Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa
File:                     fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (raw, json)
Hash identifier:          SE0h7yAkAgUMPJV1EcUcuHRSKa42NXxMM+B+Rw5oPuA=
Subject key identifier:   F4:B2:D9:21:80:79:BC:80:5C:01:28:F7:08:2E:5E:ED:43:44:6B:43
Certificate issuer:       /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
Certificate serial:       010D0C9F4328584B328C3C3EC1E8FA8B72586780
Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     54316
IP address blocks:        23.175.208.0/22 maxlen: 24
                          2602:fcad::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3c:3e:c1:e8:fa:8b:72:58:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=558aed0d-1342-4d32-8bef-78a7c1dbba6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:63:3b:fb:03:81:46:75:fa:c6:57:5a:c4:
                    ac:c2:b2:48:9d:a2:03:b8:db:a4:b2:dc:5f:72:70:
                    a2:d4:78:42:9e:67:ea:32:0c:3f:51:68:b7:71:90:
                    91:77:8d:f0:0b:a3:e0:c7:63:0b:bd:e2:20:fa:04:
                    cb:79:99:c5:c1:ac:08:29:4e:2a:3c:09:81:56:cf:
                    fd:f8:23:47:49:21:5b:fa:ec:30:8a:21:88:7e:d2:
                    02:d9:bf:ef:c8:2c:99:dd:59:ea:81:1b:74:68:c5:
                    7f:5b:d2:13:28:19:93:b7:57:b7:2f:a2:bc:91:43:
                    9c:aa:e2:45:0d:6d:7a:08:dc:40:2d:75:f5:9b:ff:
                    cf:27:b4:2e:64:f7:69:fd:2f:78:62:d7:b9:e6:10:
                    b4:38:9d:94:b3:2f:de:7e:56:74:7b:03:03:0e:85:
                    37:78:9b:3b:c7:02:34:3e:8c:48:3a:d0:f7:74:2b:
                    d9:1f:b7:c9:1f:8a:cf:65:5b:ac:5c:0f:a2:d5:33:
                    11:6a:d6:ca:8e:c4:4e:4d:7c:20:ed:5c:0d:7f:40:
                    63:b9:22:81:83:a1:65:f3:de:85:07:d2:30:85:a8:
                    6a:d6:6f:65:79:96:47:7f:1f:c2:63:fa:03:88:b1:
                    b3:ff:b1:bb:44:20:19:57:e8:ae:e0:41:74:47:e3:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B2:D9:21:80:79:BC:80:5C:01:28:F7:08:2E:5E:ED:43:44:6B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl

            X509v3 Authority Key Identifier:
                keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.208.0/22
                IPv6:
                  2602:fcad::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3e:fe:9a:50:b7:8e:18:49:59:05:bc:69:88:0d:aa:ff:ed:
         27:8f:94:fc:34:c8:ff:7e:84:87:df:9c:e0:d8:04:40:8a:0b:
         b3:7f:de:23:a9:42:b4:db:bc:aa:f5:9e:98:25:ce:41:84:54:
         c3:14:04:a5:95:1f:d0:db:ee:6e:c5:96:ba:06:f8:ec:08:6c:
         1f:c4:c5:97:63:3b:ff:a1:ca:28:06:c7:10:7c:00:45:c5:9b:
         db:36:3c:89:71:fd:7c:a4:ce:7c:95:8b:da:fe:bf:a2:c7:e1:
         5b:1d:10:5c:fa:55:bb:ec:ed:5d:80:28:de:cd:9a:5e:83:d9:
         4f:d6:75:54:09:b2:f5:e6:67:a7:49:8d:da:4f:49:6d:8f:f9:
         42:08:20:95:ea:07:12:28:95:83:cb:fb:92:75:f4:6d:35:e4:
         89:02:3e:1b:bf:05:44:e2:71:78:38:6b:97:99:39:de:c8:e1:
         48:02:9b:e3:8d:e2:38:60:33:fb:e9:0d:67:fa:ac:f8:5d:92:
         fd:0f:af:b5:ad:ad:7c:1e:90:fa:92:fe:be:db:58:76:14:4f:
         0e:1a:9e:69:93:52:ea:ba:cd:8a:29:a4:02:ba:8f:40:5a:29:
         e8:18:e7:f1:d4:de:49:37:58:98:d0:c4:55:a3:5f:84:a3:d2:
         07:3d:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:13 2025 by rpki-client