Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa
File:                     bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa (raw, json)
Hash identifier:          tlyULL7WzmNvVQLFUtwadEnT3Urhz0/dt6SYMlYg3JY=
Subject key identifier:   F5:3E:47:5C:98:62:73:03:7E:7D:3B:DB:7B:2E:67:3D:BB:41:98:71
Certificate issuer:       /CN=f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65
Certificate serial:       010D0C9F4328584B3DB6FA8F634DE94FD2B776C0
Authority key identifier: E0:D8:1B:F6:4D:3E:35:A6:CE:33:3A:A0:D6:B3:D8:2F:90:11:21:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        23.169.80.0/24 maxlen: 24
                          2602:808:7000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:fa:8f:63:4d:e9:4f:d2:b7:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=f55bd070-6859-41e0-972a-c45ede5573f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:6f:fa:e9:63:d3:96:8b:49:5d:33:e4:29:
                    f5:82:cc:47:2c:8a:a7:a1:ad:91:c5:e6:69:74:ae:
                    ef:78:e7:4e:ec:a2:d0:6a:01:70:dc:7b:6f:43:3a:
                    87:0a:5b:32:98:5e:64:f2:61:02:3a:ed:fe:18:e2:
                    77:44:f9:af:93:0a:9e:8a:c4:58:29:08:f6:73:5e:
                    cd:49:6c:1c:2d:44:83:86:33:a4:82:7c:0e:a6:cf:
                    a7:bd:7f:3e:9a:15:46:08:da:fe:24:95:57:f6:bf:
                    87:6c:94:76:1f:7d:19:2f:07:99:21:a9:24:0a:58:
                    eb:e1:ff:4c:f0:8a:55:a4:16:bf:14:47:40:2b:43:
                    39:7f:62:15:9a:4c:3b:a0:96:42:00:bb:65:e3:49:
                    07:c7:c3:5b:42:eb:23:2b:65:41:e8:61:cd:7c:f5:
                    26:ea:d1:ca:f5:ed:53:4c:ef:6b:e7:b1:d9:c2:e0:
                    06:1c:34:3f:52:1f:bb:ba:d0:5c:66:01:05:85:35:
                    54:ef:22:ef:27:91:28:4d:9a:03:ea:9e:3f:ba:ef:
                    1c:d8:27:4b:1d:44:dd:ac:81:3d:1c:9b:5f:1b:fd:
                    94:aa:c1:c9:32:3e:15:46:b8:cb:6e:7a:17:6a:95:
                    6c:d0:d0:78:37:8c:33:59:2d:09:46:17:5d:5b:9c:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3E:47:5C:98:62:73:03:7E:7D:3B:DB:7B:2E:67:3D:BB:41:98:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/bfa98bc4-8dc9-34bd-81f8-8a73bba5cf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.crl

            X509v3 Authority Key Identifier:
                keyid:E0:D8:1B:F6:4D:3E:35:A6:CE:33:3A:A0:D6:B3:D8:2F:90:11:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f5eb2f3d-dea3-4c72-b98b-99a8c60d2b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.80.0/24
                IPv6:
                  2602:808:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:1c:59:c4:f4:df:08:59:76:aa:0e:6d:49:4e:91:12:4d:
         9e:c7:39:88:7f:3b:60:ef:c5:a6:e8:c6:78:31:32:2f:d5:d7:
         10:73:da:c0:64:1e:da:8e:a1:c7:15:4b:14:16:7d:3d:d0:d1:
         ca:a7:03:a3:af:2a:92:ad:89:0e:37:b9:c9:cb:d7:bd:af:67:
         7b:68:4e:ee:5a:e5:03:85:3b:1a:f4:16:69:68:74:14:77:81:
         3d:06:37:29:75:2c:2e:08:54:10:e9:b6:81:93:fc:43:9b:29:
         bd:9c:35:42:1e:1c:8f:5a:81:9a:a8:42:90:65:9f:6b:b3:11:
         03:ba:73:65:69:5e:ef:6d:09:65:ff:62:1e:dc:fb:08:57:12:
         b1:ff:5c:95:8b:8f:69:cf:bd:eb:c7:fb:ba:40:e1:ba:54:9c:
         71:d9:a3:13:79:fb:67:9d:57:aa:20:0d:61:18:d0:ab:9b:10:
         ee:f7:08:c0:50:fd:de:f4:9c:12:03:c2:61:1d:6b:30:b3:b2:
         83:d9:cb:01:9c:8f:85:78:6b:af:60:ec:3e:4e:5e:7a:f4:ea:
         f9:7e:4c:b7:ea:16:6d:a9:0a:45:66:d5:bd:9e:95:00:94:9d:
         9d:7f:35:83:76:89:5f:c8:fc:e7:b0:1a:01:05:4e:82:8b:1c:
         cc:ad:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:27 2025 by rpki-client