Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
File:                     86486939-09ae-3b8e-9df3-248401e6ffe2.roa (raw, json)
Hash identifier:          eLgRRlNdYAKFM2fXWsh4Gbxz3EQi9G0WplEHEcuLutY=
Subject key identifier:   8B:47:6E:32:D9:61:FE:D4:43:7C:FC:16:2D:F7:2C:C0:2A:DF:D1:D6
Certificate issuer:       /CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
Certificate serial:       010D0C9F4328584AC9DBA6CAA18CCD8484B3C220
Authority key identifier: 73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     400465
IP address blocks:        23.132.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a6:ca:a1:8c:cd:84:84:b3:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=e2729ed7-2011-42d0-86a6-c3b76278df7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:2d:fa:a3:01:67:f9:c1:2b:4c:ca:2f:ec:
                    bf:35:f5:d6:7e:3b:bb:80:05:76:c7:83:8d:7c:23:
                    22:3a:64:f0:d6:26:22:4c:7a:c8:04:51:1f:55:a6:
                    84:42:03:8e:4b:20:f1:48:8e:53:12:e7:1e:76:c7:
                    10:85:07:2b:36:9d:9c:14:01:13:fb:19:ef:2b:a0:
                    f2:98:3a:12:5f:95:f2:37:98:4c:50:4b:d1:44:6a:
                    4a:3c:26:33:d6:49:3c:52:a3:3a:0d:19:81:bd:cb:
                    e1:4c:b4:d2:aa:1e:e6:e5:fb:4e:1a:d1:92:21:8f:
                    ce:49:13:de:7c:26:ba:71:6e:8a:44:9b:75:03:86:
                    2b:5c:d7:70:ba:3c:2a:b1:82:ef:c9:81:51:28:14:
                    2f:15:31:ea:c8:44:ce:f7:28:92:8d:b8:6b:1b:a0:
                    dc:e8:44:ae:14:c5:d7:9b:4d:b7:1c:e6:9c:08:6f:
                    42:0f:38:46:1f:99:a9:be:ac:64:1e:05:51:7d:3d:
                    f0:f1:9d:d2:5f:95:04:53:a8:64:c4:3f:4f:1a:36:
                    dc:e4:ec:b1:4a:06:5b:5e:8b:10:dc:9d:dd:99:7f:
                    1b:30:4d:0b:47:d3:2f:5a:cc:59:36:d2:45:ef:44:
                    f5:8d:a0:94:c3:5c:2b:eb:ee:48:3b:9b:04:e4:ce:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:6E:32:D9:61:FE:D4:43:7C:FC:16:2D:F7:2C:C0:2A:DF:D1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.crl

            X509v3 Authority Key Identifier:
                keyid:73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:20:8f:21:c9:80:fc:ef:d5:68:b5:42:90:d7:1d:a8:bd:
         bf:23:cf:ac:40:6f:aa:65:cb:9e:0d:29:bf:67:c3:6e:28:7e:
         2d:55:7e:6d:83:f5:3f:00:5b:b4:dc:2d:d8:04:0d:da:a2:36:
         24:cd:27:e4:85:c8:7e:79:9d:76:8b:18:6d:d8:46:26:09:2e:
         fe:74:2e:1e:4d:46:e7:98:92:b3:fa:d0:71:81:f6:71:7d:94:
         2d:6f:5a:d9:f1:56:4c:9e:98:a0:c8:e0:cd:ca:ed:d1:66:0f:
         24:91:f6:28:24:11:6b:76:c3:e1:06:d9:f0:ae:af:ec:81:39:
         9b:b6:dc:80:55:e0:c3:e1:91:ce:ce:d9:04:ed:d2:46:1a:c1:
         58:36:e1:09:91:18:cf:74:7a:ab:0d:bd:5f:8b:8c:e8:8b:0e:
         74:57:e5:17:4d:fc:54:82:94:ed:0b:d7:4a:5a:01:0b:1a:2b:
         da:af:4a:74:b9:e1:0d:90:21:96:55:d8:05:01:6c:0b:74:e1:
         72:73:ba:c9:d8:57:fb:6e:09:df:20:a6:ae:21:96:2d:e4:cb:
         d7:3e:ed:75:33:0e:46:45:2e:6b:08:f9:50:37:bf:f3:4a:66:
         b2:c6:72:c0:42:0f:d5:e6:a0:51:7b:ca:9c:62:81:e4:6e:03:
         c9:93:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:24 2025 by rpki-client