Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa
File:                     cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (raw, json)
Hash identifier:          vIzdh4rlO6hg5EksQzMaaMTYl2auNADe3q00PL8pQG4=
Subject key identifier:   0D:CC:2E:3A:C4:B8:7F:D3:92:28:99:AE:34:D3:CD:D6:D5:D6:FD:2A
Certificate issuer:       /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Certificate serial:       010D0C9F4328584B2FC195F1ABFB6E1F99432700
Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     209242
IP address blocks:        23.145.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:95:f1:ab:fb:6e:1f:99:43:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=fac413ff-cd3b-4226-9e53-1f27049f61a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:92:b3:63:1a:07:dd:f5:2d:b0:c0:dd:aa:
                    f9:fb:c7:6f:bc:d9:2d:35:a3:4b:79:ce:91:88:ee:
                    e9:f9:3b:6b:39:3d:c2:e1:db:fd:df:d1:b7:be:db:
                    ed:f3:15:2e:f0:10:61:87:d8:67:43:90:c3:09:cd:
                    dc:43:04:9b:97:7d:0f:a2:aa:96:1b:90:e3:b3:34:
                    ac:0c:50:c2:22:fc:34:06:c3:37:b7:39:fd:6b:f1:
                    af:ca:d9:03:47:fe:bc:3e:5f:ee:58:7a:a5:bc:e3:
                    7e:d6:df:a2:12:01:b4:fc:4b:d1:b2:4f:e8:ad:1d:
                    e4:b5:50:b2:87:61:2e:c2:8b:cd:e6:3e:18:3c:a7:
                    f6:f2:5f:11:5f:66:c1:11:1b:52:3e:2b:70:c2:10:
                    c8:71:4e:7c:10:83:7d:4c:3a:dc:95:ac:75:35:26:
                    35:c6:64:44:b0:64:25:c9:aa:85:61:0b:43:a4:b2:
                    6f:e1:1a:20:51:eb:1a:e7:16:0d:34:16:c2:3e:92:
                    b7:0e:69:57:e3:86:3d:83:ee:05:7f:0a:e3:ed:46:
                    bf:3f:40:54:d3:61:ce:0c:dc:ae:21:f7:f3:d2:71:
                    30:a9:04:8f:dd:83:e6:85:86:cf:c4:b3:01:0d:bf:
                    a2:2d:a1:ca:36:1f:46:83:a5:e4:b5:62:ad:21:26:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:2E:3A:C4:B8:7F:D3:92:28:99:AE:34:D3:CD:D6:D5:D6:FD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl

            X509v3 Authority Key Identifier:
                keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c8:87:fc:4e:b2:1d:f2:ee:e5:e1:2a:bd:42:3e:5a:0c:d0:
         83:95:69:95:e5:02:87:f0:85:33:37:d6:fc:31:b3:51:38:87:
         d2:4e:51:f7:c7:e8:fe:a1:7a:49:46:4b:9b:3b:9a:50:bf:16:
         3a:27:7c:5a:b1:4a:71:df:5c:b8:76:19:0a:43:be:c8:24:a5:
         72:ba:d9:af:1a:d2:39:16:a4:0b:13:47:9e:bd:18:30:4b:a8:
         55:b6:6d:bf:46:69:34:62:19:4c:b2:12:ee:c5:cf:51:0e:78:
         ad:b1:93:dc:56:16:6e:d5:fe:d8:4c:d5:da:9c:4e:e1:5a:ef:
         da:d8:35:d8:3b:25:ef:eb:3d:eb:5b:3d:4e:3e:00:c6:94:fe:
         21:f0:2a:c6:5c:c4:09:2a:ba:30:43:4a:5c:7e:b9:11:23:5b:
         82:7a:e7:af:f6:07:9f:fa:87:ef:6b:91:93:57:2d:f1:7c:7d:
         a0:00:c6:ac:65:ca:be:5e:89:af:a4:03:ea:fe:50:79:ea:e6:
         71:09:7c:cb:93:3b:cd:f1:b9:97:7c:a6:06:7f:a3:1a:9b:96:
         5c:48:af:15:5c:b3:24:8c:ac:7b:2f:c1:d0:f7:01:4b:56:fe:
         25:20:26:b0:a9:fa:60:94:8f:c7:9d:2a:89:93:a6:77:4e:33:
         a8:c0:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:37:25 2025 by rpki-client