Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
File:                     8299b204-4012-3a46-baa8-ef161ee859d5.roa (raw, json)
Hash identifier:          Zj3jC7+HiuSawiZld9k+N7qo6zNGg7zsYaZgSuogvs0=
Subject key identifier:   AC:84:BC:DC:3C:AC:D0:BC:13:A5:C5:FE:DF:A7:EE:5E:2D:6B:39:56
Certificate issuer:       /CN=8785615b-4ba8-49c9-a63b-755d5560474a
Certificate serial:       010D0C9F4328584A43DAF56584B6903077800470
Authority key identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     20473
IP address blocks:        23.136.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:f5:65:84:b6:90:30:77:80:04:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8785615b-4ba8-49c9-a63b-755d5560474a
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=746eaaf5-c98c-4415-b10e-3fae1b8e566b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:d1:38:d3:9f:0c:8e:13:e8:b4:a8:d7:c5:
                    73:36:a8:86:57:d7:2f:77:8f:fb:8f:01:a2:36:83:
                    73:9b:e1:e0:49:ed:98:e5:7a:2f:6f:42:04:6f:66:
                    7c:90:f2:8a:4c:55:c2:70:9e:48:22:c8:1b:b5:c8:
                    cb:20:c6:be:b6:fb:d2:b5:ff:56:72:07:60:6c:e8:
                    04:2c:2c:4a:57:72:a6:11:94:73:0f:27:28:1d:8f:
                    dd:bf:a3:2a:ab:37:74:bb:14:86:87:8f:5a:93:e8:
                    ac:87:ae:32:ce:45:91:6b:2d:af:c1:f3:a7:84:c0:
                    1d:0e:0d:08:26:c4:82:0a:ad:33:67:81:3b:f8:e6:
                    1a:e1:5e:f7:f6:bd:2f:4e:af:2f:9f:49:4a:9c:fa:
                    e6:bb:35:c8:3a:c9:49:9c:4f:b1:ad:2b:af:d6:9f:
                    60:e2:9c:49:71:c8:2e:d3:5b:cf:a0:be:2d:63:85:
                    0c:1f:9d:2b:b5:c1:48:9d:28:be:08:8d:13:ff:6f:
                    6d:a1:25:65:ce:95:2f:3d:b0:c5:dd:fd:f1:97:02:
                    5e:e2:b4:2b:30:97:18:7a:9e:39:c8:d2:b4:de:57:
                    2c:f5:24:a3:7e:d6:65:1a:c1:d9:23:83:ef:7b:6c:
                    ad:21:32:5a:2e:fa:69:01:3b:b6:40:10:2e:bd:20:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:BC:DC:3C:AC:D0:BC:13:A5:C5:FE:DF:A7:EE:5E:2D:6B:39:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl

            X509v3 Authority Key Identifier:
                keyid:9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:81:de:07:78:2d:e6:be:ad:4e:05:db:b6:49:10:52:3e:c6:
         30:22:30:85:9b:26:8c:d8:f9:30:38:d4:3c:07:72:9b:8f:76:
         67:af:e8:62:7c:b6:e2:9d:74:5b:ff:48:1e:21:e5:86:31:64:
         0e:25:65:77:ff:d2:e0:3c:b5:62:d2:11:c0:83:37:3c:99:4b:
         85:2e:03:9e:6f:fe:9f:b0:b7:31:46:2f:cf:3e:59:b1:ec:1f:
         8a:31:ca:3e:bb:0e:95:8d:04:7e:e4:46:ad:1b:e5:da:48:c3:
         54:8e:41:e5:2a:12:48:90:eb:24:9d:59:d1:44:96:dc:21:8f:
         b3:48:a5:09:87:d3:a0:ca:9e:5d:d3:78:e8:d5:39:21:4b:c6:
         08:98:00:3f:9d:7c:28:70:78:67:f2:d7:7a:4e:6a:50:ec:ab:
         cc:2c:63:b8:86:3a:e9:28:71:e2:de:e2:1a:ca:f0:6a:b1:ed:
         1f:a4:3b:5f:bf:9e:a7:01:06:71:03:f3:c7:a0:85:f4:12:e5:
         60:a9:9d:98:53:51:a7:54:98:11:78:5c:3f:6f:6c:25:78:64:
         63:56:6e:60:09:dc:e1:0b:b8:21:ac:65:b6:45:36:d4:c8:f3:
         e9:c7:42:12:62:fb:a4:29:92:cd:70:3a:3c:48:26:96:e5:30:
         20:cc:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:38:40 2025 by rpki-client