Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File:                     7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier:          5TDIlZr4lENYBoInVYCjYRQqT9qBsEyiE0hLb5NUP4Y=
Subject key identifier:   28:AE:22:CA:BD:96:E2:92:60:FB:D0:46:13:F3:E8:47:A3:A9:4F:F4
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584B8EACC1CA5F6007F9C02C9780
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     7034
IP address blocks:        23.152.160.0/24 maxlen: 24
                          2620:13b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c1:ca:5f:60:07:f9:c0:2c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=d176cfdb-c51e-43cd-9b84-57764259512a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:f3:de:81:c6:ab:5a:70:a6:95:d3:d8:c6:
                    57:7a:02:1c:db:19:30:18:74:01:9a:9d:c6:41:6f:
                    99:d2:db:11:a4:9d:57:bd:b7:12:fb:a1:f3:8f:27:
                    2f:9d:af:af:e2:bf:94:29:76:d7:10:9b:1b:61:bf:
                    12:58:f2:82:30:34:7f:cd:0c:66:fc:4f:56:23:b5:
                    02:4d:e6:3a:19:a2:40:e1:2f:6b:a3:64:24:c0:6a:
                    1a:3b:99:99:5b:af:e1:07:70:84:99:52:9a:6c:62:
                    36:d5:5c:77:b1:30:58:d3:ac:8a:1b:f9:16:11:dd:
                    da:fd:f1:c9:b6:e9:87:6b:d3:2f:d9:14:75:27:d8:
                    45:44:12:04:16:df:fe:3f:6b:1c:73:29:67:d7:47:
                    e2:e6:7b:88:8f:5b:ae:56:7e:9a:2d:14:77:1d:6a:
                    75:f1:cf:68:c4:50:2a:a4:e4:04:f5:e1:22:da:22:
                    66:ae:ee:37:42:64:f0:0f:de:6b:53:d0:38:be:f3:
                    96:bf:23:e3:17:59:7a:77:68:85:f4:f5:eb:5f:1c:
                    8c:bc:74:da:20:ba:9e:65:3d:70:67:27:c0:a5:e7:
                    e0:d4:64:7b:46:df:47:b2:71:c6:d4:0b:e7:50:4d:
                    66:b1:6e:d5:d8:d9:6e:e4:a4:06:19:bb:19:7e:b5:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:22:CA:BD:96:E2:92:60:FB:D0:46:13:F3:E8:47:A3:A9:4F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.160.0/24
                IPv6:
                  2620:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:a9:d7:1c:a2:2d:60:0c:f0:c0:90:ca:96:d8:ef:c8:b9:
         81:f5:3b:2c:6f:59:1d:92:57:99:87:3a:70:3a:d1:32:a5:56:
         77:a8:17:db:e0:08:8d:52:0e:95:c2:14:6a:78:6a:b5:a7:0d:
         a8:80:4d:f1:9d:c7:9a:28:b7:c9:b9:28:10:70:78:be:78:da:
         4e:5b:73:5c:93:2d:6b:60:0a:60:95:e8:20:af:65:75:01:ac:
         5d:57:7c:2a:13:9a:11:2d:e6:8d:a3:53:70:3a:1d:90:7c:a8:
         69:80:9c:13:29:13:37:4a:76:02:74:c0:4e:76:e4:ce:8f:33:
         2b:ea:c3:b7:45:6f:02:36:36:9f:9b:20:f2:65:07:77:f7:e0:
         98:6f:7c:3a:01:93:cb:e5:53:55:fc:76:e7:d5:a7:dd:7c:0c:
         a5:1f:f1:d8:ce:13:be:6e:00:96:45:e2:03:e5:1a:0d:5b:55:
         f0:d4:a2:eb:50:32:c2:1c:97:75:5e:50:d0:83:58:77:e4:34:
         92:09:ac:41:45:47:2b:95:f9:1e:29:74:74:3c:71:2e:84:ae:
         e6:0f:09:02:f0:9a:7e:0f:c2:d5:3e:3a:f4:98:b1:83:de:00:
         61:80:5c:8e:5d:8f:ea:1a:71:7f:cd:94:46:44:f3:90:62:1b:
         4d:b7:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:06 2025 by rpki-client