Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa
File:                     384319c2-ef61-3659-8686-291dc872bee8.roa (raw, json)
Hash identifier:          u1ywh5pojbxjrR2K+RRmVWdntsvypOR934zECKQODwE=
Subject key identifier:   3C:76:1A:AC:72:5D:8C:3A:D0:2F:DD:79:7C:53:29:50:20:02:D4:72
Certificate issuer:       /CN=30fb0bda-102e-4ca8-b44c-98d347687a6c
Certificate serial:       010D0C9F4328584B6E9202B9F324788A9DD47F70
Authority key identifier: 70:AB:24:32:19:BE:46:4B:46:3E:48:A9:52:8A:6A:51:E7:AA:C7:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     979
IP address blocks:        23.141.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:92:02:b9:f3:24:78:8a:9d:d4:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30fb0bda-102e-4ca8-b44c-98d347687a6c
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=b1fb274e-220c-4038-badf-2ba2d12e0dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:83:43:1e:06:89:64:db:e8:9d:64:ec:a9:
                    cf:f9:65:dc:1d:97:26:e7:6f:61:f4:ef:61:3d:7a:
                    1b:16:b4:0c:af:fa:ed:bd:47:8c:88:e1:73:55:83:
                    f0:f0:9d:cf:f4:89:34:94:58:6e:1d:f0:77:7e:52:
                    9e:10:fc:33:7c:b3:87:95:08:4b:36:2a:40:64:8c:
                    70:48:d3:75:36:46:18:eb:54:d2:79:e5:79:11:80:
                    4b:67:c3:df:88:49:4f:1d:bf:f5:44:7b:64:06:46:
                    82:96:e4:46:33:59:58:9b:96:7d:21:2a:23:e6:28:
                    6d:ac:a0:4a:69:5f:bd:84:4f:a5:5f:ce:4a:a2:2c:
                    58:01:39:a7:50:df:86:8d:37:26:9c:8a:71:89:c3:
                    f0:6e:2f:40:c4:a9:b2:b5:a9:e5:ad:43:5a:23:c0:
                    d2:dd:29:36:26:3c:07:f6:6e:15:03:2f:73:12:d9:
                    61:16:b1:77:0a:29:93:2f:60:5c:6e:cc:ee:fd:cb:
                    d2:e1:82:9e:53:3a:09:15:8e:1d:ac:cd:16:9b:f5:
                    ff:47:cf:bd:4a:b4:6c:3a:14:8f:8c:e4:d1:a2:f1:
                    5f:c6:5b:fd:50:3d:6b:e0:50:43:1b:79:5d:36:d1:
                    70:ea:7e:ed:f6:29:e7:e8:d9:29:b6:0d:7b:fe:d1:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:76:1A:AC:72:5D:8C:3A:D0:2F:DD:79:7C:53:29:50:20:02:D4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.crl

            X509v3 Authority Key Identifier:
                keyid:70:AB:24:32:19:BE:46:4B:46:3E:48:A9:52:8A:6A:51:E7:AA:C7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:b0:6d:2b:f0:90:35:75:f4:d1:24:60:ff:d1:7b:7f:58:
         11:c9:ff:17:cb:5c:43:20:fc:e4:fc:3e:c5:23:58:0f:45:1c:
         d1:98:ec:e4:44:66:08:de:4a:64:c4:cd:67:98:4c:1d:58:bc:
         97:a7:d6:9d:6c:a5:ea:61:97:d9:10:38:16:e2:96:a2:85:7a:
         f6:4c:c8:d6:c4:9a:bc:21:67:b6:bd:82:44:d5:4a:e4:39:01:
         f4:fe:72:39:29:00:be:04:11:03:c4:32:a2:f1:ff:b7:dc:48:
         23:a2:33:b4:f5:cd:d7:87:61:7b:c3:4a:37:74:c5:9b:97:df:
         d6:86:fa:13:42:7c:e9:3e:66:e8:24:42:c6:5f:da:22:da:06:
         c8:91:af:29:8f:16:40:64:af:b8:72:ed:2f:c8:5d:b1:45:01:
         ea:4c:ff:30:0c:ee:62:04:e4:ac:d6:62:57:3d:d1:2d:ab:87:
         10:12:96:3d:f2:03:cb:6d:ed:eb:99:af:ec:09:64:31:39:b7:
         3b:8e:70:6c:66:e4:66:6e:e6:6a:49:a1:8b:8a:a8:35:29:91:
         f4:ad:0f:da:ff:69:27:9b:86:d6:90:63:d4:ec:6e:6d:e2:9c:
         6e:87:23:6a:c2:7a:08:99:42:22:23:0a:90:58:e6:89:22:ee:
         41:49:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:20 2025 by rpki-client