Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
File:                     0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa (raw, json)
Hash identifier:          ad6rGeDDpBrhHvGfsRVUoum2yPS8rNyKw1+jeWkJ8I8=
Subject key identifier:   6A:EF:8E:27:4D:A2:51:36:2C:68:D0:DB:52:7D:28:0B:4C:BB:48:AD
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F4328584B821CCF4D501D104AE80DAC00
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     8075
IP address blocks:        23.141.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cf:4d:50:1d:10:4a:e8:0d:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=819fb5c7-394f-4e5d-8de1-48470ecb66bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:2b:b1:be:20:cc:ad:0c:91:c8:88:4f:6c:
                    7c:d6:84:4c:8f:51:bf:d3:d5:a5:cf:8b:04:9f:30:
                    8d:99:b8:f2:66:bb:c4:7f:8b:7b:33:77:ed:f3:4a:
                    c0:cd:36:df:28:91:24:ef:a1:98:c9:d7:76:c4:02:
                    1c:ff:6b:41:bb:2c:7b:b6:78:d5:9f:25:db:af:7b:
                    2a:30:5b:d6:b7:00:e6:e4:bc:59:d2:ed:54:d0:f3:
                    73:47:76:98:63:38:64:46:94:b6:34:43:bc:cb:6d:
                    22:3a:62:2e:11:ee:42:e4:1a:a5:e1:6e:b2:7a:5e:
                    d2:24:51:4e:5f:0d:58:5f:1f:12:c0:64:9d:09:d1:
                    11:f2:61:71:85:ff:18:31:75:bd:ff:c2:89:f2:e8:
                    44:ff:cf:45:8d:86:be:25:44:29:b6:e2:c2:f2:6e:
                    56:d3:5f:a2:89:05:e6:28:33:ba:ec:f8:c9:0f:73:
                    bb:b1:99:e5:83:e1:67:9c:7d:27:0e:71:17:15:8d:
                    cf:47:4d:83:96:22:18:ea:b7:ff:b1:d4:41:b9:4f:
                    9d:40:b9:16:a2:b9:af:06:7f:ae:c0:74:49:2e:b3:
                    3b:c6:75:2b:e8:45:06:8d:c4:23:8b:35:7a:14:ef:
                    12:72:da:9b:6a:b1:9c:72:90:8f:dc:45:3b:6e:06:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EF:8E:27:4D:A2:51:36:2C:68:D0:DB:52:7D:28:0B:4C:BB:48:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:d5:b0:1f:61:41:38:95:13:51:6a:61:fd:7a:c6:0f:1d:
         07:8b:cb:31:0b:d5:a1:2b:9d:20:8f:f7:1c:40:91:a5:25:52:
         c2:ea:46:a9:51:67:48:a2:d7:c3:fb:54:a7:5f:19:a9:a2:42:
         d1:66:33:da:36:1c:52:2f:e2:6b:e7:b9:3b:ab:6e:87:5b:9a:
         13:e0:62:aa:29:22:8a:43:a2:bd:d6:7a:5f:c6:70:1a:74:8a:
         9d:fa:e3:e9:21:d8:ae:85:26:a5:3c:9b:b4:89:54:a3:3e:32:
         cd:92:1d:5c:2e:a9:b2:63:5a:f1:c5:16:d5:82:0a:cb:0b:ee:
         96:ed:d1:72:6b:58:21:9b:a1:e6:13:35:5d:c1:23:97:72:5e:
         df:1a:57:d5:bb:9f:9f:d7:98:76:24:af:4d:90:73:00:34:1d:
         8e:be:f6:24:8e:03:7d:98:d0:2b:71:ca:1f:59:7b:28:85:26:
         0d:68:a0:27:c4:89:f6:24:08:d4:6c:07:85:75:85:ed:78:47:
         7f:af:b6:a3:0c:4e:03:5c:11:32:5f:87:fe:73:b2:bf:25:f5:
         dc:49:59:1e:59:e1:7e:61:f4:ce:63:4f:d6:74:73:d6:2c:ab:
         f6:75:f9:f3:3e:e4:55:12:d2:15:c3:40:d4:86:a4:2f:93:80:
         9f:7a:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:53 2025 by rpki-client