Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/abf9b4f2-32bb-3361-8e3c-352221ea6d4b.roa
File:                     abf9b4f2-32bb-3361-8e3c-352221ea6d4b.roa (raw, json)
Hash identifier:          cLvfCs8qvMYIfM31zoTuICw/+W4xZbG/spr/+jB19Ko=
Subject key identifier:   E1:EB:94:BF:03:8E:E6:DE:5D:FF:88:9B:D5:C6:EB:56:4E:47:51:9E
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584B33F1B70F192C396C1CA44DE0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/abf9b4f2-32bb-3361-8e3c-352221ea6d4b.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     62610
IP address blocks:        23.251.39.0/24 maxlen: 24
                          23.251.40.0/24 maxlen: 24
                          23.251.41.0/24 maxlen: 24
                          23.251.42.0/24 maxlen: 24
                          23.251.59.0/24 maxlen: 24
                          23.251.60.0/24 maxlen: 24
                          23.251.61.0/24 maxlen: 24
                          23.251.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b7:0f:19:2c:39:6c:1c:a4:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=b8efbffe-7569-42a6-b354-8c71b0afe46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:96:53:88:f4:ab:f5:b9:19:22:be:fb:ad:
                    dd:02:9a:f2:10:3e:d4:d4:04:f7:70:13:ce:ea:dd:
                    be:e2:32:36:94:c3:34:f8:82:82:f1:7e:94:62:bc:
                    56:c9:ee:cd:55:2f:9a:17:e8:99:93:cb:86:fa:a2:
                    49:b4:17:7e:78:9a:5d:83:ff:7f:94:27:c4:ea:a2:
                    32:60:93:20:dd:3e:54:dc:46:86:63:e1:3a:d8:c6:
                    7c:6b:3b:d7:72:cc:1f:9a:45:cb:48:2b:ea:25:56:
                    76:e2:5f:8f:3a:05:cd:6c:10:4e:8f:b6:a0:19:03:
                    0e:ea:91:1c:77:07:d8:8b:ae:b7:35:2a:05:83:92:
                    53:21:42:1e:94:17:36:6a:14:9b:ee:57:94:30:86:
                    64:5b:dd:68:fe:65:be:ac:96:10:f2:a2:dd:73:e7:
                    41:bf:62:f3:de:0f:e7:20:3a:07:bb:1b:db:55:c1:
                    55:dc:00:0a:ce:3b:74:2b:40:ac:62:ad:4c:bc:76:
                    c5:15:9a:fa:f3:1b:7d:c8:8f:dc:31:72:e5:6e:c2:
                    35:6d:4f:20:39:b9:a9:e5:bb:2a:86:a1:ba:36:31:
                    6b:0b:5e:85:7b:f4:71:64:3a:fa:8c:41:f0:91:5b:
                    b6:59:46:51:da:b1:0b:7a:3a:e8:15:4e:64:4d:35:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:94:BF:03:8E:E6:DE:5D:FF:88:9B:D5:C6:EB:56:4E:47:51:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/abf9b4f2-32bb-3361-8e3c-352221ea6d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.39.0-23.251.42.255
                  23.251.59.0-23.251.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:db:38:0c:f5:31:21:03:05:2e:2d:d2:3d:14:8c:31:58:11:
         87:2d:ad:d9:08:c4:c0:a1:dc:a2:9d:c8:da:de:7a:0a:83:bb:
         3e:79:f8:36:a2:4d:12:75:75:e9:e5:36:9f:4f:2f:5b:c3:a3:
         aa:2b:bc:13:cc:b5:8c:9e:c6:75:2f:6b:35:e1:01:68:af:0e:
         a5:4f:13:bf:ea:5c:33:ee:83:80:2d:ea:46:d2:ef:c0:ae:44:
         bb:c0:1c:d9:e5:dd:67:ec:67:59:92:ca:fa:1a:4a:37:73:b1:
         ba:31:f1:af:cf:a4:1e:63:04:a2:78:0c:6e:3e:32:ba:bf:7a:
         91:70:02:cb:67:fa:71:b0:9e:da:cb:11:c7:15:30:39:25:49:
         9c:e6:47:93:a2:ff:42:04:f8:8f:0f:32:ca:4d:ac:2a:14:94:
         c3:82:ce:19:3b:3c:58:ea:b9:3c:25:bd:ba:4f:d1:9e:05:1d:
         98:cb:08:07:0e:b4:f0:49:8c:c8:f7:55:6f:d5:5e:3a:1b:61:
         34:eb:6f:c6:47:df:ad:0b:4d:1f:60:b4:72:2c:54:b0:6b:c9:
         ce:25:2e:fc:75:ae:3b:0c:0f:11:d1:60:ff:0b:71:90:ae:81:
         f4:b0:77:2f:9b:e6:ed:b8:0d:7a:da:90:09:7e:ca:87:96:60:
         e6:a9:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:32 2025 by rpki-client