Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa
File:                     8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa (raw, json)
Hash identifier:          QSerEqvk5a4JhC+0iqAOWINYwq3J2lWJGqKmqkGtarc=
Subject key identifier:   21:A7:2C:8F:3D:F0:98:C1:D1:5E:17:6E:4E:0C:6C:CE:04:5B:14:E4
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584AD3A0EFC925E6680076583980
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     25820
IP address blocks:        23.83.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:ef:c9:25:e6:68:00:76:58:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=458a8477-08a3-45d3-a3f5-6b191e399e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:7a:85:37:d2:9e:eb:ea:20:59:27:37:0a:
                    13:bc:2a:9d:f3:bf:67:0a:e0:d7:fb:b1:39:a2:95:
                    c8:f6:29:fa:88:03:11:6a:ce:a4:94:1b:f4:50:43:
                    96:16:fe:a7:26:61:24:4c:49:b8:78:1a:54:92:b0:
                    51:a8:27:5c:4f:76:07:62:74:b2:7a:02:d1:9f:56:
                    e3:c6:0d:85:62:46:3e:7f:bd:64:52:59:44:07:d3:
                    fb:9e:77:73:0a:76:e4:c3:ed:af:e1:1d:c3:29:8d:
                    ff:ce:e8:04:17:9f:06:82:3a:bd:26:79:a9:01:80:
                    29:ca:d7:75:c6:48:6d:a2:95:47:75:15:3e:67:05:
                    fc:1a:06:d7:25:76:d0:39:14:6e:60:a8:16:0e:a5:
                    0a:79:6a:c2:ab:ec:4c:9c:12:a6:63:06:66:57:68:
                    f8:a4:39:fe:9b:4a:c3:6a:7e:f5:09:b6:75:06:f4:
                    cf:83:a9:8c:4f:0e:36:5a:4e:bf:98:78:45:24:fc:
                    5e:e1:ad:6b:c0:b7:1d:f2:4c:59:b3:68:48:3f:f6:
                    dd:5c:45:a2:2a:23:8a:20:41:95:66:5f:04:0a:2e:
                    ef:95:e8:02:70:68:43:36:da:a4:ec:33:dc:72:2d:
                    d9:a5:e7:8a:93:82:27:d4:a1:a7:61:2f:56:22:e0:
                    3f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A7:2C:8F:3D:F0:98:C1:D1:5E:17:6E:4E:0C:6C:CE:04:5B:14:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.83.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:27:2a:fb:6d:cf:ba:07:c7:ec:f2:ba:4e:82:3a:ad:89:
         52:31:01:01:1d:89:b7:5f:c0:8c:f7:82:4a:dd:1a:41:84:f3:
         95:62:c6:4a:2e:9c:d7:7c:9c:d9:7a:70:e7:fb:31:18:38:3f:
         3c:be:84:42:d5:4b:b1:bf:c3:10:60:8b:de:5b:a9:21:9e:c1:
         a4:3d:61:77:d4:de:e5:01:4f:84:8b:6c:57:5c:09:63:cf:14:
         5b:10:9c:20:5b:e5:42:d6:ea:99:e1:42:b8:d6:09:ec:c3:67:
         86:33:1a:a4:cc:4c:60:1b:8e:64:23:c6:e6:09:12:bf:99:08:
         88:8f:dc:00:cf:2c:11:3b:e8:5e:ad:6b:73:96:ae:24:7d:4c:
         9f:61:1c:4b:26:e8:9a:94:55:72:e7:31:d9:f0:82:81:af:df:
         9b:87:9a:3a:c5:7b:82:cf:50:52:14:30:13:a9:bf:4d:38:ab:
         e8:a1:b2:8c:53:8c:6f:3c:67:d8:37:aa:98:d4:53:1d:d5:c4:
         2a:15:b4:52:0a:54:18:80:e3:a3:59:97:5d:8d:2c:a9:d6:21:
         bb:42:87:46:b3:91:3a:dd:69:9b:b5:8e:b9:28:57:56:0a:39:
         54:b9:f2:7f:d9:23:37:59:f3:89:65:05:66:c2:6f:73:98:aa:
         24:7d:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:47:47 2025 by rpki-client