Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
File:                     861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa (raw, json)
Hash identifier:          dVHp37McmwN7eFxF2r8d5SazvaXRIrMz2IVYwqs605c=
Subject key identifier:   65:4B:AD:4A:87:FC:CE:57:3C:1B:2A:AF:9B:94:CA:3F:31:1C:00:9F
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584B5C6C79D1A614AE8EBA838C80
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     137443
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:79:d1:a6:14:ae:8e:ba:83:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=f2c368e2-222f-4537-acc8-2b4ef035f837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:b3:4c:e3:ab:97:30:30:2e:49:d2:ec:48:
                    b4:6d:b0:9c:db:3d:62:29:e0:63:1c:ef:52:b2:78:
                    f1:61:e2:c2:40:32:ad:c4:4d:74:d0:98:67:aa:f5:
                    01:4e:d2:06:91:8d:60:4b:9e:fb:cf:40:2c:1d:0a:
                    25:c9:01:c0:be:8b:a5:6e:9d:ef:cf:65:23:93:6f:
                    85:1c:f5:1f:35:97:8d:db:40:cc:84:53:94:6a:01:
                    03:37:60:49:08:86:0c:fd:48:a8:5d:17:8c:95:ed:
                    8d:e6:1d:39:05:0f:af:55:7f:cd:23:f2:68:60:18:
                    21:3e:1e:f3:d6:07:f7:99:9d:6e:8c:29:80:ff:7a:
                    2a:d3:82:cf:4e:84:0a:89:48:d9:84:d6:3b:ad:d7:
                    61:d1:46:3f:b1:a0:a5:82:bb:ff:13:62:4b:b4:6a:
                    60:45:4b:c9:5a:5b:f6:f4:c8:32:bf:d2:75:0b:0c:
                    53:21:83:07:32:64:31:c0:c9:60:d5:64:44:ee:42:
                    f1:46:cf:14:5f:67:81:59:d2:7f:4d:a7:d1:4f:a6:
                    c6:e4:c3:a3:54:c7:55:2d:9b:cb:31:43:b7:27:b2:
                    5f:ab:02:63:81:b5:8c:76:01:a8:cd:0c:f1:22:11:
                    30:bf:40:cc:9a:98:de:2a:9f:8b:0a:ed:62:74:20:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:AD:4A:87:FC:CE:57:3C:1B:2A:AF:9B:94:CA:3F:31:1C:00:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:25:16:94:12:e2:a8:29:60:bf:33:0b:6b:1e:38:7e:32:
         ec:5a:25:0f:09:d4:08:31:49:c8:27:5b:87:9d:44:63:b6:c4:
         76:35:67:69:82:ff:35:56:75:0f:8b:24:90:84:ec:ca:7f:fe:
         bf:bc:db:8e:41:68:3b:45:f0:b6:93:bd:3f:4e:3b:cb:e4:cf:
         72:4b:62:62:9d:17:d1:ce:55:eb:fb:1b:fb:3f:86:38:e1:da:
         c9:e2:e0:43:4e:cc:ff:22:39:fa:15:92:f0:8b:d4:ae:b3:6e:
         a6:ec:65:1d:ac:29:6e:7f:48:ed:e4:e0:ac:b6:fb:fd:35:61:
         1b:33:7a:ac:28:6d:3a:47:17:63:93:d6:86:20:65:64:e0:4e:
         23:c5:4a:94:71:ee:d1:20:09:8a:9c:6d:f2:d8:04:41:b2:cf:
         d0:7f:de:b6:99:c2:24:ef:27:85:c4:fb:27:3c:20:96:b9:a9:
         ec:90:3b:91:02:50:ae:fc:a3:8b:5d:c3:2b:39:90:f4:19:65:
         c6:29:11:40:23:44:b4:7e:e7:70:b4:b7:66:3f:0a:72:27:71:
         21:c8:f5:85:34:c4:c7:6d:75:b7:85:42:bc:ef:15:ba:e1:6c:
         16:ac:2f:ba:78:bc:15:04:83:7c:a9:25:8b:33:9b:49:2c:83:
         df:59:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:34:39 2025 by rpki-client