Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1/90de63d6-9afd-3195-bfc9-b204311b1762.roa
File:                     90de63d6-9afd-3195-bfc9-b204311b1762.roa (raw, json)
Hash identifier:          hMMmUKJG3VyDSV0v/cTMjM6QuI4Svj3xkHtR7ODF+BI=
Subject key identifier:   75:09:88:1A:E1:2C:DD:B8:E5:09:07:37:95:29:02:27:02:DC:FE:BB
Certificate issuer:       /CN=74d37fff-24f7-4942-9bcb-6fbcab752fb1
Certificate serial:       010D0C9F4328584AC44642552A5C4356D8F4A2C0
Authority key identifier: 51:59:F4:62:CB:37:E6:C9:59:4D:3D:BB:D8:F7:C8:EF:7D:BD:89:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1/90de63d6-9afd-3195-bfc9-b204311b1762.roa
Signing time:             Wed 06 Aug 2025 13:00:42 +0000
ROA not before:           Wed 06 Aug 2025 13:00:42 +0000
ROA not after:            Tue 04 Nov 2025 14:00:42 +0000
asID:                     2914
IP address blocks:        23.135.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1/74d37fff-24f7-4942-9bcb-6fbcab752fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1/74d37fff-24f7-4942-9bcb-6fbcab752fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:46:42:55:2a:5c:43:56:d8:f4:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d37fff-24f7-4942-9bcb-6fbcab752fb1
        Validity
            Not Before: Aug  6 13:00:42 2025 GMT
            Not After : Nov  4 14:00:42 2025 GMT
        Subject: CN=13b035ab-ed5d-477d-8feb-1d04b3071f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:44:1a:a6:10:d2:b3:73:d4:d6:e9:7f:e2:
                    a8:b2:6e:78:54:28:dc:c1:1d:e2:51:e7:5b:34:56:
                    3e:06:2c:d7:a3:59:e7:df:c8:0b:d4:4e:bd:9c:9b:
                    60:8b:31:2e:f8:a7:83:ca:31:5e:68:19:92:ae:bd:
                    f5:43:aa:8c:84:46:ea:32:65:24:a4:36:8a:7d:74:
                    28:47:68:69:04:ae:12:ad:c6:c0:2a:ba:63:6f:b1:
                    e0:de:a2:44:57:1e:5f:5a:25:7c:72:eb:53:47:28:
                    4e:f6:e2:11:bd:ff:7a:9d:01:af:6b:c9:ef:e4:00:
                    49:34:67:0a:e6:74:39:74:d7:08:00:a1:be:dc:dd:
                    88:5f:d8:d3:0f:01:f5:fc:48:94:98:44:1b:35:d7:
                    4c:af:46:f0:0c:3f:07:3f:b7:2a:a6:aa:70:09:49:
                    5f:33:94:19:86:2b:d7:02:45:83:01:5b:5c:3c:f2:
                    43:a0:0a:5d:74:9f:29:b2:28:8e:03:02:de:1e:ae:
                    65:00:af:97:9d:81:3a:a9:36:d2:a1:9a:52:31:a4:
                    55:3c:34:16:5c:d5:00:6d:d9:07:97:10:6c:80:8b:
                    e8:a2:16:ba:d0:dd:f8:39:32:1f:db:9a:e8:83:51:
                    5e:8f:40:fc:55:10:79:66:83:28:00:85:83:26:52:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:88:1A:E1:2C:DD:B8:E5:09:07:37:95:29:02:27:02:DC:FE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1/90de63d6-9afd-3195-bfc9-b204311b1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1/74d37fff-24f7-4942-9bcb-6fbcab752fb1.crl

            X509v3 Authority Key Identifier:
                keyid:51:59:F4:62:CB:37:E6:C9:59:4D:3D:BB:D8:F7:C8:EF:7D:BD:89:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d37fff-24f7-4942-9bcb-6fbcab752fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:8c:16:66:2d:22:64:fd:4d:45:b7:0b:e7:f2:cf:14:e0:
         0e:5c:ab:d0:6d:ec:84:74:98:1f:7f:7f:63:51:37:0c:ca:5d:
         99:10:5d:11:22:0a:98:19:01:b8:a2:51:77:ac:c8:e2:9e:0b:
         47:7c:4d:73:bc:2e:ff:5f:18:68:b8:bf:5c:f4:e0:f2:78:74:
         2d:fa:b1:5b:0f:46:e4:74:4e:ee:63:f0:5a:e3:57:be:9c:53:
         52:0d:e3:10:96:09:1d:fe:9d:46:b1:25:aa:6f:18:90:ef:d8:
         41:c3:cf:71:fa:59:d1:ce:25:44:2d:1e:e3:0a:d7:15:9d:fe:
         75:33:95:67:fb:1a:eb:bc:30:7d:87:98:cd:16:df:03:09:94:
         d5:ba:ef:35:d7:45:35:d1:ad:dd:03:d2:12:cb:ee:eb:42:27:
         56:2c:f9:34:cb:f4:b5:51:85:b8:57:01:c2:0b:50:09:ed:35:
         b0:e8:22:29:c0:df:0b:6b:30:4d:07:f1:6b:a8:cd:1b:63:09:
         c3:5d:ab:89:12:60:75:93:97:1d:a4:05:7f:28:13:e9:37:93:
         04:71:11:c8:ff:bc:d7:3a:ea:63:18:78:80:9d:60:c0:db:9b:
         10:0f:52:44:d0:be:47:d0:c6:3b:29:c0:4d:41:85:83:d3:ad:
         02:b1:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:51 2025 by rpki-client