Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
File:                     f0970a1e-18d9-3ab2-9803-e503b2782f21.roa (raw, json)
Hash identifier:          Sx5dw/qbTaCiTyH3bRtoyJnM/Rf9ahgTb+YDsr48JSw=
Subject key identifier:   5B:0F:50:CF:12:9A:57:A9:13:D4:16:B5:32:47:6B:88:C3:2B:10:09
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F4328584B0746B80CA77FD15D5C2AAEA0
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     396893
IP address blocks:        23.132.232.0/24 maxlen: 24
                          2620:8d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b8:0c:a7:7f:d1:5d:5c:2a:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=607af067-616f-43d2-acb0-be9af477a69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:02:c3:cd:7d:5f:3d:fb:a0:4e:6b:6c:7b:
                    f0:29:c8:0d:de:f4:82:16:c3:e2:53:4c:ad:00:ad:
                    8e:e0:9a:be:3a:d8:02:6e:c9:7d:98:4c:21:23:3d:
                    52:8c:b3:11:fb:fc:5f:d4:30:93:3d:d9:68:95:8a:
                    f8:e4:7a:87:97:44:1b:86:21:5c:df:a0:eb:2d:2f:
                    20:f0:1b:0a:32:f0:62:48:92:9a:65:bb:e9:32:0e:
                    a3:23:6a:19:11:97:a8:41:90:f2:74:b4:ed:83:32:
                    94:d5:bb:b3:0e:a1:a0:33:b1:46:35:f8:62:36:1d:
                    a8:5b:05:40:f6:57:ea:bb:73:35:da:d5:52:c4:c2:
                    33:d7:10:19:54:a9:c9:6a:77:92:53:1e:30:98:60:
                    64:d9:40:7a:66:32:75:05:32:05:c4:fa:47:81:03:
                    85:62:7c:1a:73:92:45:8a:4b:7c:96:51:a3:52:04:
                    19:4b:bc:74:4c:94:55:46:4b:73:26:f2:fa:d3:bc:
                    c9:08:b2:91:d1:d8:9e:0d:59:4e:4a:ab:6d:40:02:
                    d7:12:ab:dc:9d:58:11:03:ee:b7:64:28:2a:40:e0:
                    7c:39:0c:55:b9:7c:69:6d:99:29:42:f3:93:8e:bc:
                    2f:bc:bf:0c:50:96:e3:c0:ae:d0:d3:aa:b7:8e:07:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:50:CF:12:9A:57:A9:13:D4:16:B5:32:47:6B:88:C3:2B:10:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.232.0/24
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:08:3f:27:a8:01:c9:34:42:24:73:88:b8:a1:ba:ef:df:
         f8:8a:db:19:f4:22:6d:b2:62:c9:40:dd:e3:2a:e5:d6:5a:5d:
         50:ff:32:43:fe:b5:2f:06:6f:be:b4:2f:c9:dd:3b:b7:a2:3e:
         89:79:6a:60:b8:23:e4:60:18:f5:81:fe:50:16:ef:39:35:2d:
         4f:88:5a:9e:2d:60:c7:06:4a:32:34:d2:1b:e1:e9:58:94:e4:
         ff:14:cf:93:7f:0a:e4:10:91:76:b0:34:96:cb:ce:5b:ff:1d:
         9f:0c:dc:d8:f9:3d:83:87:dd:cd:58:93:db:13:a6:96:7e:4c:
         f6:03:48:11:54:ff:42:db:bf:7f:16:4d:6f:82:6b:61:a0:95:
         5d:71:e1:d9:93:c1:9f:fd:ca:f1:4d:57:fa:48:b0:5e:a6:c5:
         d8:d2:fc:b4:39:cd:e2:8e:39:5e:f6:74:3e:3a:d3:8c:86:76:
         b5:3d:fc:7f:2d:95:17:90:05:81:f7:30:24:bd:5e:5f:6c:dd:
         d2:60:69:76:08:2b:ff:79:b1:47:31:9b:f6:ba:8f:19:f7:02:
         83:c7:1e:75:18:c7:86:5f:89:36:81:4e:fe:86:c7:32:69:37:
         e4:a1:50:06:67:e1:6a:97:9c:4e:53:55:0e:a6:f4:5e:51:13:
         9a:bd:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:22:37 2025 by rpki-client