Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
File:                     c2790227-b2a7-3771-9257-78748f60cd1e.roa (raw, json)
Hash identifier:          osOU55gGWR8NS3Ai56L1H5n9iUjE1do74FPU5ZhJSBI=
Subject key identifier:   DB:8E:53:24:89:02:E2:62:50:38:76:3C:83:3A:C8:1A:3B:B2:D9:9A
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AF0F14ADA2AAB763D9BBAB1E0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     25855
IP address blocks:        23.147.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4a:da:2a:ab:76:3d:9b:ba:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=fee9e2c1-6bc4-4433-9d15-7cda5c82a8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:34:ec:8b:13:2b:24:35:2a:2e:f6:84:5d:
                    3d:47:09:c8:25:22:74:f0:ec:53:fd:27:49:64:10:
                    e0:70:67:af:08:12:c0:ec:88:a1:6e:50:6a:18:9a:
                    17:25:e9:65:2b:6f:2c:de:c1:9a:7d:09:c0:71:31:
                    89:58:61:3a:17:3f:a4:6b:e0:fc:2e:44:92:73:b5:
                    e9:f0:bf:74:8a:b3:bd:14:07:71:c8:90:2c:fc:85:
                    16:12:aa:2c:33:78:00:28:a2:38:bd:5e:fc:d8:c2:
                    94:17:df:bc:86:2b:bf:52:35:36:ac:36:17:95:d9:
                    24:10:85:94:59:26:01:6c:ba:e0:ab:59:f7:72:3e:
                    74:cf:3f:1e:24:20:db:d7:4d:35:e5:5c:00:ab:9a:
                    c5:fa:93:57:66:c5:8d:1d:ad:f9:14:90:8f:c0:f3:
                    99:3b:10:3d:41:15:6c:66:dd:f6:52:ea:de:59:3e:
                    bc:8b:7e:c0:23:ae:9d:f6:5f:5a:09:62:ec:23:d3:
                    43:f8:f3:60:7c:e6:57:62:0b:e5:80:77:fc:2c:fa:
                    81:52:f6:ee:93:eb:e9:22:37:5b:1f:6a:3f:d0:c4:
                    1b:4d:39:4e:97:5d:a9:af:01:a2:db:2a:ef:e5:ce:
                    6c:89:b0:37:1e:d5:77:59:d1:17:91:89:f5:7a:8a:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:53:24:89:02:E2:62:50:38:76:3C:83:3A:C8:1A:3B:B2:D9:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:32:19:73:11:1d:53:5d:37:a6:7b:f3:66:46:35:e5:d4:ee:
         7b:b3:d8:44:fe:0f:0d:c0:3e:2c:76:87:1a:ea:99:c9:f5:b0:
         33:64:da:57:44:b4:a0:1e:c0:be:22:09:c5:2a:8f:da:1e:d0:
         16:b6:59:d0:c1:53:5c:91:e9:15:e9:3a:e7:4e:2b:a4:e3:95:
         f5:1e:2d:d7:4e:e7:69:3e:4f:85:09:ac:0a:e8:1e:0b:2a:5c:
         ce:3f:62:11:61:dd:d8:bf:c9:94:11:c4:cb:88:70:9d:35:5a:
         24:34:ce:db:09:7c:46:ad:1c:d6:13:29:0e:37:64:a1:c2:40:
         40:21:08:92:d7:c0:a7:f9:bc:81:77:41:4e:fc:14:96:5b:28:
         c0:82:28:1a:87:a1:a7:c7:1e:61:4c:95:2a:bf:da:b8:cf:4c:
         b6:36:ba:d5:e7:24:a9:84:cb:ca:c6:6c:d2:4f:1d:55:2e:60:
         ce:9e:01:d1:5f:2f:72:0b:d8:47:70:84:20:d6:b9:24:d7:2e:
         06:b7:ef:92:2d:66:8f:e7:5e:22:4a:52:f7:d6:7d:eb:70:16:
         3b:14:66:6b:a3:35:b9:30:a4:22:c8:f7:3c:45:4d:49:8b:de:
         6d:d6:a7:ef:7f:81:61:c6:12:5b:a6:b7:86:b2:a0:28:98:8c:
         a7:fa:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:47:46 2025 by rpki-client