Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
File:                     43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa (raw, json)
Hash identifier:          sXlzvG7dYxvgXPTYDDDB9Udy1AqkyMUfTscNAGW0O4g=
Subject key identifier:   BF:D7:6F:DB:55:11:38:0B:3C:83:5C:C7:A4:20:18:91:B3:FC:0E:77
Certificate issuer:       /CN=62612914-d3c8-454d-861f-ea1fa94cf858
Certificate serial:       010D0C9F4328584AE19675CE8591C14AD88BB500
Authority key identifier: D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     398542
IP address blocks:        23.129.82.0/24 maxlen: 24
                          134.195.108.0/22 maxlen: 24
                          158.51.128.0/22 maxlen: 24
                          207.90.220.0/22 maxlen: 24
                          209.163.124.0/22 maxlen: 24
                          2605:e140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:75:ce:85:91:c1:4a:d8:8b:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62612914-d3c8-454d-861f-ea1fa94cf858
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=658df1d4-ea49-427d-b07c-b158f5c8fb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:10:83:53:67:b1:87:2e:50:45:0a:04:f7:
                    00:a6:9e:47:e9:30:c6:63:af:20:52:fc:10:ec:99:
                    bd:ef:90:5e:79:d3:92:5f:d3:2b:0e:e1:f7:7a:f6:
                    f9:de:18:43:ff:7d:25:63:7b:72:2c:f2:56:7f:58:
                    68:c9:67:28:b1:53:1a:e6:59:2a:68:aa:f9:93:97:
                    b2:f4:fb:5b:d5:08:ad:18:62:1d:ab:31:9f:3c:12:
                    ec:6c:e9:c8:70:aa:7e:76:8c:96:b9:a9:cf:d0:fb:
                    2a:12:b1:d6:bc:1f:2f:cf:ab:d4:fa:ce:21:3b:2e:
                    47:ea:0d:31:b0:2a:c8:01:89:70:ee:e5:b2:4c:24:
                    61:d8:26:40:29:0e:9e:11:04:2e:53:3d:d1:72:d1:
                    91:3e:ae:56:2f:b4:d2:d0:10:c2:0d:c6:b8:05:50:
                    f6:bf:a1:1e:fb:0c:8d:a0:87:1d:9f:dd:e8:2f:ed:
                    b7:36:ed:56:51:d7:fb:c0:33:e1:b7:f6:df:97:19:
                    3e:ac:0b:9d:d3:71:ae:8b:da:e2:46:16:aa:f6:26:
                    b9:46:38:6a:61:ce:e4:95:10:5f:27:ea:f2:a3:3d:
                    98:b9:4e:9a:28:58:ba:a7:f4:24:30:25:7e:ec:f2:
                    ae:a8:a2:5e:cf:0a:d3:ca:8b:d4:94:28:90:74:7c:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:6F:DB:55:11:38:0B:3C:83:5C:C7:A4:20:18:91:B3:FC:0E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.82.0/24
                  134.195.108.0/22
                  158.51.128.0/22
                  207.90.220.0/22
                  209.163.124.0/22
                IPv6:
                  2605:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:68:7d:a6:d6:9b:9f:84:9c:df:e6:55:00:c3:6b:e5:61:00:
         27:32:d6:d2:8f:74:75:9c:92:4b:e0:40:08:ca:1e:7e:c7:bc:
         d7:87:b5:cb:fd:e4:d1:32:42:4e:92:04:f1:fb:c5:f5:01:cf:
         a9:a4:56:f4:eb:26:78:3d:01:c3:9c:f9:06:a9:61:88:bb:48:
         96:04:1d:e8:a2:10:6c:b9:65:b0:70:4d:35:39:4a:2f:b2:12:
         00:8c:b2:bf:19:ce:d7:84:21:8d:8b:c2:bf:96:8c:5c:dd:0c:
         ec:00:7d:5e:98:b3:af:1e:3d:63:7c:d6:1b:ec:cc:67:94:f4:
         7c:a2:87:33:e3:b4:78:e1:8f:ed:79:92:06:76:36:b0:89:05:
         7b:f1:6e:f1:d5:30:73:ca:3e:91:28:b1:e8:4a:93:dc:7d:49:
         ac:e9:9e:e8:38:a6:d2:f9:2c:64:b9:c2:9e:6f:69:86:de:be:
         86:e8:71:bd:cb:07:ad:3b:35:45:20:b6:8e:a6:fd:87:7e:1a:
         3f:e8:76:ca:0f:b1:2b:44:6f:0c:eb:a7:67:9a:b5:e3:cb:8f:
         7d:10:6c:cd:69:15:0b:ff:12:0d:30:c0:52:fd:eb:c5:ae:11:
         79:4a:19:26:10:c7:38:8a:82:86:2f:51:af:52:f1:d2:b9:f3:
         fd:42:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:40 2025 by rpki-client