Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa
File:                     4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa (raw, json)
Hash identifier:          97rnXtQpm8GKv0mRu8tKv+6RI32ryNHm7ovT2dGYXnQ=
Subject key identifier:   AD:84:92:CA:E1:81:00:03:71:C8:E4:8C:D7:E1:E6:2B:9E:0E:80:EF
Certificate issuer:       /CN=e7060a03-da54-4766-9b77-667ebbb66ffe
Certificate serial:       010D0C9F4328584B970CD3ED1496C1ED58185F00
Authority key identifier: BD:2E:98:F5:D4:36:9B:81:AB:83:21:F0:51:BF:9B:EF:BA:EC:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     397382
IP address blocks:        23.131.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d3:ed:14:96:c1:ed:58:18:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7060a03-da54-4766-9b77-667ebbb66ffe
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=2f879e95-ea77-4d19-9915-0b3de18172a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8c:45:37:94:62:79:fc:c9:64:77:26:a6:c4:
                    32:88:37:d9:4c:7b:41:29:bc:83:45:83:69:ad:b2:
                    07:a3:84:5a:3d:50:cf:5e:ae:85:f8:86:74:1d:90:
                    dd:2f:b7:8e:a1:c8:f2:a3:3f:4c:ba:19:04:52:9d:
                    c6:5e:a3:c8:64:a8:fa:bb:e9:86:ac:d3:2a:1f:de:
                    77:b0:cd:89:af:a6:07:e7:30:64:58:b3:99:7e:2d:
                    f5:38:bc:49:70:77:05:5a:a0:e0:cd:26:4e:2e:88:
                    c3:53:8d:21:89:7f:96:27:0d:51:5d:8b:8a:e6:6e:
                    f8:e3:9a:25:f8:5b:11:b6:82:1c:f8:ed:8f:7c:a4:
                    d7:83:ed:be:cf:f0:8c:5d:18:c1:02:95:bf:80:82:
                    81:52:aa:73:51:6d:d9:65:a7:38:db:34:74:88:a4:
                    2b:70:91:40:eb:54:ed:74:c7:8c:35:e6:c4:06:10:
                    78:4c:6c:da:ac:aa:90:f0:57:4c:d0:bc:e3:0a:21:
                    c1:4f:f8:9d:9c:a9:37:80:2a:b8:8b:cd:c7:ba:cc:
                    2d:f2:30:06:a5:b1:bb:25:92:6e:ec:32:2c:3c:41:
                    64:4a:22:a5:26:28:f5:b5:c6:11:0d:eb:0b:b5:b7:
                    4f:39:cf:15:41:f9:12:c3:04:ab:00:99:af:3d:a6:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:92:CA:E1:81:00:03:71:C8:E4:8C:D7:E1:E6:2B:9E:0E:80:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2E:98:F5:D4:36:9B:81:AB:83:21:F0:51:BF:9B:EF:BA:EC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:18:28:1c:65:9b:e7:73:8d:4c:2c:b9:1c:67:03:cd:78:01:
         5c:1d:37:8d:06:ab:92:76:03:5f:32:60:38:74:b2:45:30:eb:
         3d:71:bc:52:5f:b8:95:8e:ef:fe:cb:17:14:3a:c6:fb:27:0a:
         f0:a0:9a:f3:88:7a:4f:5e:f8:27:56:30:f1:d1:e2:54:2b:19:
         b9:f0:02:ad:99:e2:28:a3:02:f1:31:b7:31:9b:14:61:74:04:
         28:19:27:13:a8:f3:8b:75:57:12:0f:23:4a:f8:56:05:3b:e7:
         f3:0a:16:a9:0b:92:f2:52:ca:f7:91:ac:43:d7:cf:55:74:58:
         0c:6c:1a:4c:8f:08:e4:5e:38:6d:e6:12:33:ff:aa:82:70:73:
         f1:b3:f2:50:04:50:c9:c9:fe:2e:b7:4f:68:19:ea:f2:dd:a5:
         05:02:57:b4:a3:1e:60:86:4c:d0:13:f5:bf:b4:af:d0:22:14:
         11:61:dd:0e:91:73:42:e9:13:a7:86:11:e2:33:1e:f6:2d:56:
         b0:02:de:d1:a7:85:f5:74:16:4a:22:32:6d:f1:05:ab:0d:30:
         ea:af:8f:a1:b1:3d:9d:97:52:50:c4:2b:c7:79:c2:25:a1:1f:
         8a:0a:0b:ab:3d:b3:c4:a0:ae:6a:d9:2f:6b:0e:66:ea:21:17:
         22:70:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:46:49 2025 by rpki-client