Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/7bc1e6eb-84a5-380b-9fe6-4e71356da04f.roa
File:                     7bc1e6eb-84a5-380b-9fe6-4e71356da04f.roa (raw, json)
Hash identifier:          qy4jGPJo/rGA3Kzf/idoyKh8KHbAa9rNxBLdB6Bmw00=
Subject key identifier:   1F:C6:22:19:C6:95:36:D3:FC:47:9B:10:BB:04:2B:CE:93:92:21:7A
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584B7C875BEF6C0D5568D65D1980
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/7bc1e6eb-84a5-380b-9fe6-4e71356da04f.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     11867
IP address blocks:        23.134.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5b:ef:6c:0d:55:68:d6:5d:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=3a450f35-6c13-4f88-947c-fbe5b125c1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:4c:bc:5b:85:02:6f:e6:af:e0:f1:c2:33:
                    03:63:8c:97:af:85:c6:7c:9a:86:04:0f:36:c0:4a:
                    f6:4b:18:8a:30:ba:e0:10:c8:f2:f1:fd:9b:20:f3:
                    8d:8f:7a:e2:a2:38:b2:cf:15:b7:d5:34:0e:76:d6:
                    b6:98:b5:ec:95:2e:a7:fd:8b:31:99:a9:7c:f0:d7:
                    d1:af:ee:71:a7:17:79:8a:3b:ae:e3:f9:b2:fc:90:
                    7e:02:11:7f:1b:0e:53:59:f2:06:5e:46:1e:08:a5:
                    64:e1:9a:cb:c0:4c:65:c9:00:48:b2:3e:a1:11:82:
                    b0:97:b8:5b:38:67:5b:68:de:7b:d4:5d:84:7a:cb:
                    97:db:b7:7d:85:92:9a:52:72:e2:0e:5d:9d:8c:b4:
                    96:35:2e:82:cf:12:9a:48:e0:58:20:26:14:6e:22:
                    c7:25:32:ad:07:55:84:e7:b1:fa:39:9b:f0:2a:35:
                    4e:a1:3d:91:13:23:7d:25:81:d2:01:bd:a1:87:9d:
                    6c:79:d2:33:90:3a:d2:d3:d6:9d:b5:82:7d:0c:ac:
                    ce:68:0b:fa:a4:78:c7:c6:19:2f:24:ba:f7:05:64:
                    9d:1f:9c:32:c1:cf:0a:98:3b:3e:54:c1:d1:d7:cd:
                    1f:93:a6:0a:99:e9:bc:4e:fb:22:26:ca:11:d7:98:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:22:19:C6:95:36:D3:FC:47:9B:10:BB:04:2B:CE:93:92:21:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/7bc1e6eb-84a5-380b-9fe6-4e71356da04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:da:08:61:0a:c5:4c:9c:94:8b:4f:5b:64:48:5b:70:b9:
         e6:6a:69:07:2c:0f:92:8a:82:b0:1d:3e:05:48:75:48:26:04:
         74:d9:50:24:64:3e:5c:6f:7b:b4:21:cd:91:fa:b1:12:dd:c7:
         0e:80:d7:ea:34:16:3c:90:c7:13:aa:4c:6a:9f:e1:3d:a9:fb:
         8e:a5:f2:7d:3f:1b:95:be:2a:cd:6c:40:68:39:89:53:71:ea:
         4b:94:20:f3:b0:4c:6f:cc:87:7e:d2:f6:33:a1:66:d0:cf:99:
         fd:ae:3a:ad:a5:cd:25:6c:1b:3b:9d:e2:b4:ec:88:85:c4:dc:
         e4:7c:de:a9:77:53:e4:19:7a:10:1f:33:b4:9b:3d:e4:6d:79:
         20:f6:ab:98:9e:bd:e8:ff:4a:b4:87:74:c2:d1:ea:9c:8a:fe:
         22:fa:54:d4:e5:bb:8f:d6:14:18:69:68:a3:93:cd:ec:32:98:
         c3:a0:90:09:a3:b4:98:7f:5c:aa:34:9c:1c:bd:6b:e6:cb:78:
         b7:c5:9d:09:98:58:58:bd:30:c4:2c:d5:36:64:50:e1:ea:43:
         b7:2b:77:03:03:68:ca:9a:ad:e0:71:31:a2:0d:8a:a9:73:9f:
         31:17:88:a9:1f:77:d8:19:fe:b4:db:60:73:42:7f:ae:da:bc:
         45:3e:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:01 2025 by rpki-client