Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/aa748512-018c-307a-b575-e11b343b461c.roa
File:                     aa748512-018c-307a-b575-e11b343b461c.roa (raw, json)
Hash identifier:          P3CY2QNWK+dEtiv8CG0L+JdOK3B0EZVw170m3fcWK4Q=
Subject key identifier:   75:36:81:60:34:53:68:BC:A0:C0:A9:84:9D:C5:95:4B:AE:1A:1B:87
Certificate issuer:       /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial:       010D0C9F4328584B8EACDBF2EE58B20BDB55B680
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/aa748512-018c-307a-b575-e11b343b461c.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     5670
IP address blocks:        23.134.80.0/24 maxlen: 24
                          206.55.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:db:f2:ee:58:b2:0b:db:55:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=ba754aad-5fea-4c12-a727-cc20bb95e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:96:0c:98:90:39:0f:01:ba:3b:59:52:7d:
                    e3:12:00:51:93:12:5d:14:c2:70:2b:4d:f2:64:79:
                    51:be:10:c4:36:05:20:73:98:fd:a1:8f:f1:ec:eb:
                    5c:33:c9:e7:99:42:e5:fe:30:9b:2a:f7:12:86:5e:
                    88:ba:dd:fd:19:a5:e2:9c:63:b7:ff:c2:40:6a:3b:
                    a8:92:7c:ba:f4:5f:77:39:b5:ba:bc:64:1f:b1:e8:
                    f4:88:ff:0b:6f:5d:be:aa:23:5f:2b:e8:0e:c3:16:
                    1e:f9:11:36:9c:3e:7f:d7:27:6e:40:8d:7d:ca:e8:
                    7a:8f:cb:e8:d8:b7:35:21:05:6e:da:b5:05:db:81:
                    89:a4:f2:9b:66:f5:a9:f2:63:33:ce:f9:c9:26:2b:
                    43:bf:10:23:31:a4:f0:18:a4:00:f3:8c:29:ab:b3:
                    34:e7:35:19:4f:ce:06:0a:e5:b1:0d:03:fa:b6:8f:
                    78:79:8a:f2:10:c6:b1:60:c2:fc:0a:ed:a2:68:75:
                    16:18:36:1e:b4:fe:64:03:fd:c8:44:d5:30:98:a3:
                    f6:8a:8b:9d:dd:34:b6:0a:9c:5c:b0:9c:d0:bc:fe:
                    1c:94:f5:5d:92:b0:a7:93:4d:ad:d3:a2:b2:84:61:
                    fc:2c:e9:ac:b9:ce:87:b9:c7:9e:82:4d:f4:68:6f:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:36:81:60:34:53:68:BC:A0:C0:A9:84:9D:C5:95:4B:AE:1A:1B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/aa748512-018c-307a-b575-e11b343b461c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.80.0/24
                  206.55.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:1e:0e:78:f0:9d:d4:e4:e1:da:8c:ff:5a:54:95:18:c3:
         08:17:5a:3c:5c:76:53:bf:6e:5c:19:7b:6c:03:74:96:c7:24:
         13:19:24:1e:77:4d:9c:a3:48:28:fa:ea:8a:b7:e4:15:51:d6:
         96:47:3b:db:47:97:51:71:aa:f6:89:51:91:29:99:a3:5c:c7:
         98:3e:ab:f8:09:2f:ea:62:2e:13:30:48:f4:31:31:58:50:0c:
         73:f2:e3:f1:f5:6b:df:40:02:8a:86:ee:8d:61:ad:e7:2d:9c:
         5a:c8:e1:fa:75:cd:61:9c:1b:9c:90:87:8e:4f:af:1e:1a:73:
         4c:7a:39:6e:7b:19:19:eb:12:0c:51:d2:97:57:bd:df:b1:71:
         fc:c9:31:d3:d3:ee:b9:d3:f1:98:63:ef:99:77:bc:d1:78:33:
         a9:a9:59:75:c0:89:f0:2b:f2:00:2a:11:8c:8c:e2:b2:c0:c0:
         bf:70:8d:d1:96:c6:14:6c:db:42:7b:6d:f3:76:ce:ca:31:cb:
         a5:ed:25:d9:e9:78:ed:29:dc:08:4a:52:ed:69:55:7c:ad:70:
         c8:c7:b4:6f:92:c9:63:ce:47:e8:f3:ba:4c:c6:80:ba:ad:7b:
         31:57:f1:77:98:24:d6:55:eb:fc:87:0d:d8:16:74:8d:a7:c3:
         3c:93:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:27:13 2025 by rpki-client