Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/32f23b2f-3e16-3aaa-ab5e-4a744d7a214c.roa
File:                     32f23b2f-3e16-3aaa-ab5e-4a744d7a214c.roa (raw, json)
Hash identifier:          xWvuOgE0nzUn4g47Wc6lhdPHYCXcQNAFpdVCJ41sL+s=
Subject key identifier:   9C:89:34:D7:23:B0:BE:07:0C:D3:89:62:42:95:00:08:25:3A:42:BB
Certificate issuer:       /CN=2011e64c-7c9c-4249-87ab-c66e2076120e
Certificate serial:       010D0C9F4328584B80B75BAA1E7A9316CD404180
Authority key identifier: 50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/32f23b2f-3e16-3aaa-ab5e-4a744d7a214c.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     25815
IP address blocks:        23.164.192.0/24 maxlen: 24
                          2604:9240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5b:aa:1e:7a:93:16:cd:40:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2011e64c-7c9c-4249-87ab-c66e2076120e
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=562c5f2b-9a78-4c8c-8aa5-b452434d9df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:54:6e:5a:1a:bb:60:f9:01:4c:05:24:10:1d:
                    01:ca:14:c4:42:9c:15:a7:4e:76:9f:38:09:e9:33:
                    87:62:28:5c:ba:ee:9d:f2:0f:4d:65:cc:8a:eb:a3:
                    93:9c:f9:da:5f:dc:11:c8:ab:99:98:21:d7:98:ea:
                    3e:2e:7c:67:bc:94:d4:d0:32:bf:da:ef:91:7f:4b:
                    6d:a9:00:af:4a:cc:13:27:be:05:c8:2d:fe:88:58:
                    d9:d1:9a:25:d1:c6:96:c3:28:d4:1a:cd:3f:6e:05:
                    bd:da:96:56:96:a4:3e:f7:52:32:93:16:98:ec:aa:
                    9a:81:b9:7a:f3:5d:3e:67:f8:ed:66:96:5e:94:2f:
                    fe:ec:6b:e7:8c:a6:64:0d:67:03:0f:d2:bc:ef:10:
                    eb:ec:40:9c:f6:47:6f:36:94:11:68:2a:71:50:de:
                    6c:2b:75:1c:33:e1:82:31:25:a0:d9:d0:a1:40:37:
                    09:2e:f3:e3:17:49:94:03:84:d9:68:b8:7c:91:ae:
                    28:9e:76:c9:34:a6:78:9f:63:48:3e:ea:24:dd:8d:
                    df:cd:69:0a:51:a5:6f:5c:77:8b:65:dd:16:ee:9b:
                    9d:0a:82:bc:c9:ad:f3:6d:29:86:b4:06:c2:98:9d:
                    6f:6d:94:67:92:8f:46:1c:49:29:b1:df:b2:53:67:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:34:D7:23:B0:BE:07:0C:D3:89:62:42:95:00:08:25:3A:42:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/32f23b2f-3e16-3aaa-ab5e-4a744d7a214c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.crl

            X509v3 Authority Key Identifier:
                keyid:50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.192.0/24
                IPv6:
                  2604:9240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:12:e4:69:f8:0c:ec:da:1e:e5:dc:62:d9:2f:9b:ce:e1:
         d4:26:4b:3f:44:2d:d9:29:b9:dd:05:e8:92:3e:0a:a4:43:0c:
         b8:e4:92:f5:76:04:04:03:a8:5c:6b:b7:a1:45:a2:6e:de:e2:
         28:05:99:f9:a1:24:3d:08:b9:10:44:3f:2a:2b:e2:7c:3b:81:
         ee:b5:03:d3:f4:27:ee:90:02:08:8c:99:bb:2a:66:1d:5b:87:
         5a:db:72:ec:a3:57:5c:5d:9f:64:a9:98:d4:04:2f:47:de:7f:
         9c:b0:25:b9:c4:be:d6:c1:68:c2:10:96:54:85:98:7d:f5:4f:
         76:f6:a3:c4:10:09:85:87:7c:39:05:9c:1d:dd:9f:7d:07:79:
         e7:4b:e5:d1:88:a3:f3:f3:4e:3b:ef:a4:da:d7:c7:4c:2d:da:
         46:c7:d4:d5:93:f6:bd:60:8c:12:1b:29:1d:09:0d:bb:cf:77:
         81:ff:0f:af:86:e7:87:14:35:3d:6b:52:bc:97:5f:ea:74:41:
         60:53:55:b9:54:a2:ae:1e:c6:ea:d3:43:b2:97:d7:f6:67:d7:
         90:bb:8a:73:96:17:42:30:0d:ff:5c:12:e4:18:40:05:7c:ed:
         11:ce:4e:54:92:83:a9:48:0c:1b:45:96:8b:76:73:8b:c1:02:
         07:5e:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:39:59 2025 by rpki-client