3:94:49:9c:28:f5:f4:34:
                    f1:94:ad:1b:1f:56:2b:d2:ee:9e:73:e8:c4:ed:ee:
                    f7:31:92:85:9e:2f:5f:e7:38:b0:1b:91:92:9b:a5:
                    6c:8a:f9:76:1e:af:26:47:bf:d0:ad:54:4f:68:3c:
                    d7:03:49:30:cb:20:28:13:b5:53:95:cf:ef:56:14:
                    5d:9c:b5:11:13:86:ad:9c:75:af:87:53:26:f0:08:
                    b2:ea:f2:0a:5a:2c:64:78:d4:c2:02:ab:93:4e:0a:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:8E:AF:26:56:AB:08:20:E2:97:DF:87:28:79:41:31:6E:73:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:fc:2c:f7:32:da:18:ab:c9:cb:d6:c0:25:d9:61:d3:08:
         b2:4c:b7:3e:32:27:05:e5:16:2c:89:1b:a0:c0:90:8a:c4:86:
         2a:3d:b9:4d:1e:87:8b:eb:7b:5a:86:70:f5:48:b1:2a:13:6b:
         84:d2:37:d0:6a:81:ca:f6:f2:d0:c2:02:a8:9e:5c:98:98:94:
         a2:a7:39:a3:91:ef:94:cf:f6:4c:ab:f6:c3:d0:d9:4f:2c:d7:
         53:01:fc:16:f3:35:ea:af:87:dc:c3:b2:cd:ee:34:98:87:20:
         a7:e3:c2:22:9d:b1:93:39:a8:41:11:31:30:e8:f5:a8:08:5b:
         f3:33:2a:46:4e:6b:4b:ae:06:f3:29:ac:05:ce:99:7b:da:c2:
         49:c0:f5:78:3a:d3:ba:7f:db:a9:cc:da:08:c2:88:d3:23:17:
         bd:03:f3:26:bf:80:06:43:0a:9c:3e:7d:f6:71:dc:24:96:74:
         e2:0f:b5:8c:2c:b7:07:35:ee:1c:b2:62:52:d4:9d:a0:52:e9:
         78:d1:1c:3e:ec:e8:7d:ed:e3:73:b4:14:32:47:21:3e:4f:ef:
         59:93:c0:d9:c8:7f:66:eb:f5:16:f8:9f:08:e1:4e:a0:f9:b0:
         2d:d3:fc:3f:a7:6a:dc:9c:a1:83:44:84:f6:2c:64:53:4b:e9:
         d2:13:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:07:42 2025 by rpki-client