Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa
File:                     54999924-5032-3b39-ac1c-a58f234e2e45.roa (raw, json)
Hash identifier:          fyMUBeFJW50Cj7TkC2QdBkw3726a3x7NBqPxLddg3Zc=
Subject key identifier:   9D:A6:B7:50:D5:7F:25:24:92:3F:6C:1D:22:37:EB:D4:38:CA:E4:8C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584B7857449FE079B9F3D5FACC20
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     26842
IP address blocks:        64.158.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:44:9f:e0:79:b9:f3:d5:fa:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=7b1a5ab3-fc12-44e0-9ad2-cdfe3342f14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:7b:1f:62:16:f3:0c:fa:12:5e:7c:b6:39:
                    dd:59:56:fe:f9:88:69:dc:41:c0:33:4b:3e:55:98:
                    9e:18:c6:76:ae:69:8b:82:3a:9f:1a:f0:ae:b2:67:
                    e3:8a:1c:47:c3:f3:8a:7b:ac:d8:d9:1e:4f:52:04:
                    ed:b0:e8:99:c7:c3:1c:e5:94:6a:cd:86:a1:1b:63:
                    8f:9f:d7:9b:62:6d:78:13:19:05:9a:2f:95:8c:e9:
                    2e:02:f2:04:69:0c:65:92:83:8e:c4:8f:a6:65:85:
                    d5:76:86:e7:d6:22:90:88:95:c8:1e:a6:2b:42:b0:
                    76:61:7e:c0:02:27:71:2a:28:bd:df:3d:bd:7b:c9:
                    47:52:ca:cd:c9:ad:ad:63:1f:49:ab:0e:47:45:19:
                    55:d4:8f:25:53:fc:dc:85:ae:fb:65:26:30:46:72:
                    37:43:14:ae:f7:a2:26:b2:b6:31:6d:76:02:1d:c9:
                    65:98:76:90:e0:be:80:29:46:bb:5b:ad:e9:34:a8:
                    e6:72:c6:31:2a:7a:1d:50:54:fe:94:3f:14:63:d2:
                    1c:67:c4:2e:75:8b:af:55:68:a2:1e:b1:3a:fd:50:
                    0c:52:6c:d1:12:5e:76:f6:ef:40:72:09:97:fd:64:
                    2c:f3:81:86:7a:f9:46:f2:29:39:cf:e8:3e:28:df:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:B7:50:D5:7F:25:24:92:3F:6C:1D:22:37:EB:D4:38:CA:E4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.158.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:88:94:2f:c6:20:ae:c1:9c:f2:14:a1:60:f0:24:28:8e:
         47:ed:30:f2:3e:3d:01:36:60:39:49:0e:aa:5c:d8:d6:e7:30:
         48:5f:0d:80:c4:71:c8:f8:bf:6d:99:67:7e:b1:85:1f:c3:99:
         8d:97:35:ba:7b:7c:d6:4b:18:8f:4d:42:d3:8b:36:81:23:65:
         8e:2e:44:77:e2:0f:b1:31:9b:21:32:8b:b9:4d:d8:0c:90:61:
         65:40:70:42:fb:87:35:12:c8:86:85:64:ac:1a:66:05:2e:c3:
         b4:0e:a4:f0:1b:cb:11:ea:ae:b7:fe:88:db:4e:76:f5:86:e7:
         f3:33:28:ff:a7:87:64:be:69:c9:c4:5a:9c:59:fc:09:82:f7:
         3b:1e:c4:ed:13:fb:07:09:ab:2f:18:60:e2:65:36:18:3d:bf:
         9a:d6:a2:77:9b:b8:3f:bb:5e:c6:ac:e2:f7:80:66:23:36:9c:
         a0:70:78:5d:be:bf:05:99:50:ed:db:cc:5c:13:82:be:92:d2:
         82:46:ca:51:53:a5:3f:05:3a:47:5f:d4:47:02:b5:ae:22:a6:
         34:90:1e:0e:e8:f1:69:45:50:82:8c:04:41:66:40:79:98:5e:
         f8:ba:c4:c8:a8:0e:f2:12:74:5f:24:ff:02:69:ed:a8:82:92:
         91:68:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:20 2025 by rpki-client