Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa
File:                     7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa (raw, json)
Hash identifier:          0YwWgQ1uBiHErkPgdHIosPoNpglirb9nGl6L0/I+WMk=
Subject key identifier:   52:09:5D:09:DE:A5:B6:1A:DB:A2:C1:2A:EE:6A:2E:C9:2C:80:67:30
Certificate issuer:       /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial:       010D0C9F4328584B1C372C016DB088BC6D277A00
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397493
IP address blocks:        23.140.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:2c:01:6d:b0:88:bc:6d:27:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=f5d2cdea-adaf-4eb2-a58a-5ff5630bb48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:3d:74:a4:e2:ce:a6:b5:dc:a8:f8:bd:06:
                    b9:7f:d0:6b:ba:2b:a4:12:36:1e:c8:46:79:32:d1:
                    03:29:16:0a:5f:7f:48:d5:93:5b:05:11:1f:32:5a:
                    27:ae:81:e5:19:07:34:07:e3:b6:0b:ae:96:97:ad:
                    0b:9f:d2:54:11:cb:ff:63:bd:58:f7:05:1d:ce:ed:
                    82:76:08:b5:be:4d:0f:64:d0:4a:f4:e3:b1:a5:ba:
                    32:5e:e3:15:e7:68:4b:1b:67:ba:02:10:a2:3c:da:
                    dd:6f:e4:8c:bc:7b:51:a3:0d:63:f1:5c:0d:b1:c1:
                    fb:19:75:21:7d:52:49:2b:ce:85:36:cb:01:7f:d8:
                    db:cc:8a:83:72:ee:9e:9d:8d:48:6a:76:a7:38:4c:
                    6d:99:4c:db:77:82:7f:d2:74:a9:fd:23:1d:fc:49:
                    b7:f9:b3:ad:f3:af:a7:a3:32:d8:0b:45:a3:57:57:
                    e7:3d:2e:1b:6f:f7:11:20:de:20:db:27:c4:7b:8e:
                    cc:a7:06:ad:cc:ab:a6:4c:35:c2:c3:fe:04:9f:2d:
                    ac:97:f4:a9:77:fd:0a:fb:40:ab:f7:c7:ec:51:d3:
                    91:98:7b:4a:8a:d9:94:5a:67:78:5f:c6:0f:84:20:
                    87:38:4b:cb:ee:ea:43:b6:ab:b4:82:2b:07:24:62:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:5D:09:DE:A5:B6:1A:DB:A2:C1:2A:EE:6A:2E:C9:2C:80:67:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl

            X509v3 Authority Key Identifier:
                keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:62:ed:8a:17:68:20:99:e0:6d:3f:15:8e:03:2e:45:12:a4:
         b5:e4:05:9c:03:ae:a8:9b:71:28:11:52:e9:2d:c7:db:a0:09:
         15:92:c2:27:b1:e4:4d:af:f1:28:5d:8a:b4:fc:e5:68:5f:a0:
         73:74:07:cd:fc:cd:25:77:10:95:01:73:54:50:11:6e:a9:78:
         22:b3:a1:52:01:8e:2f:82:94:86:5d:bd:8e:5b:20:a4:e3:bb:
         47:a3:86:d5:f8:3b:9b:d1:b7:23:25:21:80:ce:4f:6f:8d:79:
         94:9f:a6:bd:90:48:60:24:4e:d8:5d:28:99:b7:81:e7:e5:d0:
         fb:63:c8:0e:45:b0:ae:97:4c:81:7c:07:64:36:52:4b:e9:54:
         24:39:a6:5a:b2:3f:48:78:b4:95:c5:1f:ab:35:f6:65:31:13:
         a6:8f:c9:35:48:c5:61:55:90:b3:ce:17:9d:2a:55:97:38:43:
         0f:90:9b:9e:c5:13:a5:3a:a9:6c:49:c2:25:3b:6d:0e:3a:33:
         b4:ed:1b:83:45:fa:58:be:f4:89:7c:a7:40:19:48:a8:70:a6:
         2c:0c:30:7f:3f:75:21:c6:ed:e4:a2:22:3e:a0:41:52:e4:d2:
         ca:02:61:e7:27:c7:77:21:fa:5d:56:e8:f5:23:90:a8:31:7f:
         a1:47:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:06 2025 by rpki-client