Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/fc23e4c7-95a8-3935-94d1-c8487b502173.roa
File:                     fc23e4c7-95a8-3935-94d1-c8487b502173.roa (raw, json)
Hash identifier:          pzk7l6A67vTp9VvJAn+aAj0ovbHhYbB9KUS/bOxpCgQ=
Subject key identifier:   91:77:43:07:07:4C:CE:E7:5E:47:84:80:11:5D:C0:EB:3B:2F:D6:E3
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584AF0F1538619F0E444B2920C80
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/fc23e4c7-95a8-3935-94d1-c8487b502173.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     31857
IP address blocks:        23.157.48.0/24 maxlen: 24
                          69.28.32.0/20 maxlen: 20
                          141.193.60.0/22 maxlen: 22
                          162.213.180.0/22 maxlen: 22
                          199.127.112.0/22 maxlen: 22
                          2604:3b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:53:86:19:f0:e4:44:b2:92:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=aae92d3d-c68b-42aa-a9f6-8fa4d1895bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:fd:cb:13:26:18:f3:36:70:15:f7:cb:8c:
                    4e:92:35:4e:3d:1e:25:0c:a0:60:84:5e:14:7e:cd:
                    54:00:57:21:01:15:4d:19:bb:7a:fb:c6:5d:b2:29:
                    f6:03:10:e2:02:45:84:ab:9f:58:4f:6f:70:3a:46:
                    5c:41:24:2f:e1:d8:01:db:90:44:d7:94:26:b2:1f:
                    3e:ae:3b:32:dd:45:41:88:bc:1a:e8:12:91:c8:77:
                    54:12:49:04:01:aa:25:55:2c:0a:d1:04:1b:a9:40:
                    27:21:e3:4c:e0:1b:f5:84:9f:89:59:40:45:28:54:
                    4a:68:6e:76:65:77:ed:de:0c:19:94:bc:75:ef:a6:
                    1a:cd:64:1d:b2:f1:28:46:9a:de:49:05:4a:3e:ed:
                    dd:b0:ef:83:3d:49:63:bb:f2:17:ce:dd:71:09:b9:
                    8d:49:86:c0:76:66:49:0e:2e:ee:05:46:8e:eb:0e:
                    98:a5:2b:7d:39:0d:19:ce:ac:3b:c9:ea:f9:11:ba:
                    62:dc:50:20:64:4b:07:fa:c0:8e:5a:84:08:04:d1:
                    76:dd:fc:d1:bd:b7:b9:40:b3:cd:e8:c6:61:8f:74:
                    c6:df:96:7a:21:01:cd:86:9b:93:c7:d5:ef:cd:b2:
                    35:4b:1c:99:98:72:c1:e0:aa:81:c4:c0:86:b6:ff:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:77:43:07:07:4C:CE:E7:5E:47:84:80:11:5D:C0:EB:3B:2F:D6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/fc23e4c7-95a8-3935-94d1-c8487b502173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.48.0/24
                  69.28.32.0/20
                  141.193.60.0/22
                  162.213.180.0/22
                  199.127.112.0/22
                IPv6:
                  2604:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:7d:e7:14:ae:9d:e3:75:1e:ec:5a:91:8b:a4:a5:b3:e0:
         97:f3:5c:fb:e2:cb:5d:fb:25:06:23:4a:d8:f5:0c:bd:d5:fb:
         f5:ee:2d:11:1d:79:49:9a:19:cb:94:f1:81:7b:7b:f9:de:cd:
         90:5e:a1:e9:63:29:26:dc:fc:b5:f5:76:e1:b4:5e:a7:97:1f:
         18:67:aa:0e:2c:68:d9:6a:32:c1:ec:6c:01:e7:1c:23:7d:42:
         e7:83:e5:d7:b7:32:5e:8a:c1:5f:a5:9a:d1:68:3c:cb:20:f6:
         06:ea:60:4c:7b:af:95:e1:c9:29:45:8e:bd:00:aa:2e:46:b4:
         93:22:cc:a8:20:70:77:38:5e:1a:27:18:b1:21:a9:e2:d8:fa:
         1c:68:8e:de:ab:f3:75:f3:17:0d:29:3c:7d:f3:16:0f:ba:6d:
         72:67:13:c7:bb:e2:9d:c4:f5:96:84:af:26:54:ad:ba:a0:51:
         de:e6:d0:b8:a3:1b:69:70:63:0d:02:84:6b:2b:c9:c4:2b:40:
         79:c1:46:50:47:d9:a6:8f:0d:73:78:0f:d6:c1:fa:52:e8:e8:
         27:ff:67:e0:87:84:1a:a8:28:f6:1a:c0:f3:84:0c:d2:69:10:
         5c:18:fd:4b:17:51:34:4c:d4:70:5c:61:7b:c3:7e:23:94:b7:
         7c:98:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:38:31 2025 by rpki-client