Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
File:                     51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (raw, json)
Hash identifier:          Ds4KBeEt+TQQ3x0TITIwWNBsiCgcZHuYf9vVe0jvWZQ=
Subject key identifier:   DB:00:39:6B:B4:5D:99:AC:EA:EB:EF:5F:14:F4:BA:F5:33:BA:A6:63
Certificate issuer:       /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
Certificate serial:       010D0C9F4328584B5F372967D0F326E318ED2EC0
Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     395185
IP address blocks:        23.137.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:29:67:d0:f3:26:e3:18:ed:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=c1f8f00f-482f-4c28-b64f-a06621f74ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:bb:21:3f:1c:70:43:b4:41:3a:f0:6e:23:
                    42:38:1a:84:84:9e:d2:33:ae:52:8e:53:51:6e:3c:
                    9a:d4:bc:cf:fd:6d:84:82:60:61:bc:79:c6:e8:d8:
                    2d:42:66:3a:b6:a3:85:c9:1e:f6:65:5d:1a:79:b4:
                    6c:4a:27:b3:45:af:0c:73:53:24:c0:78:3e:99:a5:
                    2c:2c:6c:1c:76:4c:e8:72:4f:88:4f:46:33:1d:ef:
                    23:e4:c6:5d:f3:86:2e:9e:48:52:5a:55:20:68:28:
                    87:5c:b0:27:7e:b0:77:7b:88:a7:7a:12:b1:67:af:
                    53:64:fd:31:33:9b:19:fc:5f:bc:d4:7e:75:dd:91:
                    b7:f5:5b:1e:a7:4e:44:6c:da:f9:f6:ed:0b:63:39:
                    f5:ff:68:b6:58:27:4d:e5:ef:e6:37:39:09:52:40:
                    c5:55:e4:6b:60:fd:6c:64:f4:6a:60:7c:7a:24:55:
                    b8:c3:91:cc:37:59:08:fa:ad:5d:8f:28:df:0f:83:
                    e6:5d:e3:c5:36:4c:59:42:5b:ec:60:c1:47:a6:32:
                    ef:d0:d7:4c:aa:a3:35:d4:bf:2c:c5:26:07:c5:92:
                    d1:52:00:76:f7:21:fa:4c:46:30:8d:a3:bc:8a:9c:
                    8b:34:d8:90:cd:f9:ac:ec:e5:45:f7:fc:e8:bb:35:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:39:6B:B4:5D:99:AC:EA:EB:EF:5F:14:F4:BA:F5:33:BA:A6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl

            X509v3 Authority Key Identifier:
                keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:bb:33:10:bc:6b:00:65:51:9e:5f:b3:06:7e:f1:a5:03:
         a1:7d:26:f5:25:d4:da:00:7b:5a:f1:29:8e:64:9d:73:a0:32:
         7d:94:39:41:2f:da:80:8a:fa:73:db:d6:82:54:93:95:bf:7a:
         ea:64:c0:25:fb:56:8e:77:ac:50:f2:cb:69:4b:15:90:36:74:
         d7:77:21:76:e6:0b:b1:1b:96:a8:c3:25:6e:ac:9f:78:3d:03:
         d2:10:70:d2:3a:49:29:c0:36:05:d5:54:5d:97:b3:87:ba:df:
         ff:42:9f:b2:a6:87:fd:fc:a0:ed:96:4b:85:11:ad:b3:e7:13:
         02:6f:4e:8b:d2:70:52:92:c5:8d:21:06:10:17:9b:30:4d:7a:
         b8:d4:b9:f2:7b:63:48:f0:43:62:24:62:bd:46:67:8a:c5:a0:
         43:7e:0e:cd:d8:af:a3:3c:5b:03:33:d8:ef:1b:8f:20:cd:db:
         68:4d:9b:e6:20:81:fb:0e:ec:a2:26:a2:df:14:0a:f6:d1:05:
         90:ca:31:49:c7:c9:7f:cb:62:f6:9c:b0:4c:9e:75:3c:cb:01:
         7c:ba:30:d2:e7:ed:00:0c:bd:f6:24:4b:f1:03:5c:65:30:73:
         2a:3c:1a:68:b9:3a:32:5f:b3:1f:c4:4e:66:c4:d6:ed:81:c7:
         b3:31:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:43 2025 by rpki-client