Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa
File:                     13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa (raw, json)
Hash identifier:          AO6h4mXAzD9q7Zm6kDEn+hB4HRisCnnH98puhphCOeI=
Subject key identifier:   B5:62:23:53:82:D6:46:D4:B1:58:F7:60:0F:4F:CE:43:AC:25:46:44
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584B6D2CB7A6B6737F75A9717F40
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     53388
IP address blocks:        23.128.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b7:a6:b6:73:7f:75:a9:71:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=248e05ee-0f5e-4c2b-9e57-1745c6cb856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:f3:b4:3e:41:01:43:46:a2:8d:12:a1:fe:
                    8a:71:18:27:4f:3b:b1:47:69:36:57:9f:ee:3a:f3:
                    9f:8c:3b:5f:85:20:b4:6a:12:62:bd:5e:d8:01:19:
                    f2:31:6f:cd:91:31:91:fc:09:94:bc:b0:6d:5d:bd:
                    c1:69:77:94:fe:d7:43:d6:45:be:4b:f8:e6:30:f7:
                    53:62:f9:c5:8a:3b:01:6c:e6:96:21:95:eb:8a:77:
                    cd:03:db:ee:b8:88:64:bf:92:b6:47:6d:7d:1f:72:
                    7b:2e:55:0b:aa:37:25:ff:66:29:e9:81:db:a4:47:
                    58:b1:cc:fa:5f:a0:9b:21:fd:81:bc:a4:47:23:b1:
                    dc:b9:87:f2:47:fb:ae:44:78:ca:62:e4:81:b3:cf:
                    9a:98:87:8c:7d:9c:0f:21:4a:d1:77:56:4f:e7:cc:
                    49:a7:f3:27:b6:3e:b7:6e:92:97:e1:b1:11:a6:92:
                    98:f4:84:90:ac:5f:e2:19:ed:aa:34:db:52:74:d1:
                    64:6f:59:a4:f2:2f:5c:d2:6a:51:88:a2:ec:f7:0d:
                    0f:11:f8:37:e1:2c:c6:61:57:b5:47:13:85:31:87:
                    04:20:23:7e:30:c4:4c:3f:13:95:e7:63:fe:91:e1:
                    57:4f:b2:b3:92:54:a2:e3:67:85:ec:f0:eb:18:c7:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:23:53:82:D6:46:D4:B1:58:F7:60:0F:4F:CE:43:AC:25:46:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:2c:c8:4b:6d:81:9c:ad:e7:57:1e:6b:29:57:94:c3:8e:
         5a:98:82:ec:39:7b:92:83:3c:62:6e:57:36:7a:b3:e7:b7:a8:
         4e:2b:2d:c0:c9:2e:4d:b3:c1:11:5e:a8:f6:7b:a0:cd:70:a9:
         da:a1:46:e2:12:5b:6d:60:c9:87:c0:c4:63:fc:dc:73:0f:53:
         7e:a7:e1:80:d1:bf:8b:0b:f3:30:93:6e:25:c1:08:f1:dd:e0:
         11:c2:81:95:53:a1:12:df:ca:7a:fe:87:e6:43:b1:b6:c4:ac:
         52:0b:8a:3f:36:a0:90:a3:ee:95:f8:54:75:06:c8:72:79:28:
         d7:74:3a:93:e0:b4:6f:11:19:7c:9d:73:d3:56:f9:ed:fc:9f:
         c7:76:3d:8a:fc:47:12:ee:09:de:64:f7:49:0d:ce:22:29:d8:
         83:bc:f3:0b:3f:91:85:0e:20:d2:c5:6b:f5:1e:fc:61:fd:8c:
         6e:07:dd:ca:b7:fb:37:2e:b9:e9:da:73:63:dc:df:1d:87:1d:
         d1:df:59:35:25:7c:f4:89:25:ed:91:3e:92:3f:17:08:ce:af:
         e2:b6:7f:ce:17:51:ca:a7:98:aa:43:fa:38:53:7c:a4:f5:97:
         41:ae:d0:e5:1c:68:7f:0a:f1:2e:2f:f2:b1:c2:5e:31:99:43:
         1f:31:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:50 2025 by rpki-client