Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/186a3c34-fbd9-37ba-8001-381dc6012797.roa
File:                     186a3c34-fbd9-37ba-8001-381dc6012797.roa (raw, json)
Hash identifier:          V2hoHm+KqBXzE3fq5kJxB2rJZ2i0J5lOXjrd/eo01Gs=
Subject key identifier:   04:28:83:E2:81:0A:EA:E5:1A:19:9F:F4:FB:BE:D0:5F:6F:AE:49:55
Certificate issuer:       /CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
Certificate serial:       010D0C9F4328584B63673E771ABDCFB46EA52A80
Authority key identifier: 16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/186a3c34-fbd9-37ba-8001-381dc6012797.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     8095
IP address blocks:        23.154.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3e:77:1a:bd:cf:b4:6e:a5:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=d4b83530-e1ee-456f-8320-74cc44437773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:fe:25:7b:2d:87:e0:4c:f0:95:02:57:fa:
                    e6:28:f2:2c:9f:85:85:2f:9c:6c:b1:1b:23:c6:b9:
                    f3:90:f6:e2:4d:5e:35:0f:27:91:81:15:da:c6:a3:
                    37:05:f3:f0:c4:dd:ee:ec:83:3e:72:fc:0a:8e:3b:
                    63:c3:b0:d4:64:b7:83:16:70:eb:78:ef:e2:a3:9a:
                    54:e5:2d:d8:1a:cc:7d:03:2a:6b:13:51:47:9d:1b:
                    8e:49:2e:3b:fd:4e:37:2a:ae:bc:63:a9:a7:c6:a1:
                    33:b6:22:c7:5d:23:df:d8:9e:e3:a6:4b:0b:7a:56:
                    fc:d6:82:e8:04:19:7e:51:71:58:cb:fa:12:60:38:
                    a3:98:5d:21:35:b6:11:35:ab:c4:f4:00:5a:9c:ec:
                    58:43:d9:ad:7d:e5:7c:af:9e:ac:6d:32:8d:aa:60:
                    16:24:97:ce:5f:92:15:d9:00:96:17:29:bb:04:08:
                    c5:bc:7b:ad:ce:1d:98:fd:94:1b:77:4e:ea:bd:c1:
                    39:7e:99:f3:33:a3:18:80:af:2b:e8:ac:af:d4:f6:
                    d0:30:5d:81:b1:a4:2c:87:bd:3a:b9:02:7a:4e:9d:
                    3a:c1:45:2e:a5:7f:0e:cf:6f:ff:0f:f8:d1:46:5b:
                    23:b2:ce:6c:f6:44:1b:f5:3f:80:99:d3:77:d8:90:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:83:E2:81:0A:EA:E5:1A:19:9F:F4:FB:BE:D0:5F:6F:AE:49:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/186a3c34-fbd9-37ba-8001-381dc6012797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl

            X509v3 Authority Key Identifier:
                keyid:16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:09:5a:12:ea:14:9f:60:81:85:81:c3:ac:bf:fb:d7:15:7f:
         22:61:e9:f9:af:5c:9b:00:2e:65:45:a3:60:3c:4a:59:a3:19:
         e0:0e:b1:57:a6:bc:d8:7a:2c:aa:7d:b2:e9:f5:99:e7:a6:bc:
         33:95:5b:6b:e2:76:21:94:cc:48:27:c2:11:57:f4:93:e8:2f:
         c8:ec:43:52:63:c0:89:85:0c:85:b9:2b:b9:69:b3:a2:58:eb:
         20:e1:a0:3a:12:c3:a1:eb:cc:e5:0f:67:b3:c0:c3:ee:1d:ef:
         b6:3a:42:d2:30:85:2b:26:d9:4e:3b:b4:49:0b:cf:de:23:2e:
         1e:3d:4d:b9:77:1d:a3:2d:80:53:b2:63:f5:dc:c1:fb:30:9c:
         3d:24:fd:7e:38:e7:ab:81:00:07:dd:54:82:ff:e0:31:7a:81:
         28:60:f5:28:92:03:87:7c:ff:ad:88:df:33:1b:d8:8e:e6:11:
         8f:f6:4b:58:54:01:16:94:da:63:ee:c6:d3:a0:e3:76:39:a7:
         4b:8b:76:74:65:d6:c3:52:d3:d9:a8:ee:22:5b:b3:1d:5b:08:
         eb:af:63:97:53:94:01:a5:d7:64:0b:bf:59:5e:9f:9a:34:90:
         04:f6:33:5a:9b:c8:a2:9f:99:85:0a:f2:16:dc:50:cf:2c:c7:
         f3:d8:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:47 2025 by rpki-client