Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa
File:                     d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa (raw, json)
Hash identifier:          EAo1NRt9XkW7f4eZ27SzxwYC7LHrKX68+tkAEgPpHyo=
Subject key identifier:   9E:37:D6:9A:A7:06:C6:14:2D:A8:5F:DE:3C:A8:23:8F:3B:DF:EF:30
Certificate issuer:       /CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
Certificate serial:       010D0C9F4328584B77FA4B74CB951DF253D5CF80
Authority key identifier: 5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     40419
IP address blocks:        23.190.216.0/24 maxlen: 24
                          142.249.174.0/24 maxlen: 24
                          2602:fa86::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:fa:4b:74:cb:95:1d:f2:53:d5:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=a7b79965-ea0a-45a1-9c6c-3847a066feb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:75:bc:09:c4:8c:2c:0f:87:36:54:84:09:
                    6c:7f:46:6a:a9:46:66:68:ff:fb:2f:bc:e4:21:55:
                    42:79:b7:84:a0:73:bb:b6:9d:f7:76:ad:f0:fa:d3:
                    1f:1b:81:61:2f:65:ce:69:a1:3e:99:66:ed:1c:1b:
                    84:54:50:7a:67:c3:81:5a:64:3f:43:54:dd:f4:01:
                    69:2c:8e:0c:90:c7:21:1d:9c:9d:5e:84:22:e4:66:
                    9d:d8:4c:1e:60:e4:d9:4d:94:64:8e:6d:a2:ce:91:
                    84:e4:8c:b1:2d:9b:09:06:0c:bc:07:d4:d5:a8:8a:
                    06:85:d4:e8:c8:8e:14:06:b0:9e:9f:8a:6a:85:4f:
                    e0:ef:bf:e2:88:f2:73:cf:47:7d:66:d1:a6:30:4d:
                    55:04:25:e4:b6:48:67:c4:6c:50:30:47:40:f7:dd:
                    38:81:f8:8e:2a:05:89:42:b8:09:e4:b5:df:60:81:
                    90:70:c0:e0:a2:f7:e6:d7:85:29:c6:67:f3:c7:05:
                    36:ae:5f:31:c8:c2:3c:e7:29:41:f8:2f:ae:56:8a:
                    94:91:ea:4e:ef:8f:73:23:92:00:d0:d9:1a:92:c9:
                    a7:f4:10:ad:87:3b:4e:47:23:bc:5c:71:7f:b7:97:
                    30:dc:6b:28:fd:37:fd:1b:07:a9:f0:26:84:b8:86:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:37:D6:9A:A7:06:C6:14:2D:A8:5F:DE:3C:A8:23:8F:3B:DF:EF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl

            X509v3 Authority Key Identifier:
                keyid:5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.216.0/24
                  142.249.174.0/24
                IPv6:
                  2602:fa86::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8f:56:d2:5f:31:48:f0:60:ba:a7:04:8b:31:0d:ff:6c:97:
         fe:1d:99:1c:6e:4e:2c:95:3b:6d:84:9f:28:99:e2:33:54:8a:
         b0:71:29:b2:da:18:4f:05:ed:09:37:96:61:d4:1a:c8:68:41:
         1d:3a:76:9b:32:2b:9b:b0:57:f5:ca:83:1e:76:a9:f9:55:ca:
         a2:ef:80:77:a2:5f:72:6c:a2:b4:c2:4e:79:b3:15:a2:9f:20:
         65:e2:a6:94:d4:dd:82:6c:9b:8d:b7:a8:76:00:35:6e:8c:e3:
         6a:2d:b4:fa:ff:f0:13:52:c7:0e:4f:a2:97:8e:ff:a2:6c:93:
         e1:12:cc:2f:d4:ce:eb:5a:8f:48:2e:5d:9d:da:72:48:71:3c:
         df:d5:2a:0e:e2:18:0e:06:1f:6f:b0:11:2d:30:51:f5:30:fb:
         84:5f:5f:e7:0f:28:94:a6:7c:60:51:bb:fe:76:b6:bb:d9:2c:
         5f:46:06:18:8d:78:3c:e8:89:d3:6e:03:9e:cd:2f:09:23:04:
         a9:6a:47:0c:39:ad:0b:10:fc:c2:57:04:bc:39:03:bd:72:b2:
         08:6e:53:21:22:8d:03:5d:67:e0:1f:c0:52:c2:41:30:9c:51:
         0e:8d:ea:35:18:a8:5b:26:35:c4:56:67:78:3e:0b:0d:2d:f9:
         49:17:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:56:51 2025 by rpki-client