Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077/57c703fb-8f31-3ee7-b7b0-3ada72fab8d9.roa
File:                     57c703fb-8f31-3ee7-b7b0-3ada72fab8d9.roa (raw, json)
Hash identifier:          h85GKiNrgxr/i5NWRd3+by0XYbeQQsFsRSsqGhVCXc0=
Subject key identifier:   42:37:9F:46:91:3D:2B:F1:52:A1:F5:74:FB:5B:9B:91:82:D6:B4:8D
Certificate issuer:       /CN=905570ee-7734-4e53-8eed-3c8f825c8077
Certificate serial:       010D0C9F4328584AE9F680135AA65614498BBE80
Authority key identifier: DE:75:73:61:49:A0:99:B1:D6:F6:D3:E2:1E:5C:D2:39:42:C8:2D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077/57c703fb-8f31-3ee7-b7b0-3ada72fab8d9.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     214483
IP address blocks:        23.139.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077/905570ee-7734-4e53-8eed-3c8f825c8077.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077/905570ee-7734-4e53-8eed-3c8f825c8077.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:80:13:5a:a6:56:14:49:8b:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905570ee-7734-4e53-8eed-3c8f825c8077
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=e2bb3e47-a133-4f08-bb36-aba4010274c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:c1:99:be:49:b0:a3:58:57:b2:c3:11:94:
                    05:fe:d5:c6:16:af:ad:b1:71:d8:4a:13:32:af:30:
                    7f:16:cb:0f:44:a1:f0:77:ca:af:30:fa:6b:8f:87:
                    f9:05:eb:50:c6:0c:4f:a2:b1:d6:76:ee:e6:97:9a:
                    1f:50:73:5e:7e:ed:34:b3:88:c8:75:b1:bc:bb:54:
                    bd:75:b6:b6:01:76:13:45:92:fd:3b:6c:f5:1a:b7:
                    50:26:0e:bd:75:74:3c:64:cd:48:14:df:6f:af:06:
                    71:6e:69:86:ae:f3:b4:52:ac:87:99:90:90:d6:68:
                    2e:92:9f:f3:79:55:d7:1b:a0:30:71:70:d1:a8:2d:
                    21:d2:84:40:c6:27:10:30:92:bb:f2:50:48:36:93:
                    23:f6:11:5c:62:66:7f:aa:a8:0b:80:a4:4f:80:af:
                    2a:fd:9c:2f:b6:c9:b6:69:dc:bf:c3:69:fc:d0:89:
                    eb:7d:1c:7b:96:7f:f3:c2:6a:f7:74:04:02:24:4a:
                    9e:97:0e:78:ac:6c:43:c4:a3:a8:0c:05:64:0f:27:
                    08:64:ca:af:52:2e:03:fd:de:21:05:69:7b:66:c5:
                    9d:cf:ee:ef:1b:92:34:89:60:22:fd:d2:a2:c3:73:
                    69:4a:5c:30:dc:82:83:dc:8f:00:66:bb:5a:12:f2:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:37:9F:46:91:3D:2B:F1:52:A1:F5:74:FB:5B:9B:91:82:D6:B4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077/57c703fb-8f31-3ee7-b7b0-3ada72fab8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077/905570ee-7734-4e53-8eed-3c8f825c8077.crl

            X509v3 Authority Key Identifier:
                keyid:DE:75:73:61:49:A0:99:B1:D6:F6:D3:E2:1E:5C:D2:39:42:C8:2D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/905570ee-7734-4e53-8eed-3c8f825c8077.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:80:5f:ca:a4:78:2c:0d:59:8c:86:18:13:13:02:f3:92:f1:
         7c:24:13:52:b8:a3:1a:03:79:f1:3c:8b:78:d3:dc:15:96:92:
         f3:11:c6:00:91:47:03:9c:0c:86:9b:43:b1:4a:b6:dc:c6:62:
         0f:6f:42:f6:84:da:9b:16:ec:16:3e:d4:6b:51:0e:b8:ca:91:
         60:78:87:01:11:09:45:fd:8e:c6:70:33:ba:97:d3:11:df:4b:
         9c:7f:0b:b9:c6:dc:a2:bd:53:c7:46:59:93:9b:81:8b:ba:67:
         8f:c9:31:ef:42:fb:5f:15:95:2c:f2:e0:5c:bd:16:e5:d6:5f:
         91:9c:e5:16:94:9e:d0:69:d7:da:52:12:0c:ad:73:49:db:1d:
         5e:26:43:6a:16:40:08:50:b9:27:7d:84:43:0f:7a:53:1c:82:
         8b:f7:c9:a0:c0:35:1f:b2:f7:44:d6:3c:0b:1c:c9:47:6f:5e:
         0c:e9:cc:ab:30:3d:d4:45:4e:6e:26:e0:1e:5e:31:f7:19:21:
         a5:5a:fd:e5:90:41:e9:7f:5c:83:f1:e6:f0:59:1c:b5:b0:f7:
         be:01:16:55:9b:cb:6a:0d:ea:dd:21:04:94:26:ca:4b:dc:f1:
         fc:bd:cd:41:c5:89:13:f3:2f:2e:8c:58:49:5d:12:b1:47:51:
         f8:95:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:55 2025 by rpki-client