Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa
File:                     70832e38-c84d-3a35-8dba-711ac64c0596.roa (raw, json)
Hash identifier:          tDAoKmTddMXzHI5pcPJE++St4ofYuk0p2G5p3wUElwE=
Subject key identifier:   17:10:3F:7F:70:F5:D7:58:65:E6:6E:1B:E8:18:D2:02:D3:29:2D:77
Certificate issuer:       /CN=817b315d-32a3-4ee9-ba5d-557007a627ae
Certificate serial:       010D0C9F4328584B8EACE9206F108CC000DB8480
Authority key identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     62836
IP address blocks:        23.129.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e9:20:6f:10:8c:c0:00:db:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817b315d-32a3-4ee9-ba5d-557007a627ae
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=aafbca60-364f-486f-ba6b-e52e8041e3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:ac:31:69:ac:d6:ce:48:9f:b8:e9:74:c8:
                    b5:0a:bd:cd:a6:48:4e:a1:a9:b0:23:d7:5f:56:b5:
                    3d:9e:9c:d3:0d:e3:cd:83:ea:e3:de:35:90:f2:90:
                    e3:e9:53:ad:75:26:7a:31:01:a9:8e:77:1d:5d:64:
                    4f:be:d6:6a:5f:a0:10:a1:da:84:e1:01:25:d9:08:
                    ad:9b:cc:03:59:c6:ca:89:b7:2c:56:68:bd:1d:75:
                    72:f5:eb:a1:86:98:7f:66:f9:66:3a:fd:41:ef:05:
                    80:29:30:af:ed:d7:41:30:71:35:3f:06:b2:17:2c:
                    c5:40:2d:27:26:76:fe:55:b5:94:38:3b:b5:f8:af:
                    7e:55:da:8f:d9:0f:7b:75:28:54:4d:89:bc:5f:6e:
                    b1:9f:19:fb:55:b3:fb:34:16:6f:b4:f8:f5:d1:d3:
                    4b:c9:4a:a2:18:c3:88:78:23:09:64:6c:b2:6e:a4:
                    02:25:eb:d8:69:74:24:9b:10:37:af:84:3e:c5:07:
                    e6:85:8b:d8:f9:0c:ed:37:96:ca:88:25:d9:da:85:
                    34:0d:c9:26:d4:76:65:08:99:59:43:08:ee:e0:9b:
                    c6:72:3e:61:80:46:70:d9:97:e9:c2:f0:e6:66:c7:
                    4c:ec:71:28:bd:e0:4f:c5:ab:2f:1b:61:57:56:01:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:10:3F:7F:70:F5:D7:58:65:E6:6E:1B:E8:18:D2:02:D3:29:2D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:33:a0:23:a6:0b:f5:b0:31:60:c3:e3:31:de:41:c6:6b:f6:
         81:9b:e4:49:71:a8:f0:af:39:4d:36:be:3d:e4:b7:98:e2:4f:
         a1:76:71:81:84:dd:e7:ca:75:8f:b5:3d:0e:e9:00:4f:9c:93:
         20:62:b6:35:e5:16:f0:b8:98:e1:64:c5:35:12:ef:6f:ed:78:
         ae:54:4b:0f:0c:b3:c4:9e:57:72:a7:c6:76:28:e3:d6:05:c6:
         24:c1:84:c2:cb:ea:14:0d:0c:7e:e5:99:ae:e7:7d:1f:3d:36:
         e4:11:63:72:7b:f6:db:c1:e9:03:ba:2e:d0:59:b1:70:c8:41:
         13:92:84:08:39:57:8e:36:c0:61:03:77:37:40:6e:73:cf:ca:
         10:8e:fb:ff:49:2b:81:b7:31:45:81:13:16:ae:1c:64:aa:13:
         91:b2:61:f5:6f:ca:2a:ec:4a:13:6a:3e:c5:ba:d5:0c:ef:82:
         6d:5a:e8:eb:cc:76:13:63:f7:1e:62:6d:82:50:54:f0:3a:f1:
         b3:2b:91:8f:42:5c:d3:cf:23:aa:cc:b9:4e:ab:5e:a4:e0:8e:
         f8:85:c6:04:fc:0f:56:2f:16:9a:4d:f0:0d:e9:98:8f:df:49:
         1b:44:b8:77:fe:55:3a:fd:ea:b3:ae:42:fa:50:88:99:62:79:
         50:ca:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:21:57 2025 by rpki-client