Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa
File:                     13072588-b7e6-3051-b847-ffe2d33c2302.roa (raw, json)
Hash identifier:          9uV40t7A6fzV28p6FW5lppjMi6AOnbxM/GfoeKdg2Ak=
Subject key identifier:   F5:67:CE:94:92:C2:4E:06:27:41:10:C3:BA:AB:B8:A9:03:16:C9:AC
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584A612B12A13648EF03FD5E41C0
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        23.131.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:12:a1:36:48:ef:03:fd:5e:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=8ba67bae-18d6-430a-9b0f-56bd1cb375fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:db:f6:76:2e:b4:69:69:01:88:25:b0:cf:
                    43:c2:19:e7:4b:1d:54:e7:ac:81:a6:68:38:13:bb:
                    b0:69:17:6b:08:b9:46:72:bd:92:e7:7c:2e:5b:7a:
                    64:d3:13:ee:ef:1c:4f:5b:14:e7:fe:f1:86:ae:36:
                    d9:e1:8c:2d:d5:2c:c6:f6:95:9f:5f:ec:9d:42:22:
                    e2:48:4c:7d:5e:b6:fa:5d:20:26:0d:3a:4f:95:9d:
                    36:3d:5d:37:e3:be:ad:ce:d7:c3:19:44:59:17:81:
                    b5:7f:8a:88:82:43:bc:83:57:da:6a:1a:37:30:eb:
                    8f:b5:13:d3:1b:df:4d:58:45:43:c0:11:00:f4:a0:
                    9d:3b:cd:0e:be:7e:8d:21:6e:21:df:1f:3c:0f:de:
                    a0:e9:5f:0a:c3:38:ff:2a:c6:2a:41:73:bb:4b:20:
                    2a:35:03:56:ed:ae:cc:2f:b0:d7:7e:61:88:96:cb:
                    b2:e1:c4:e0:31:ce:72:d3:77:4c:05:98:ab:0d:2d:
                    d1:c7:24:01:f4:99:39:12:b7:1e:31:07:4c:f0:80:
                    ad:7f:43:4b:4d:65:62:6f:e1:ca:82:59:ce:a4:24:
                    8b:73:84:bf:ae:4e:50:82:df:c4:1f:1d:f7:d2:2c:
                    1e:79:37:f5:bc:b2:9e:ab:af:3a:b1:8d:84:af:00:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:CE:94:92:C2:4E:06:27:41:10:C3:BA:AB:B8:A9:03:16:C9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:89:23:b7:42:66:2b:76:ee:da:9f:c8:2a:d4:ae:72:61:
         88:1c:02:8d:1e:4d:49:82:c9:0d:99:39:e3:42:0e:73:8a:16:
         a5:2d:b8:ce:25:b2:45:ec:cd:36:46:d5:e9:a0:8f:0d:90:7f:
         14:63:08:74:5f:6e:75:5f:e4:b5:24:68:0c:15:55:e3:52:86:
         a1:d6:0e:5f:63:4b:03:34:d3:15:0e:d2:7a:b8:03:c3:b3:a2:
         b8:14:7f:54:21:dd:36:31:29:ec:87:84:9c:46:8e:df:46:36:
         76:f1:31:6a:3b:80:f0:b0:36:91:d5:0f:85:1a:a2:ef:1f:91:
         0b:3b:40:5f:e0:65:c1:a3:06:f8:64:96:5d:78:de:d2:21:37:
         78:df:3d:36:ce:06:5e:71:c9:1d:91:c5:f3:3a:af:e1:32:1e:
         66:f1:8c:2c:77:88:c4:2d:36:5c:89:c1:09:71:32:df:e6:e2:
         1b:6b:0f:07:69:9e:40:bc:19:d2:db:0f:9e:33:6c:0b:21:94:
         19:1b:de:44:99:c4:8d:a6:3b:39:ee:d3:69:61:08:2a:8d:d1:
         21:23:3b:a2:55:4a:62:3b:ce:b1:50:62:32:a5:1b:fe:65:39:
         11:11:6b:f9:30:bd:15:5f:a1:c7:77:53:0e:d9:69:05:76:dc:
         33:04:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:05:02 2025 by rpki-client