Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa
File:                     58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa (raw, json)
Hash identifier:          MPs8TBSr5JrrYSehGkUjo0ejwDfcsmpUp1cyRGyWjSM=
Subject key identifier:   22:93:D0:21:EF:FB:3A:88:C8:8A:1B:D6:72:DC:1B:95:71:B6:CF:E3
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F4328584AD23C32C4BCBE9446D6D290A0
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     40065
IP address blocks:        23.154.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:32:c4:bc:be:94:46:d6:d2:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=73c75e5d-8194-4812-b39c-c3d28faec187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:84:c4:b6:bb:20:e2:5b:12:41:eb:f5:15:
                    6f:73:52:e5:5f:8f:27:54:a5:e7:31:06:69:df:f0:
                    64:c5:cf:26:11:a7:e5:d8:b6:26:9c:da:60:41:9e:
                    5f:68:1b:ce:5a:1e:34:e9:d0:c8:05:02:74:2b:7d:
                    2c:da:fb:34:1c:01:a8:3a:8e:13:8f:c1:b2:f1:41:
                    f3:05:6e:6a:ff:e9:6b:69:37:3c:f7:be:da:ea:f1:
                    20:7f:19:34:a1:0f:eb:fe:e0:33:63:53:4a:b0:55:
                    c2:33:65:93:4f:de:0a:00:82:a0:2f:f1:03:3c:a2:
                    f8:e1:52:3d:21:90:cd:13:34:dc:f4:de:52:e5:c5:
                    08:ad:33:39:42:a2:5b:f7:5d:ae:4a:7b:0d:e0:fb:
                    3c:ea:9f:79:49:26:97:c8:71:71:8c:b1:7f:55:14:
                    70:e8:54:60:3f:4c:63:cb:52:b6:65:4b:8a:c3:d9:
                    bd:b4:a8:46:1d:6d:88:99:be:27:f4:2c:e4:31:7c:
                    89:87:7b:88:18:05:91:ad:fb:21:2c:69:b3:79:fa:
                    d6:2b:1b:bd:28:e9:6d:8d:5a:1d:76:37:0a:b6:a5:
                    f6:5d:e7:e7:cc:55:31:3d:e8:db:1a:54:33:89:5d:
                    80:77:b7:61:eb:17:eb:a8:49:a7:10:93:fa:91:83:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:D0:21:EF:FB:3A:88:C8:8A:1B:D6:72:DC:1B:95:71:B6:CF:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:b7:c9:e2:ff:25:a4:a3:1a:ef:23:45:86:1c:21:a2:a3:
         f3:67:81:1a:68:00:28:97:21:56:06:06:4d:7b:5f:78:e0:b5:
         1f:b8:8f:6d:a6:f8:60:19:31:90:33:f0:0b:60:82:c2:d0:1b:
         59:21:53:4c:13:1a:d5:4c:00:8a:99:77:1a:ea:da:68:59:be:
         89:c2:9e:f3:96:e1:cf:57:12:b1:ba:99:de:70:05:58:17:c5:
         c5:12:e9:7e:d9:68:87:18:68:79:02:a5:f8:2a:f4:3a:97:7f:
         52:e2:ac:1d:cb:67:74:91:50:5e:0f:36:34:ea:08:73:13:fd:
         ee:26:22:3d:9e:d6:1e:62:cf:94:fa:fc:d8:4d:54:20:2d:dd:
         5e:de:42:7b:7f:c3:bd:74:6e:aa:5a:d7:87:c7:4d:53:d9:19:
         22:f9:99:e3:51:5c:88:8e:a9:b7:18:ea:2c:7e:0a:3b:98:03:
         f4:b6:79:c7:37:e9:0d:69:6f:b2:ae:0e:e9:29:a6:e2:5b:8d:
         9a:8f:fb:b1:30:4a:dd:41:ed:f0:c5:4d:69:a7:dd:97:44:86:
         3e:16:94:94:73:40:04:f1:03:22:40:3c:77:ec:84:88:3e:2e:
         b9:99:10:48:44:c8:0e:f5:db:cd:c8:a8:58:be:b5:1e:0f:b1:
         5b:c6:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:57 2025 by rpki-client