Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d01a5d8-110a-3914-bc1e-e0558c414211.roa
File:                     0d01a5d8-110a-3914-bc1e-e0558c414211.roa (raw, json)
Hash identifier:          9wtc6E16pQeGGKUj2O0GhSXRUZfp1Qe6BEobF+K0WYg=
Subject key identifier:   68:70:F5:47:97:51:63:BC:F2:97:D9:A8:CC:B4:AE:52:16:6F:C7:D3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584AE1971CD06FC12E2721ED0580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d01a5d8-110a-3914-bc1e-e0558c414211.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     19157
IP address blocks:        23.86.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1c:d0:6f:c1:2e:27:21:ed:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=0742f14b-faed-437c-b9e3-7bb6dcf6c88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:21:a6:88:f8:a7:82:b6:9c:c8:21:f6:45:
                    59:f3:dd:8c:43:b9:3b:a1:3c:2e:15:f8:87:ed:d2:
                    20:d5:8f:ee:87:23:75:61:eb:90:a3:23:f5:73:ab:
                    5c:04:f9:b2:44:20:99:ed:77:b6:25:4a:42:fb:75:
                    99:37:30:21:02:9a:d6:06:d0:c2:e4:c5:eb:65:6d:
                    05:c1:aa:4b:71:3b:4a:02:75:a3:c7:0f:3a:db:b5:
                    6d:15:e9:e5:65:a3:d3:d9:2b:2a:5f:13:68:82:1c:
                    3e:14:bb:a8:df:cc:34:8a:fc:73:8a:32:06:61:28:
                    b3:8d:29:84:a5:17:0b:ea:31:b8:cd:ad:f9:2c:f2:
                    6f:90:1b:07:37:c6:bf:c1:8e:e0:fb:9f:80:f6:6b:
                    bf:67:22:da:82:60:d4:dc:8b:e9:f8:9b:49:40:a9:
                    1b:6b:a5:3f:4b:c3:0c:60:f9:92:ed:41:b9:f1:ef:
                    72:54:45:1e:0d:dc:74:e4:45:d6:bc:14:8b:a5:74:
                    89:aa:57:ef:95:56:d8:f1:82:78:95:17:33:4d:17:
                    81:c2:33:71:ff:0a:6b:47:c0:a6:84:15:ef:0d:ba:
                    da:31:0a:0a:33:09:30:48:21:d0:e9:90:cd:77:cc:
                    88:38:6b:0d:a9:2c:ba:ef:d1:ea:56:87:99:07:db:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:70:F5:47:97:51:63:BC:F2:97:D9:A8:CC:B4:AE:52:16:6F:C7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d01a5d8-110a-3914-bc1e-e0558c414211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:0c:fe:8e:25:3a:f7:74:c1:ea:bc:59:97:10:20:ef:d1:
         f6:a9:4f:81:e8:48:c6:fa:b8:ce:87:45:97:09:32:99:d1:0d:
         62:05:89:97:66:a3:de:c0:e6:44:d5:83:61:15:64:fc:eb:0b:
         f4:ba:8f:70:d9:bc:cb:95:f5:cb:7d:68:a4:ff:7a:53:ee:94:
         f6:47:4c:94:2a:7d:7f:ae:49:5a:08:9e:9a:b8:55:00:ac:db:
         b5:87:bc:33:d5:48:5f:8d:1b:a5:a2:74:7e:33:ff:f4:d1:ab:
         73:51:02:a1:ec:89:98:d5:8a:f7:92:ae:57:c0:bf:57:3c:4a:
         87:48:65:d3:d9:be:03:c1:4b:33:00:17:06:4a:fd:a1:27:61:
         df:9a:9c:5f:ae:cb:2d:41:5f:a5:2c:c5:84:98:a5:03:fe:ec:
         2c:1a:6d:33:32:b2:32:0e:b0:66:44:95:f8:80:da:9e:5d:b3:
         5d:8c:15:83:47:74:58:be:6e:1f:60:db:f2:74:a3:4c:ff:4e:
         ec:1b:94:ad:8c:47:a0:a7:d4:be:84:29:41:3e:9a:a6:c9:24:
         c3:ed:09:9f:82:60:d5:5d:f9:82:8e:29:c8:69:cc:9a:00:5d:
         9f:e2:81:84:ec:9e:53:9c:16:4b:e8:99:43:f6:8a:43:cd:ce:
         6f:cb:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:16 2025 by rpki-client