Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/efa6e6b5-d4e2-3d03-b26e-32cf7c42333f.roa
File:                     efa6e6b5-d4e2-3d03-b26e-32cf7c42333f.roa (raw, json)
Hash identifier:          Qi9I6Rj1ohI4kRLPG1os46TCacwqqMYF9oaRLUhMS6Q=
Subject key identifier:   DD:DA:3F:0B:04:00:85:1E:FF:2C:2B:8E:17:7F:A2:6F:24:D1:7C:A8
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F4328584B715CB5A453C3C1FC11B1FAD0
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/efa6e6b5-d4e2-3d03-b26e-32cf7c42333f.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     133199
IP address blocks:        23.155.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b5:a4:53:c3:c1:fc:11:b1:fa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=cd4dcd99-53b5-46bb-91e7-164875d6c90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:df:a1:a5:cc:e3:eb:da:39:a8:a1:9c:04:
                    ce:e4:7a:1b:df:24:74:21:f6:5c:35:b5:8c:37:a9:
                    9f:f6:06:41:5d:28:54:7d:cf:9a:72:59:52:d1:54:
                    f1:96:3d:d3:77:ab:96:4a:bb:e7:ba:50:0c:ed:4d:
                    f1:61:ee:98:d7:86:64:09:39:3f:51:ec:8f:64:4a:
                    72:eb:95:04:6a:11:86:9d:52:9d:07:e4:8f:a3:cb:
                    6b:f4:bf:bb:f6:97:69:99:95:3b:b8:21:fa:f3:57:
                    61:cd:dd:80:c1:0b:09:69:ef:f0:84:1e:24:0f:f9:
                    9d:93:90:82:fd:45:19:44:db:b0:34:4d:bd:c7:8d:
                    5f:03:66:38:ed:5f:86:93:30:dc:29:21:30:35:57:
                    b7:05:ec:e6:67:d3:2e:b4:3d:c4:a1:14:77:92:82:
                    5a:d9:52:68:cd:3e:52:84:55:8c:d1:21:f6:9a:56:
                    01:96:75:e9:78:10:3f:6c:00:de:8c:70:9a:a7:0d:
                    9a:1b:75:a2:59:de:0d:d9:eb:95:a8:fb:c9:91:72:
                    eb:1e:b1:d9:d3:99:a8:1f:2e:4a:62:79:ad:1c:41:
                    55:79:52:ac:d9:d7:88:5c:5b:7c:22:07:de:f4:74:
                    80:3d:cd:87:37:5b:ec:6f:d0:2a:97:53:54:e5:7e:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DA:3F:0B:04:00:85:1E:FF:2C:2B:8E:17:7F:A2:6F:24:D1:7C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/efa6e6b5-d4e2-3d03-b26e-32cf7c42333f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fc:0f:35:8e:64:03:3d:09:b9:6e:34:57:a4:25:23:ea:46:
         aa:ff:d7:d3:3e:6b:0c:fe:b0:ca:1e:c1:36:09:6a:cb:56:f1:
         fc:f3:c6:d6:9f:88:1d:d8:4c:11:cf:2b:66:3f:05:11:2e:6e:
         7a:f2:63:cd:ed:37:e0:00:25:f7:58:2a:6b:e0:65:c3:93:a5:
         d9:cd:f7:4c:61:54:d3:41:a1:70:11:c6:53:b3:9c:8b:ce:56:
         9f:23:bf:0c:dc:c5:fc:56:5b:55:64:8b:3e:0d:5d:a4:12:af:
         81:80:29:54:41:c4:f2:46:b2:85:d0:c6:15:4d:f8:ad:eb:0d:
         1b:c8:13:01:f3:d0:0b:f3:0f:70:5d:6f:b9:ed:bc:68:09:85:
         a7:6a:90:c5:ba:1a:90:d6:7b:c5:a2:6c:93:7b:c1:e4:66:0e:
         07:07:46:3e:ca:63:53:ee:51:97:66:c7:f9:45:1a:12:b2:1d:
         3d:b9:8c:3f:df:d5:4d:4f:8a:86:f9:68:6a:ec:e2:13:90:c7:
         20:96:24:ff:98:01:d6:18:e4:82:8c:38:94:0b:dc:5e:71:94:
         83:98:d3:d5:3d:82:cf:60:b2:6e:11:c8:9f:9c:cd:87:ea:91:
         eb:fe:e0:da:67:4f:fa:07:fc:82:21:c7:ab:fd:85:1f:36:87:
         08:5d:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:54 2025 by rpki-client