Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/50266634-758a-353f-871a-b6e402b25f31.roa
File:                     50266634-758a-353f-871a-b6e402b25f31.roa (raw, json)
Hash identifier:          B9aJDfL+RtvjlXMJGYB+jGTHDzaNhP9xFL4lhpAIeAw=
Subject key identifier:   76:87:20:B4:5C:2B:6F:61:48:4E:FD:A3:A6:6C:F4:09:B5:13:59:4B
Certificate issuer:       /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial:       010D0C9F4328584B4BAC727DAC5D8902681C1680
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/50266634-758a-353f-871a-b6e402b25f31.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     135074
IP address blocks:        23.145.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:72:7d:ac:5d:89:02:68:1c:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=89584288-c036-462d-b2d1-d1aab90d25ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:92:2d:38:01:24:49:c5:28:92:0b:b8:05:10:
                    30:9c:1a:fa:7a:92:90:d2:08:b4:4e:42:b6:6b:cb:
                    6b:bc:9e:6c:77:87:e4:3b:cd:00:9b:0c:2e:88:ed:
                    8d:90:dd:49:e9:86:f0:a3:40:b5:3f:cb:8d:13:ef:
                    ee:1d:f9:f0:41:8b:6b:46:a6:65:57:79:04:ea:87:
                    27:c5:84:4d:80:ef:a9:e5:91:31:f7:a6:87:4f:f8:
                    55:15:12:0e:7f:4b:e0:fb:6b:a3:a3:db:12:70:5f:
                    50:68:ac:0f:fe:31:77:1d:f2:a2:1d:06:7d:c8:c8:
                    c3:dc:dc:30:66:ed:58:db:3a:97:93:94:b1:21:2a:
                    79:14:1f:21:82:99:2e:d2:a7:80:2e:20:00:1c:6c:
                    9a:69:7e:2d:95:85:30:95:67:0c:0f:9b:d8:21:b5:
                    af:39:e8:e5:6c:a2:64:d5:cd:6f:1d:bf:13:c3:b0:
                    4b:c0:d1:ad:b4:a3:ae:95:15:89:34:d1:8a:f7:7d:
                    a9:18:89:c1:3c:c7:c7:3f:d8:7a:b1:2d:c2:33:b9:
                    08:a1:3f:39:fc:30:c4:36:a9:a3:f2:8c:dd:b3:0f:
                    1f:fe:34:af:b0:e3:1d:da:45:0e:bf:19:cf:55:68:
                    71:52:a6:a7:a3:19:94:d0:e6:57:d5:5c:fc:e3:88:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:87:20:B4:5C:2B:6F:61:48:4E:FD:A3:A6:6C:F4:09:B5:13:59:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/50266634-758a-353f-871a-b6e402b25f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl

            X509v3 Authority Key Identifier:
                keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:18:bf:84:3c:5e:48:e8:0f:15:54:b8:07:06:b3:4e:90:ed:
         14:0d:5f:b0:3a:a7:5d:32:f5:e4:8f:c4:72:61:56:ed:08:0b:
         47:1d:ae:8a:a5:7b:20:05:87:9f:63:65:90:e6:49:74:36:c7:
         75:a7:ed:a7:f5:db:95:0a:84:d0:25:b7:9f:ed:11:23:4a:2c:
         25:d5:0a:b0:cf:77:64:4b:c1:1a:dd:cf:75:33:8a:6a:f4:18:
         70:64:45:4e:c9:e3:87:9f:93:da:aa:f1:cd:6e:95:fd:fd:0d:
         69:0b:b9:e0:b2:e4:25:8f:74:6e:d8:7c:4c:55:5a:0d:7f:8e:
         2e:e1:ef:c5:57:01:6e:8a:67:2b:73:e8:38:b6:3e:e3:c2:eb:
         6c:19:d4:e7:77:da:7c:38:ca:c3:ec:1f:9d:1b:1a:1b:1c:c6:
         16:44:39:44:b9:c9:6d:e7:e4:71:42:b5:b3:34:20:74:b7:49:
         b0:b5:e1:08:16:fc:08:b1:c8:ec:34:23:9d:a5:06:24:73:12:
         78:c2:a0:9b:ad:d4:18:ec:fb:e4:71:45:ce:b0:5b:48:a7:e8:
         2e:9a:b4:2b:5f:d6:7c:ae:93:14:21:37:44:21:75:f9:32:ac:
         61:26:4b:7f:6e:a4:6e:e2:15:a8:ba:d7:d8:b3:91:79:3b:0c:
         2b:ec:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:26 2025 by rpki-client