Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa
File:                     b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa (raw, json)
Hash identifier:          faKnr4LHDhqpfdam0cWIZG74UNTltoQUuuQz7MXNbP4=
Subject key identifier:   10:86:F3:EE:8A:04:E2:40:DA:16:67:43:FB:46:EA:60:C6:70:E6:C2
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584AFEE6A7EFB210CFEF1CA57400
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     26548
IP address blocks:        23.147.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a7:ef:b2:10:cf:ef:1c:a5:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=403fc4c6-d41b-4169-a499-72402024a4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:75:6b:da:77:b4:1d:fd:0c:cd:69:c4:97:
                    ab:43:d0:d0:4f:fe:c0:e7:d9:4a:95:4c:2e:84:18:
                    a8:21:07:1f:0a:ab:c7:5f:c5:f3:bf:54:70:f8:7b:
                    3d:7c:61:c4:bf:06:87:bf:73:55:e4:0d:d5:10:26:
                    1a:e3:4e:65:42:0f:90:bc:87:d2:0d:37:c3:00:53:
                    97:84:6a:0b:66:7d:38:cc:ec:ac:a4:91:29:c5:f9:
                    a7:8d:d9:dc:aa:1b:22:8b:15:d8:80:6f:7b:49:42:
                    f1:85:97:a0:e0:b7:d2:4a:da:44:4c:26:33:97:0d:
                    2a:3a:3b:be:61:97:fc:12:dc:53:87:7a:1c:8c:00:
                    1a:45:83:04:c7:dd:f7:0d:a6:ce:81:46:9e:19:cb:
                    36:75:58:71:09:4f:f4:8e:2f:7e:f7:f8:fe:82:2f:
                    f0:a7:7b:ec:2e:15:70:bc:21:fe:76:2c:79:07:97:
                    08:af:b3:2f:48:68:2e:98:06:77:cf:27:74:9e:c5:
                    92:39:c7:83:5d:80:1a:3e:0e:c8:7d:9b:2b:fe:bf:
                    f4:95:e1:29:f7:9a:9b:0e:a8:bf:fd:9b:a5:7b:88:
                    86:6f:0c:b6:a9:00:ed:fc:ec:89:9c:c2:1b:34:c8:
                    c5:1c:46:cb:cd:8d:74:82:9a:9d:ca:b8:69:7d:cb:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:F3:EE:8A:04:E2:40:DA:16:67:43:FB:46:EA:60:C6:70:E6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1d:52:cf:84:72:03:b8:70:fd:55:9d:2b:76:68:90:4c:70:
         82:12:7b:90:9a:cb:92:b9:40:d1:d2:16:85:fa:23:70:16:88:
         67:b4:a1:79:04:2f:e6:c8:27:af:9e:69:2a:16:99:62:f5:c8:
         c1:e8:24:13:e9:be:11:4d:36:6d:65:72:4b:49:31:50:c0:39:
         26:69:0c:54:5c:c6:77:01:61:6a:70:e2:64:78:4c:03:c1:0d:
         17:38:dd:de:f7:60:ff:01:0e:97:88:7c:dd:74:08:d9:3d:94:
         04:81:25:84:76:7f:f7:74:2b:af:d3:2e:1e:cd:0a:96:df:b8:
         08:aa:f5:e0:d1:0b:3b:12:fc:d6:66:b3:63:4e:2d:84:96:4a:
         41:db:78:fc:30:30:90:78:c9:1d:e6:98:41:ab:70:9e:97:9d:
         ec:75:f6:00:04:bb:89:2b:23:da:fe:fb:34:a5:b4:a0:4c:8c:
         03:c6:14:d4:86:b9:d9:3c:ce:eb:2d:ae:10:ca:38:a0:37:1e:
         82:9c:89:df:65:8e:09:87:61:fa:53:93:48:fe:d8:7c:af:71:
         b5:a0:da:ad:f8:02:6f:a0:fc:3c:47:d1:a3:6e:07:4f:93:94:
         08:f3:5b:10:f9:1e:64:bc:2d:11:ac:8f:67:15:52:26:6c:d2:
         9e:16:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:42 2025 by rpki-client