Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/3760e09b-0566-3064-ac87-02a3ea1d74b8.roa
File:                     3760e09b-0566-3064-ac87-02a3ea1d74b8.roa (raw, json)
Hash identifier:          C6QqyPr894qmE+5ecxIGMjX06J1l6++kDBzx+d+XD6U=
Subject key identifier:   D2:F4:62:4E:FD:DF:76:D5:67:F7:AE:14:1F:CC:5E:2C:30:CB:AA:D4
Certificate issuer:       /CN=a4738e65-dd12-4c12-b10b-7a16621165e0
Certificate serial:       010D0C9F4328584B73E6A56420819D20A9E51B80
Authority key identifier: DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/3760e09b-0566-3064-ac87-02a3ea1d74b8.roa
Signing time:             Wed 08 Oct 2025 10:50:23 +0000
ROA not before:           Wed 08 Oct 2025 10:50:23 +0000
ROA not after:            Tue 06 Jan 2026 11:50:23 +0000
asID:                     152179
IP address blocks:        23.146.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:73:e6:a5:64:20:81:9d:20:a9:e5:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4738e65-dd12-4c12-b10b-7a16621165e0
        Validity
            Not Before: Oct  8 10:50:23 2025 GMT
            Not After : Jan  6 11:50:23 2026 GMT
        Subject: CN=f83a781b-0690-45ed-873e-899d8803f0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:ed:6d:13:dd:0a:02:4e:c1:40:40:85:6e:
                    5a:f5:de:d4:d1:94:7f:82:6a:d4:a2:19:77:ff:b1:
                    83:13:60:fc:b8:ec:76:ba:1f:6c:8b:72:d3:32:0b:
                    2f:43:52:e7:96:64:48:31:86:71:59:19:c2:c7:ce:
                    35:0b:57:fb:bc:ab:a2:33:35:24:bd:11:c4:f7:71:
                    2e:73:92:63:b4:a8:92:92:a6:dc:34:c2:eb:b4:93:
                    56:97:ec:dc:1d:48:dd:36:95:e6:2d:6a:35:62:5b:
                    de:ac:13:4b:0c:29:b6:db:13:8d:7e:55:af:dd:2d:
                    8a:a0:0a:18:00:8d:f7:0c:57:14:92:8b:94:0d:6a:
                    92:5d:30:3e:c3:77:cc:d7:d1:47:53:a4:d6:b7:86:
                    aa:87:61:8b:ea:1f:d2:25:ce:da:8d:07:a3:19:2b:
                    36:36:73:b4:fc:94:ea:b4:75:d1:a9:01:ef:f4:ac:
                    9e:cd:64:ae:5d:c4:71:a3:a9:85:ac:0c:e4:0c:d4:
                    05:ac:f8:73:a5:16:75:b1:89:ca:b5:65:3f:ad:c7:
                    7c:59:3e:c3:53:a0:bf:87:2c:d2:e2:ce:50:1b:b4:
                    d2:ae:ab:04:a1:1e:87:4a:41:de:05:d7:fb:b7:f5:
                    c2:e6:fb:ee:e9:91:40:60:2c:c6:53:23:69:8a:9c:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F4:62:4E:FD:DF:76:D5:67:F7:AE:14:1F:CC:5E:2C:30:CB:AA:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/3760e09b-0566-3064-ac87-02a3ea1d74b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl

            X509v3 Authority Key Identifier:
                keyid:DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:56:be:7d:92:4c:af:49:c6:d0:7c:83:52:09:4d:96:2a:4f:
         0b:a0:73:00:44:25:42:10:2d:c7:11:b7:dc:db:64:3c:12:dd:
         31:c5:54:a2:97:1b:91:ea:7a:68:4c:f0:df:1e:81:f5:6b:ff:
         2b:39:8c:a0:b5:2b:6e:06:85:16:75:42:03:77:af:7a:6e:15:
         5c:6e:e2:ed:65:d5:d6:5f:f4:d9:8d:18:82:4e:63:0c:e1:bb:
         73:93:ac:90:03:12:5e:16:da:a6:19:9b:bb:e7:f1:3c:de:28:
         a5:e6:62:af:69:c9:1e:c1:95:68:a9:59:f6:61:f1:35:e3:63:
         9c:b4:74:66:5c:33:f7:e8:17:31:9d:c6:8e:f0:c6:94:75:a6:
         ab:55:f7:5f:6e:45:ac:7c:8e:5e:c0:e5:1d:e1:c4:8e:e3:68:
         3d:ae:65:b5:26:1c:9e:d5:e5:11:16:ef:c5:64:09:68:8d:6e:
         94:80:2c:a6:f8:26:46:82:f5:67:5f:cb:5d:c3:57:97:28:be:
         64:c3:60:5d:3b:ba:68:2d:a0:d9:63:fb:2a:9a:29:b1:13:2c:
         0a:24:f8:e9:7e:16:3d:1a:e4:e6:32:ca:73:53:df:2d:97:d0:
         9c:f3:74:5d:f5:f3:de:08:df:a0:45:aa:29:cd:24:d4:39:a5:
         ab:dd:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:22 2025 by rpki-client