Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa
File:                     fa73468a-9857-31fe-a887-276ed3d1ca76.roa (raw, json)
Hash identifier:          gB8t1VZqdh4H4gnyaa9kjqYry+m9SRe+ul9xppAbTI8=
Subject key identifier:   88:1B:1A:C8:2A:20:66:2A:46:08:9F:FE:8E:71:73:FA:92:A7:7F:FA
Certificate issuer:       /CN=98252c6f-4de3-4710-bd94-6334e6a81c64
Certificate serial:       010D0C9F4328584B76F22797012AC56A38314FC0
Authority key identifier: 63:77:8D:A2:31:36:6F:07:47:59:D6:D0:A4:F4:87:B0:C2:56:62:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     394144
IP address blocks:        23.145.160.0/24 maxlen: 24
                          192.234.79.0/24 maxlen: 24
                          2602:ff7a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:27:97:01:2a:c5:6a:38:31:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98252c6f-4de3-4710-bd94-6334e6a81c64
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=6ceb32b0-7f4a-4629-8350-b64c0bae472d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:28:5e:bc:b0:0b:c9:c8:e1:60:3d:22:5a:
                    c0:91:51:e9:8f:53:22:1f:1e:db:6a:5f:29:1e:5e:
                    8f:18:44:1b:58:57:70:15:6c:74:d7:7b:99:c9:f1:
                    fc:66:a2:55:95:62:f3:24:41:00:54:b7:45:16:d5:
                    d7:66:b4:1f:30:b5:7a:9b:b6:99:e0:fb:52:c3:d8:
                    96:67:f3:fb:4b:ca:8c:64:62:2b:c0:1d:4c:7a:b1:
                    5f:9c:58:5b:2b:12:c7:18:a8:c5:40:0a:f8:8b:25:
                    58:8d:8a:3a:bb:e3:40:8c:22:c7:16:b7:28:10:c1:
                    7d:c5:25:36:ad:f9:90:ad:16:69:7d:fb:55:11:a4:
                    49:2b:19:6e:49:2b:ef:09:28:4f:3c:f4:8e:01:a8:
                    50:6a:e5:67:8c:0e:c0:08:70:7f:a4:50:4e:bd:2b:
                    bd:d7:24:bd:67:e9:36:29:e6:2e:0b:84:8b:46:ff:
                    f1:bf:7d:20:85:a4:63:2c:49:1c:3e:0b:b1:ed:a2:
                    45:83:e5:d5:8f:bc:82:b7:d5:21:c1:4d:ec:18:82:
                    35:f4:11:b7:b1:b6:f0:b6:1a:73:75:9a:4e:63:ef:
                    99:04:bf:be:78:7f:ae:c2:83:21:fc:5d:13:f8:38:
                    3b:3a:42:18:79:9e:c5:45:f7:a3:03:57:2c:73:95:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:1A:C8:2A:20:66:2A:46:08:9F:FE:8E:71:73:FA:92:A7:7F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.crl

            X509v3 Authority Key Identifier:
                keyid:63:77:8D:A2:31:36:6F:07:47:59:D6:D0:A4:F4:87:B0:C2:56:62:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.160.0/24
                  192.234.79.0/24
                IPv6:
                  2602:ff7a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:e8:ed:86:0d:9d:99:5b:b0:8a:f7:cb:b2:f6:a5:e2:ab:
         1c:ac:67:fe:b8:a3:88:ef:4a:f8:ad:4b:28:0c:0a:31:e8:0c:
         52:f7:bb:19:b9:c9:3d:dd:7a:d6:b6:c0:be:44:53:f6:98:ae:
         5b:0e:bb:12:58:4f:d6:58:8e:39:1a:f5:42:d6:ea:9b:93:23:
         e1:10:6d:b2:d3:ac:56:3c:fa:33:ab:7f:20:06:7c:36:f5:a3:
         00:32:d8:fa:d9:a6:91:c3:65:d8:9f:40:0c:90:56:b9:0c:d9:
         a9:2d:28:51:f3:34:4c:98:7f:5a:56:f9:d2:13:d1:74:8c:a2:
         46:b0:5d:72:97:66:0a:8e:1a:0b:fb:fc:4d:d1:c2:51:7e:c5:
         19:22:72:71:e1:ee:d9:8f:38:6c:17:8a:d4:ae:6a:bb:49:d0:
         31:e9:c1:c1:79:03:fb:7f:ee:d6:41:97:db:98:de:93:85:a5:
         04:ca:c6:03:c0:4b:91:18:80:f5:ed:4b:fa:01:58:c7:67:ff:
         97:58:b5:e4:2d:e5:ad:d2:02:7b:b6:90:a3:08:76:49:10:df:
         e1:0b:29:55:69:a2:0e:17:53:d1:e8:a2:b1:51:1e:8f:5a:3f:
         db:3d:15:11:b2:45:26:38:55:6b:7f:e5:f4:8f:58:d6:98:4b:
         13:35:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:46:50 2025 by rpki-client