Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55137a9c-8fe1-31c5-bb65-a499a8b5c8e1.roa
File:                     55137a9c-8fe1-31c5-bb65-a499a8b5c8e1.roa (raw, json)
Hash identifier:          GzyoUKH6Ka9hAffUIVY9WpdNB0xAepNucTJUTnCh8KA=
Subject key identifier:   2E:69:A5:9A:FD:B1:D5:6E:77:22:B6:E5:AE:5B:A1:BC:CC:43:87:87
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE14C38757CBDEB8901D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55137a9c-8fe1-31c5-bb65-a499a8b5c8e1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        23.236.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:14:c3:87:57:cb:de:b8:90:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a299a843-4bf7-4e9f-a2f2-775a1449557d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:03:b0:b2:a8:c4:49:0b:21:b9:4e:59:a5:
                    fb:94:f3:73:77:f4:a5:06:e5:ab:7d:2b:94:a7:19:
                    b8:f4:dc:5b:84:df:d2:8b:ea:30:5c:14:06:0c:68:
                    95:25:bf:00:ff:eb:f2:34:1e:af:4c:3b:15:28:8c:
                    d3:23:eb:2f:ab:c9:88:00:71:c5:43:59:d2:72:2d:
                    9c:dd:65:56:f9:33:26:0e:41:6c:e5:87:68:62:50:
                    eb:a2:35:45:70:0f:c8:49:3e:e9:69:3c:2a:fd:db:
                    81:14:0a:01:b2:e8:0b:ef:0e:6b:8f:1b:af:b0:25:
                    0f:4c:7f:be:95:59:87:45:ca:ef:d3:5f:d0:d3:47:
                    cd:bd:0e:e4:cc:e8:c9:00:cc:c0:91:c1:55:ef:20:
                    8a:e8:26:06:54:80:ea:96:2f:8f:e2:08:2c:a9:9e:
                    12:ba:44:fe:48:c7:d3:1b:6d:87:47:e0:3e:91:8f:
                    66:38:de:df:f1:98:c1:2b:02:54:86:71:1d:c3:ab:
                    7f:ed:0f:1f:8e:99:74:57:6b:53:36:6b:f8:cf:77:
                    dd:08:c7:55:f1:0c:6b:1a:b3:ff:3b:0a:7d:d6:1c:
                    3e:60:d9:82:e3:84:46:0b:93:b3:2a:8b:31:78:12:
                    82:7d:a0:13:2a:ad:07:35:5d:80:d7:16:f6:31:5a:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:A5:9A:FD:B1:D5:6E:77:22:B6:E5:AE:5B:A1:BC:CC:43:87:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55137a9c-8fe1-31c5-bb65-a499a8b5c8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.236.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:6c:c2:a0:ca:ee:f9:4d:34:9f:23:13:24:d0:c2:44:98:
         4c:7c:f0:a8:e8:37:50:d2:d5:93:68:c7:f3:09:e2:5d:1a:36:
         04:eb:2c:ca:5c:56:b3:c7:aa:92:cd:2f:64:51:61:9b:19:84:
         b5:cb:d3:48:1b:87:92:33:08:5f:78:2a:41:b7:a1:44:79:6c:
         9d:2c:86:6b:5b:cc:0b:79:b3:18:23:dc:2c:43:e0:08:3d:d1:
         67:cf:1e:d3:c9:58:1e:cc:81:a4:03:d5:89:f7:6b:43:b0:d1:
         c2:a1:f4:63:e4:26:09:7b:b5:5f:b1:3a:15:40:1a:32:7d:2c:
         70:e6:67:ad:99:e2:da:93:d2:b4:ce:a3:8d:f7:3c:14:81:71:
         5d:1f:8b:5b:9d:c3:89:c9:a2:9a:58:f0:09:2f:4c:11:9a:91:
         39:c9:2f:a9:b9:a1:9f:53:80:73:f7:9b:6a:b4:9c:d9:d2:65:
         4b:d7:0d:64:6a:b5:39:9b:a9:87:ad:ad:6e:da:19:5e:96:a7:
         19:9c:2b:0a:19:30:c2:ba:57:40:59:a7:9b:c4:5b:bd:00:e6:
         82:a3:aa:6f:ac:21:5a:56:f9:f7:b4:15:3b:7a:cd:58:b3:0c:
         5a:fb:85:50:98:23:89:67:6d:d4:14:6b:b2:75:f5:a0:2d:0e:
         c0:f9:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:36 2025 by rpki-client