Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
File:                     acd658b8-634a-338a-a46b-a493a731bb64.roa (raw, json)
Hash identifier:          Hs+AMMJq1y7fvSPKL7mST6jmPEaKLoDvZVexvNZtJsQ=
Subject key identifier:   31:A1:10:A6:4B:25:C5:DF:F4:B3:4A:DC:5C:FF:99:33:76:5B:DF:21
Certificate issuer:       /CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Certificate serial:       010D0C9F4328584AE0311F5A0BE5BB7DD027B900
Authority key identifier: 3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     398196
IP address blocks:        23.147.208.0/24 maxlen: 24
                          23.147.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1f:5a:0b:e5:bb:7d:d0:27:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=90668089-c1be-4583-b664-50032b3701bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:49:d3:66:0a:da:f3:33:c5:61:0c:57:e8:
                    24:12:dd:c4:cd:55:d5:f3:6d:7f:12:7d:63:13:94:
                    fa:35:3a:c4:65:c0:b2:94:d6:ce:a3:c8:26:fb:8a:
                    b2:49:ee:06:b0:66:86:93:ec:c6:f5:85:84:17:e7:
                    95:ce:18:b1:1c:a4:de:ce:57:c0:da:47:54:96:da:
                    7a:4f:bd:d2:6e:0f:2c:86:0a:0e:7e:55:db:c4:d6:
                    4d:0e:92:a0:26:76:4f:7d:92:09:a9:7e:5e:ce:42:
                    68:28:d5:28:2c:7e:91:70:65:d3:b8:02:0e:82:9e:
                    cf:63:ea:0d:6d:c5:ce:65:09:a9:61:4b:8e:86:30:
                    eb:9b:39:81:65:74:81:7b:e2:15:8c:49:b4:18:9c:
                    e8:b9:f6:5b:39:43:17:94:6a:1d:0d:83:69:d7:a2:
                    41:e2:1f:64:8d:0e:1c:8b:02:e4:4a:af:23:2d:b5:
                    9a:82:b0:92:0b:a0:a5:7f:7a:d4:f3:6c:74:eb:28:
                    fa:11:eb:50:f4:de:26:67:18:c8:87:2e:04:7b:e1:
                    17:eb:3f:e4:9c:72:af:c2:ba:3f:0f:fd:6a:d6:c2:
                    e2:69:0e:32:58:bf:6f:98:6b:b4:18:c8:8b:94:5d:
                    f1:ff:e6:c1:9f:14:b0:5b:25:d8:07:fe:f6:79:fa:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A1:10:A6:4B:25:C5:DF:F4:B3:4A:DC:5C:FF:99:33:76:5B:DF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl

            X509v3 Authority Key Identifier:
                keyid:3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:45:87:a9:4c:e3:f6:64:72:fe:59:b6:a8:3e:f5:74:80:
         1a:65:00:f2:27:0f:f6:39:37:86:ed:1b:97:1b:0e:e7:23:54:
         7a:85:d6:6f:17:0d:46:f3:61:c8:f2:e7:17:35:b4:bf:59:68:
         f5:c5:b1:88:1e:3b:29:09:a3:25:07:c7:2b:2a:e0:ee:76:1d:
         6b:9c:49:2e:5a:32:57:c3:47:00:6a:22:b5:4f:70:a2:52:66:
         fe:88:59:21:e0:1f:fd:54:44:f1:01:f1:23:e5:8a:fd:76:bf:
         b9:8f:f4:fc:6c:20:be:7e:79:b9:3c:7f:0a:dd:93:ed:bb:a6:
         bd:9b:d0:3b:28:23:12:0c:1a:31:a5:99:04:5c:5c:42:36:cf:
         c1:89:5e:2d:d4:dd:e9:91:83:ba:97:cf:f5:5f:64:d6:91:40:
         0d:14:71:6d:20:48:cb:11:31:0c:c8:bd:11:e8:57:a5:0c:45:
         84:b7:50:58:ee:27:59:a9:b1:ab:27:0f:4a:4f:05:1a:ea:96:
         79:ae:2e:d4:e3:bd:6c:1c:54:3e:00:47:17:1d:b3:26:d3:f5:
         5b:38:52:ad:55:d6:ea:08:13:32:ff:f0:8e:fd:d9:b5:20:a6:
         e7:2f:01:a2:8e:68:09:cd:dd:cb:66:d4:c6:ad:28:dd:01:4c:
         49:16:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:15 2025 by rpki-client