Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa
File:                     e68b221b-741d-34a1-b72f-7ae3905f31f5.roa (raw, json)
Hash identifier:          f8RweGHdRh8jcnfUvlLbtFyub3Y0XICuoUvLggQGZVA=
Subject key identifier:   79:01:6D:58:0F:AA:F3:62:F8:E6:42:07:8B:72:BE:94:24:85:7B:1B
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584AE4610D1F29E945FFEA649F80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        23.239.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:0d:1f:29:e9:45:ff:ea:64:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=03fd4ff6-a6b1-42c1-af76-6a7853fca21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:2c:49:fd:bf:d3:3f:10:93:42:22:12:f8:
                    02:0d:5c:97:b5:31:96:9b:3c:38:00:eb:c6:86:4d:
                    d9:ba:4a:c4:2a:0c:d0:41:4b:8b:8b:3e:14:ad:d4:
                    6c:9e:b0:ef:fe:cb:38:6c:ff:70:34:c9:de:fc:fb:
                    c4:e1:4a:71:af:a6:15:f9:e9:d3:d2:98:00:fd:d9:
                    f5:84:a0:0f:39:db:48:f8:09:ac:ed:a8:e5:82:a2:
                    1b:68:54:85:e9:82:43:5a:a2:28:72:3e:ef:02:d0:
                    ca:70:ad:b4:bc:e1:6e:2f:85:2e:4d:77:ee:82:54:
                    1b:d3:41:e1:1f:ef:99:2a:7a:65:56:90:2d:a3:10:
                    6f:db:81:e1:50:ed:9a:e6:1f:f7:ee:34:f6:08:76:
                    8c:81:13:d0:56:cd:0f:14:b6:09:81:ab:0a:22:8a:
                    c1:eb:c0:f2:e8:4f:82:f6:f9:c9:37:bf:4b:36:3f:
                    7c:a8:2b:23:b5:79:98:06:77:e7:b5:45:d1:24:73:
                    de:bb:c5:9d:e1:a2:00:50:b2:f5:65:f0:9a:7d:1b:
                    1e:fe:16:26:48:51:80:4c:76:c3:15:86:15:0b:ec:
                    5d:0d:bf:9d:cf:f5:c6:28:ed:6c:ab:ac:cc:d2:56:
                    15:b4:95:85:da:f4:9c:c2:1b:35:2f:94:56:9c:30:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:6D:58:0F:AA:F3:62:F8:E6:42:07:8B:72:BE:94:24:85:7B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:1b:6f:bc:ee:80:9b:cd:2d:05:88:bc:81:af:3b:dc:96:
         1b:03:0c:fd:fa:41:e0:34:af:4a:ef:10:60:87:b9:9b:5d:23:
         e6:81:ed:f1:f1:7f:d1:af:81:5a:09:51:6a:cd:b2:34:bf:9c:
         86:25:4b:9b:b6:1f:0c:95:92:32:3a:30:e7:2b:56:5a:ce:b7:
         44:a4:62:f9:f5:7b:05:53:82:21:06:5b:02:8d:1a:a5:58:c1:
         65:85:a2:1e:80:70:92:92:94:5a:a5:07:7e:7d:47:b8:a4:80:
         66:1e:a4:f8:29:b1:67:86:ca:e4:78:1c:8b:48:ea:b3:d8:08:
         de:89:91:a9:a7:05:9f:7c:f2:69:d9:a1:8e:c7:b6:ad:71:4f:
         7c:5e:42:67:fb:4a:a9:0f:8b:d2:c8:9b:91:3b:19:19:9d:ad:
         22:62:a2:fc:f5:ad:83:53:0b:25:09:c0:5f:8c:0f:f9:d9:bc:
         7b:76:2c:c0:fa:8c:dc:76:66:2c:05:2e:db:aa:cb:e0:ac:94:
         90:e2:12:b0:96:cc:81:18:8f:93:0e:ef:35:a2:97:75:8e:bd:
         ca:7b:05:25:e6:d5:a2:de:38:c0:3e:bf:bb:0d:28:b9:80:ff:
         31:f3:b9:ce:e0:5d:dd:e5:0d:65:18:a9:03:90:b8:1f:b9:19:
         0d:1c:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:17 2025 by rpki-client