Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
File:                     07f8c0d9-a730-33db-879d-4b7255a22c83.roa (raw, json)
Hash identifier:          QsOKWNryXQTDO2eaqbArtDdmZVgEoqioRjQi8YCOD+A=
Subject key identifier:   7D:F0:56:CE:C8:AC:08:45:1D:D4:B0:71:E3:E3:E4:8E:DF:B8:A5:33
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584AECC11954869F455949739AC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        23.239.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:19:54:86:9f:45:59:49:73:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=286dbf08-a3d0-4bb6-b4e6-9872f6df74ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:c2:30:04:bf:b0:5c:b8:4f:3e:11:30:4a:
                    04:60:6c:2f:68:19:2e:a9:1f:e2:c9:a7:38:1e:b1:
                    1d:5c:c3:09:9b:73:0c:7b:19:ec:1b:ef:64:cc:aa:
                    1a:32:79:3b:f8:1e:1c:c8:83:3d:6a:c5:96:0a:31:
                    55:7a:2f:d3:d8:c1:0d:27:f4:b3:09:74:02:de:2c:
                    4a:9d:72:2a:a7:a9:64:22:14:d4:0a:57:71:27:dd:
                    f2:6b:07:e5:0f:11:b8:e5:3e:f1:2f:4b:27:7c:78:
                    3a:db:f6:55:7b:01:ad:dd:c5:9f:75:4a:f0:d8:31:
                    71:d3:c7:8a:12:fe:f0:5e:ae:69:a9:ee:2d:47:14:
                    33:ad:22:55:f8:49:b4:01:df:f0:91:1f:2c:28:b1:
                    ff:b5:82:6f:06:de:38:a5:cb:d4:6d:89:45:07:56:
                    fa:ee:85:f2:a6:86:2d:c9:9f:95:a0:94:4d:85:a5:
                    ae:b8:e1:e4:95:7e:48:3c:b3:7d:ad:50:a9:24:31:
                    08:5e:5e:cc:67:5d:0e:0b:42:27:b2:16:e8:9e:11:
                    20:12:d6:6c:1f:58:e7:07:c3:cd:f3:70:45:9f:6a:
                    7f:89:70:04:ce:02:fa:7f:00:38:c3:a3:78:22:7d:
                    a0:59:bb:8d:46:49:bb:ab:76:1f:e1:f8:5d:5b:8d:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:56:CE:C8:AC:08:45:1D:D4:B0:71:E3:E3:E4:8E:DF:B8:A5:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:bd:fb:16:68:bb:c5:a4:b5:d9:0d:fe:70:63:c1:d6:ee:
         61:ff:1a:88:12:cb:bc:7c:a7:82:82:2d:7d:10:7c:58:31:79:
         f6:64:6a:a0:94:f0:08:49:6f:75:a1:87:c9:2d:85:e9:2c:9e:
         79:c5:da:38:e6:02:59:b3:6c:df:3b:c7:22:71:64:2c:af:84:
         24:63:e3:51:6e:0e:92:53:70:7f:2c:07:f4:bd:5d:7a:89:f8:
         99:9e:51:b8:dd:01:92:58:7e:51:6b:4a:64:39:69:75:90:84:
         90:9d:33:63:7a:99:58:b7:54:3a:4f:a0:68:2d:4b:78:f2:72:
         b6:4d:34:b4:ef:9e:05:34:bb:ce:09:08:13:7f:47:07:d7:c6:
         73:62:c0:98:26:58:e5:3f:2a:58:9f:fc:a2:52:6f:bb:95:29:
         90:b7:a7:1e:29:ef:23:0f:19:9c:a2:17:ec:82:10:f7:67:51:
         c0:47:38:da:fe:59:b5:8c:b3:7e:c4:c7:36:de:34:93:9b:1e:
         ef:c4:3c:b1:e6:2f:51:f0:0b:d7:72:6e:b5:11:2b:08:99:c3:
         1f:1d:89:2f:47:45:ec:b1:db:7b:05:0b:a8:5f:3f:58:b3:ff:
         03:5c:ff:9e:35:36:50:8f:45:b1:88:ce:c3:ea:b8:a7:3d:f9:
         ac:ab:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:14:22 2025 by rpki-client