Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa
File:                     70dd68fe-7e33-3081-a8a1-918560928fca.roa (raw, json)
Hash identifier:          W7VqKAC1vRKW3p4E+GykbJyVd77p1tImrWvp/scnptk=
Subject key identifier:   41:65:64:B1:C3:4C:1B:20:54:F5:7B:6B:8E:84:8B:83:DE:02:60:E3
Certificate issuer:       /CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
Certificate serial:       010D0C9F4328584B82B134D6F372D68D6E4FED80
Authority key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396872
IP address blocks:        23.132.224.0/24 maxlen: 24
                          23.132.225.0/24 maxlen: 24
                          130.12.128.0/22 maxlen: 24
                          142.202.24.0/22 maxlen: 24
                          155.254.200.0/22 maxlen: 24
                          170.205.44.0/22 maxlen: 24
                          216.39.236.0/22 maxlen: 24
                          2602:fe65::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:b1:34:d6:f3:72:d6:8d:6e:4f:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=d294582c-c1b3-4bed-b68c-de29a5a2c22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:57:1d:b1:01:6e:d5:36:25:62:58:04:8c:
                    ea:4e:9e:22:9a:21:03:db:70:45:93:13:54:0a:e5:
                    ac:e5:7f:42:48:09:86:86:b4:5c:9c:58:9d:8f:b6:
                    f3:38:da:b1:2d:83:3f:7e:6e:44:10:0d:0e:e0:7c:
                    69:c3:3d:6b:02:f2:74:6e:d2:c9:37:59:3e:fa:2c:
                    5a:fa:a8:df:56:db:20:1a:1d:18:14:c7:8d:cc:c7:
                    77:f9:df:99:7b:dc:4f:e7:3f:20:b5:24:1c:de:f1:
                    3e:98:40:2b:2a:8d:4e:33:7a:39:6f:cc:a7:6f:ba:
                    7d:6f:b8:c6:a5:0c:64:d0:79:28:09:08:14:e3:87:
                    c9:52:c4:bf:3e:34:e5:23:3e:bf:ab:7c:48:9f:21:
                    64:52:12:c2:f2:62:b2:0b:da:80:76:3a:b4:91:26:
                    0d:ec:b2:29:ae:d5:a3:f2:f6:d5:4e:e4:b5:84:46:
                    22:3b:20:0d:df:da:09:75:3f:19:e7:4a:39:18:96:
                    6d:3d:6c:57:58:22:0d:6a:93:02:0a:c4:9a:84:96:
                    e6:d1:3c:4b:a2:92:b1:83:b5:d6:0f:6a:b3:e6:18:
                    22:e1:97:7b:e8:95:42:fb:e9:64:e1:bb:6c:6a:ec:
                    b2:53:d5:21:47:a8:4e:71:9b:2f:54:6a:2f:0d:ac:
                    93:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:64:B1:C3:4C:1B:20:54:F5:7B:6B:8E:84:8B:83:DE:02:60:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl

            X509v3 Authority Key Identifier:
                keyid:BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.224.0/23
                  130.12.128.0/22
                  142.202.24.0/22
                  155.254.200.0/22
                  170.205.44.0/22
                  216.39.236.0/22
                IPv6:
                  2602:fe65::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:22:7e:a8:ac:49:78:80:24:45:8d:b9:ef:6a:6f:fc:68:5c:
         bb:00:1a:88:08:9f:6a:09:f8:5d:37:15:59:aa:aa:d5:c8:a5:
         88:bb:42:73:cb:7f:9f:dc:5e:e9:f2:3d:4d:0f:50:9c:5a:d8:
         7f:d0:be:f4:5f:4d:82:63:9f:7a:dd:3c:67:d1:74:f6:eb:b8:
         46:e7:c6:21:af:65:2d:35:4f:5b:0c:a0:c9:95:39:c8:c2:96:
         a3:59:7c:35:c8:d6:ed:b3:76:42:a0:e8:d0:c6:f4:14:21:5e:
         f2:a7:a8:04:60:a7:8a:ac:23:88:99:34:5a:76:25:2d:be:5a:
         12:16:6e:f7:13:45:c5:53:3e:55:79:83:e3:51:1c:78:f9:b3:
         5d:03:96:d9:bf:ca:32:dd:2e:e2:68:89:aa:7f:04:80:26:14:
         de:3d:eb:91:d0:94:94:1f:5e:33:6b:10:1e:f3:f1:a6:91:4b:
         81:ba:b6:6b:41:9d:39:7d:52:cc:14:1b:eb:8e:4a:65:fe:9b:
         5a:4c:6c:40:7c:9c:d7:d0:4f:ed:85:b9:b0:4b:08:53:02:1d:
         97:8b:82:2e:d3:48:29:23:75:7e:72:fa:ca:d0:5e:25:76:7c:
         e0:e4:05:83:a9:2e:d4:06:a9:9d:85:c7:4b:ef:a8:70:4a:d3:
         88:bf:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:31:04 2025 by rpki-client