Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
File:                     5d90966f-a528-3b8b-8dc3-ede422faaf58.roa (raw, json)
Hash identifier:          n/0rDC7Qo501azcY1uvKrskhPxQ2Z50cP3MLFALcXHQ=
Subject key identifier:   1D:15:EE:10:77:03:24:C7:74:52:B2:EB:B8:A6:3A:EE:0F:EF:2D:B3
Certificate issuer:       /CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
Certificate serial:       010D0C9F4328584B84E770ED62AF166DC2943A6B
Authority key identifier: C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     397592
IP address blocks:        23.134.112.0/24 maxlen: 24
                          2620:13f:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:70:ed:62:af:16:6d:c2:94:3a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=2fb75fc0-1dde-4078-9f78-99660be77053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:8a:51:3b:69:e9:df:a1:17:b2:4a:15:fb:
                    24:cf:e6:62:96:7d:c3:61:b7:f1:9d:8d:13:32:8b:
                    c8:c9:91:9b:0c:eb:ce:ba:35:18:04:45:6f:a3:d0:
                    fc:c0:e5:d0:20:55:2b:89:35:8f:a3:4e:2c:ef:b4:
                    78:fe:5e:41:b6:68:2c:bd:e1:e5:12:1f:ab:e1:49:
                    3f:63:61:2f:b9:ae:63:e4:86:01:d7:c8:a3:93:b0:
                    8a:38:49:7c:e3:78:3c:55:4a:94:72:76:8e:4e:1a:
                    8c:dd:3e:f8:be:0e:52:a6:fa:d9:cc:ff:f1:7d:84:
                    25:48:e3:b1:bc:b3:20:43:7a:d7:2f:22:e3:1b:ee:
                    a5:1e:27:12:66:6b:9b:6c:68:ec:5a:4d:55:84:e2:
                    0f:c2:3b:5a:5f:c8:a7:f7:8d:0b:0d:07:fe:ae:65:
                    77:fc:98:ba:84:79:03:d7:ad:a5:23:f3:02:e7:c2:
                    aa:61:f4:2e:7e:a8:8c:eb:d4:6e:55:de:01:67:54:
                    dd:b2:23:e8:ec:6f:7c:f4:7d:8e:a5:36:c2:2e:a9:
                    95:e9:2e:a8:c6:77:d7:6d:fa:b7:52:13:fc:0e:3a:
                    c8:ad:d5:1c:78:16:f9:c5:f1:4f:8f:af:9b:f3:a4:
                    5c:1d:65:a3:c6:00:dd:23:3e:ec:27:7b:6b:5a:15:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:EE:10:77:03:24:C7:74:52:B2:EB:B8:A6:3A:EE:0F:EF:2D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl

            X509v3 Authority Key Identifier:
                keyid:C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.112.0/24
                IPv6:
                  2620:13f:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2c:c7:45:6e:de:30:55:48:18:a1:7f:af:06:ee:aa:7d:d6:
         d2:4a:87:d2:a4:e7:48:f6:d8:d9:5c:0c:37:55:cf:39:57:b2:
         78:6f:d6:ed:59:6a:80:b2:09:99:79:a5:83:d7:6f:14:9c:15:
         bd:78:89:78:f0:23:6f:24:f2:12:48:64:5a:ed:26:39:ef:71:
         b4:64:22:c8:fb:2a:4e:d6:35:55:ba:56:09:59:4d:27:ad:ff:
         cd:2a:a3:b4:3d:2c:e1:0f:f4:3a:36:4a:8e:a6:ed:07:89:0b:
         a6:e4:1c:6f:bb:6f:85:15:2c:7a:a8:a1:7e:12:77:0d:7a:b1:
         e6:a5:c4:a9:a8:2b:b4:ae:f0:b5:e2:0b:ee:f7:2a:eb:37:6f:
         2c:e5:57:5e:e1:0c:08:1a:1d:b8:2b:ad:ac:ae:73:53:3c:2a:
         a1:17:5e:2a:6f:30:00:7c:32:56:08:dd:bf:9b:9b:62:58:6c:
         6f:f6:be:5c:63:7a:02:0c:2e:fd:4a:96:d9:26:b4:91:8b:93:
         db:7b:ff:49:f7:c8:d9:45:69:25:c3:bf:cf:8c:a4:69:b0:5e:
         9e:c4:ec:ed:aa:d8:5b:87:4e:26:dd:2b:5d:cc:fb:90:92:2d:
         b0:d6:4f:cc:77:09:54:d7:51:d4:c1:9a:74:3a:14:09:d3:82:
         ca:90:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:31:05 2025 by rpki-client