Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa
File:                     401985a3-82fb-38a4-a3a9-2b894ca2670e.roa (raw, json)
Hash identifier:          HwsobfkypK2U93MTKox1LQH1ANBlonOYnJ7GZ0hGm/c=
Subject key identifier:   53:D9:33:AB:AF:D4:84:74:9F:9C:89:32:66:D1:00:0A:93:06:F2:D2
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584B92DD918A550ACD372D8FC5E0
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     401833
IP address blocks:        23.141.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:91:8a:55:0a:cd:37:2d:8f:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=3abd79d1-4d2d-45b3-b71c-3ca56adabc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:24:38:bd:49:58:85:ee:4d:8d:4e:6b:5f:
                    ed:c6:44:b3:50:5b:7a:97:6c:83:8e:23:f7:5f:b3:
                    5a:19:49:ce:e9:ff:0c:42:50:e0:5b:d4:c2:ca:12:
                    06:0f:51:0b:80:3e:c2:ee:d3:1c:aa:0c:65:63:97:
                    54:ae:95:a2:d2:3b:ca:48:99:5b:61:dc:86:5f:d1:
                    93:04:f1:b0:3e:cc:40:d4:67:3e:7a:41:04:87:6a:
                    98:d2:2e:8b:4a:58:5c:d5:fa:2e:45:31:85:85:69:
                    40:22:db:83:29:e1:7b:76:11:9f:e1:12:07:e6:44:
                    2f:2d:e4:6a:cc:b9:59:6d:d5:b6:f0:de:08:9e:e2:
                    bb:60:ff:fc:ac:93:24:1c:8e:1a:4f:3a:dd:ff:50:
                    b9:b4:95:37:c6:12:38:3b:6a:e3:4c:3a:0c:b5:3e:
                    90:37:dd:cc:dd:30:e6:f8:70:00:b2:33:80:b6:b5:
                    ec:79:cb:5c:1d:35:e0:6c:7e:bc:35:ae:d3:e9:4e:
                    77:8f:48:d3:33:03:ac:20:6d:6a:fe:d0:2a:54:87:
                    06:01:17:58:a5:12:ef:c2:63:42:7c:d9:3b:ea:79:
                    57:b3:13:51:ce:af:00:c1:8b:f7:d3:6d:b0:d0:86:
                    0c:46:bd:8f:da:60:5e:c1:58:08:7e:2b:7f:6a:8d:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D9:33:AB:AF:D4:84:74:9F:9C:89:32:66:D1:00:0A:93:06:F2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:02:72:d3:48:e6:9f:84:7c:76:49:e3:81:a7:5b:f7:a9:
         1d:13:9a:2b:c6:b1:8f:bb:a8:a5:05:9a:92:8a:8e:91:8e:7e:
         4a:a9:a2:df:cd:58:7d:68:dc:8e:d8:7d:e4:ce:d7:7d:66:bb:
         76:b1:1b:f8:93:ed:0b:6b:e9:b2:bd:1b:03:b8:3c:4e:c2:0a:
         b4:34:32:4b:fb:21:6f:37:73:04:9c:0f:8c:cd:73:80:1a:c0:
         f9:9d:03:e0:70:15:7d:bb:f9:71:27:36:3c:64:7f:b0:8a:38:
         49:7a:1c:45:a4:13:d4:7e:d1:a8:95:03:62:6a:5f:01:9b:06:
         4e:58:ab:67:88:9f:94:0c:7c:e6:4e:97:79:4e:e4:f3:e6:cc:
         38:b2:4c:67:a8:51:32:82:bc:ef:f8:29:e0:9f:7c:04:68:34:
         bb:67:47:ef:97:7a:0f:4d:67:07:a4:fe:6d:b2:73:1b:32:2b:
         da:0f:51:d6:3d:bb:8c:13:27:df:40:3a:6a:0d:65:84:77:ab:
         55:3d:49:f4:f5:5c:b2:c7:6d:9a:bb:66:3a:ae:75:76:35:41:
         98:80:0f:d0:e7:b3:b7:50:1e:e4:1e:9b:2d:aa:fe:d4:64:d3:
         eb:1b:34:e4:64:be:d3:2d:7f:97:f8:26:9f:2e:c0:20:d3:78:
         55:21:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:40 2025 by rpki-client