Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa
File:                     7bc53e15-f637-3483-afc1-2123922938d5.roa (raw, json)
Hash identifier:          i+Arknm4jvzrdj/UCdUkauX9KYQIbJkSO07MbHzWBgY=
Subject key identifier:   CE:08:EE:EE:A3:10:8A:6B:65:F3:8C:C7:DE:60:EA:86:D0:74:CC:79
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584B891768E9A8ED2A205AE54400
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     62707
IP address blocks:        23.166.224.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:68:e9:a8:ed:2a:20:5a:e5:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=8e3adee9-6a1d-4b7e-bc82-9caeea3e8450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:ee:a6:a0:a2:e8:18:f1:f9:91:af:12:09:
                    f3:75:0d:ad:5f:4e:e8:d1:5b:d4:53:71:e6:73:a4:
                    ae:5f:f5:1a:f7:1a:6d:da:39:04:a3:fd:e3:0b:4f:
                    8f:d0:4e:2f:fa:d4:72:32:48:80:07:b1:cc:cf:51:
                    17:4a:30:5d:fe:89:74:c0:7e:be:c8:4e:7a:64:cd:
                    4f:1a:9f:2e:81:f7:15:1e:8f:25:df:57:5a:71:ec:
                    b1:30:8e:4e:d6:50:3b:ea:a4:1e:d9:63:a5:6c:a4:
                    17:7e:93:43:ca:6a:1d:65:7f:c7:56:8b:fe:bb:c1:
                    c5:1a:84:2a:02:e6:b0:64:42:2d:f8:46:61:57:0b:
                    e4:48:c7:f1:fc:0a:be:e0:ff:53:2b:6e:05:4a:9d:
                    db:ed:20:78:da:31:aa:fd:09:de:f1:d7:29:d9:fa:
                    9b:9f:f2:3e:51:a4:6a:df:71:03:28:24:c3:17:58:
                    84:a7:9c:53:d3:a3:62:92:83:c0:d6:86:a8:08:2f:
                    9d:2a:b3:24:22:9c:85:7a:1a:6b:5d:48:be:9d:3d:
                    5c:db:09:7f:8e:4d:bf:33:fa:23:ba:85:ca:dd:ac:
                    18:f7:10:5b:5e:ab:93:19:f2:04:36:10:70:74:29:
                    fb:fc:84:fc:8c:1d:94:c6:04:f7:3b:03:9b:d9:e8:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:EE:EE:A3:10:8A:6B:65:F3:8C:C7:DE:60:EA:86:D0:74:CC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:48:6d:7a:b2:c6:58:a6:7e:df:55:9d:bd:9d:2c:8b:23:ed:
         24:86:60:4d:60:88:1f:d4:59:e2:15:c7:39:7d:cc:e1:e8:34:
         7e:c8:b0:f4:8f:1f:00:86:6a:84:af:96:ce:7d:ec:8a:02:d5:
         a2:cf:67:84:f8:90:0a:59:0b:03:c9:c2:06:ff:c3:37:3e:bb:
         23:b7:d0:a2:2a:5e:52:42:c7:8a:99:9c:36:42:f3:28:5d:9d:
         70:ee:16:21:4a:95:04:fc:34:68:4b:23:35:c2:21:2b:f3:41:
         0d:36:eb:f6:5e:06:f7:2b:36:c1:2f:92:e8:7b:65:84:cf:a9:
         87:de:c1:52:c1:b3:5f:fb:15:29:12:33:c5:e0:0a:fb:25:38:
         a5:ca:32:65:84:71:11:2d:e9:92:c2:4f:51:fd:ae:0b:f9:22:
         5f:91:67:1a:1a:c7:82:aa:1d:6f:71:90:b9:76:81:17:7c:6d:
         5a:3e:d6:a0:cd:a8:62:f8:d8:92:c1:b0:85:eb:ee:f9:f7:bc:
         d7:79:bf:48:cb:3f:ec:32:11:a2:08:63:a8:5a:ab:5d:24:0f:
         fb:ed:ac:2d:6e:21:67:d6:6c:e6:dc:8d:18:67:ba:68:1e:8a:
         70:c6:5d:27:2a:d6:73:89:92:23:71:dc:fd:40:c6:a7:ca:32:
         f4:49:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:53 2025 by rpki-client