Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa
File:                     12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa (raw, json)
Hash identifier:          dr9dmWWvqh7F8sp+qZFPINFTR0m3HwZ3MMeAolrrfos=
Subject key identifier:   F8:64:77:B8:E7:05:AB:19:4B:31:44:57:1B:BF:47:FB:22:EB:E2:94
Certificate issuer:       /CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07
Certificate serial:       010D0C9F4328584A1F900C688F5D7D5C0A44C300
Authority key identifier: 77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     149513
IP address blocks:        23.186.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:0c:68:8f:5d:7d:5c:0a:44:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=9660669e-8558-413b-84bf-a87f447107e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:5e:1d:a3:8d:12:ef:9f:96:d8:b2:90:f3:
                    b7:b2:c0:8f:ed:2f:c0:46:51:a9:eb:78:79:ad:37:
                    13:49:b0:7b:b8:af:32:a8:94:f0:07:a8:4c:5f:9e:
                    23:2d:1f:4d:cd:08:dc:d2:b3:36:e7:2d:16:98:5c:
                    33:80:e8:ca:2a:e0:25:72:a3:55:bf:92:75:47:50:
                    97:21:08:05:13:28:a0:11:01:87:eb:71:41:77:e6:
                    5a:03:b0:16:13:82:e5:20:0b:3b:1b:25:06:cb:f7:
                    99:f9:a4:13:15:b4:b3:e4:8c:10:f5:76:81:ea:5c:
                    47:0e:38:3e:06:df:f4:03:05:57:de:ca:1d:ba:a9:
                    e2:65:a9:19:19:36:3f:60:80:96:22:e3:30:38:8c:
                    aa:b6:0f:cc:6f:0b:9d:99:14:7f:ea:37:bb:81:78:
                    02:b0:57:cc:f1:1b:17:c6:24:b3:28:3f:c1:c6:5a:
                    d1:09:2d:49:bd:e6:f2:b8:f0:4a:98:6b:b9:22:a0:
                    cc:75:bb:c2:82:09:b5:9f:48:87:72:2d:ce:29:6b:
                    ca:23:32:8d:4b:6a:ff:97:3b:5d:fb:cd:ae:1d:4e:
                    85:95:8b:a2:9a:93:1e:77:b5:6c:0f:63:ec:83:ce:
                    b9:f4:e4:ca:6c:05:72:4d:1d:f3:6c:50:34:c6:44:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:77:B8:E7:05:AB:19:4B:31:44:57:1B:BF:47:FB:22:EB:E2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl

            X509v3 Authority Key Identifier:
                keyid:77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:61:2a:56:f7:1c:3e:82:55:8f:b9:72:16:97:ac:11:7b:
         e2:50:c1:05:02:2f:54:21:25:d5:91:b4:15:ee:83:9f:30:47:
         77:0e:cf:03:35:4c:e1:13:31:ea:d0:13:dd:a1:ac:c9:87:09:
         55:17:fb:e3:b3:41:0f:9c:4a:25:7c:59:f5:ed:f1:72:0a:ac:
         2b:2d:bc:cc:9d:0a:30:33:41:4a:ca:b7:10:5a:09:2e:f8:af:
         b6:d9:2d:43:7e:d0:eb:ea:a2:1d:84:8d:b5:94:21:74:b4:8d:
         a8:b2:24:b8:ab:cc:41:f6:f0:79:45:e3:b6:28:ac:c7:7a:2f:
         88:1f:c9:1f:6f:ad:62:16:84:7d:75:bb:cb:29:5c:19:70:3b:
         74:23:e0:2a:25:d1:6a:90:01:ba:9d:cb:cd:e3:bc:c7:2e:a5:
         d2:63:4b:d8:4b:4d:1d:ed:31:19:56:46:02:07:07:ec:41:b4:
         2c:43:d7:96:04:ca:e1:08:00:25:7e:55:06:88:80:d8:33:f4:
         a1:61:ea:26:64:3d:7e:55:ad:28:56:59:00:9e:ee:4f:e1:d6:
         8f:d0:cf:b6:d1:8e:e7:62:a5:fe:95:40:58:72:dd:5c:af:87:
         0b:bf:53:cc:ca:bf:0f:e6:e9:b9:8c:0a:73:59:38:b8:27:5e:
         de:b2:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:43:57 2025 by rpki-client