Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/396175dc-1c32-3cf6-9467-a9a0a07c0f3d.roa
File:                     396175dc-1c32-3cf6-9467-a9a0a07c0f3d.roa (raw, json)
Hash identifier:          eG5z9xzxKEwF+h+8ZI5Xfyj3aW1RgyMbBojy65Rlvwo=
Subject key identifier:   82:DB:60:B2:FC:58:12:EB:59:0C:2A:86:7D:4A:F2:F5:1C:7A:52:98
Certificate issuer:       /CN=c3e0ec38-486f-470e-8921-ae8db2e3807d
Certificate serial:       010D0C9F4328584B7A8B05852B6E13BA5BB14280
Authority key identifier: 5F:D5:2E:C0:FF:38:E5:BB:BD:10:28:F4:4A:0F:58:8E:7F:94:CF:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/396175dc-1c32-3cf6-9467-a9a0a07c0f3d.roa
Signing time:             Fri 10 Oct 2025 19:56:26 +0000
ROA not before:           Fri 10 Oct 2025 19:56:26 +0000
ROA not after:            Thu 08 Jan 2026 20:56:26 +0000
asID:                     29994
IP address blocks:        23.147.60.0/24 maxlen: 24
                          2602:81c:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/c3e0ec38-486f-470e-8921-ae8db2e3807d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/c3e0ec38-486f-470e-8921-ae8db2e3807d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:8b:05:85:2b:6e:13:ba:5b:b1:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e0ec38-486f-470e-8921-ae8db2e3807d
        Validity
            Not Before: Oct 10 19:56:26 2025 GMT
            Not After : Jan  8 20:56:26 2026 GMT
        Subject: CN=d54e6475-00e0-458e-9c79-b54e70738834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:77:67:69:c0:32:65:5d:c3:7a:df:aa:6f:17:
                    a2:22:d5:a0:73:8e:1c:06:12:f3:9e:74:7c:d8:cf:
                    d3:51:5c:76:12:d0:88:5a:16:8f:1e:59:5f:c7:4a:
                    73:eb:36:ce:a0:bd:4f:9b:18:ed:b6:f0:db:c9:1a:
                    99:09:1c:e0:2c:0c:40:50:b4:02:a4:9f:80:5f:55:
                    3a:2b:93:43:fa:03:fc:6c:3b:a9:da:73:dc:9f:e6:
                    09:0e:c8:ed:02:be:45:03:31:66:f6:d4:2f:45:f6:
                    35:7e:a3:d2:85:ea:3c:27:8b:e3:eb:27:65:f9:f2:
                    63:34:d6:6d:20:cb:67:b3:64:1d:68:79:cf:ce:fa:
                    0c:f4:72:1f:0f:e7:08:53:aa:6c:6f:15:48:55:54:
                    8a:61:88:dd:e2:23:43:c9:13:bd:60:db:3a:7f:8c:
                    d5:b5:a8:c8:9a:af:fa:6d:f1:1e:2a:95:1c:04:72:
                    ac:db:89:7e:c4:15:e8:8a:da:2a:b8:b7:70:e3:81:
                    6d:a7:87:34:a7:ea:f0:55:d6:60:80:2d:a1:d2:15:
                    7c:9c:d4:f6:4a:7c:4c:3b:f9:bd:e3:89:29:f7:cf:
                    34:d2:17:d3:67:dd:35:33:c1:cc:00:30:2f:f3:4f:
                    01:83:c9:ff:0a:11:b7:d4:20:08:16:70:a1:6e:87:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:60:B2:FC:58:12:EB:59:0C:2A:86:7D:4A:F2:F5:1C:7A:52:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/396175dc-1c32-3cf6-9467-a9a0a07c0f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/c3e0ec38-486f-470e-8921-ae8db2e3807d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D5:2E:C0:FF:38:E5:BB:BD:10:28:F4:4A:0F:58:8E:7F:94:CF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.60.0/24
                IPv6:
                  2602:81c:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:d9:4c:b5:55:59:86:d5:9e:2b:12:5e:ab:3f:0e:8d:7a:
         a4:c2:f9:f1:6b:c7:7d:3d:88:c0:a6:8b:34:39:da:d1:b3:35:
         6b:1e:b8:e2:8a:25:36:3d:e8:12:2f:ce:74:e1:28:8c:2a:e6:
         59:b1:22:76:79:89:cf:e9:7a:ae:fd:ea:5c:f7:cb:6e:fb:e6:
         9d:93:80:17:3f:ea:d5:7e:9f:5a:f0:7a:34:9d:34:05:ea:7a:
         4b:ef:b5:7c:e0:2e:17:8f:63:c1:52:3b:5c:86:a9:38:f9:87:
         37:2a:2e:d5:4a:4f:90:f7:70:31:9d:a4:37:00:e6:c2:35:0f:
         f6:54:2e:3b:6d:03:5d:e8:e2:3d:a9:af:13:41:49:9e:59:92:
         e8:c9:1f:a7:4f:b6:9c:5a:ad:bd:b4:04:ef:76:17:4a:c6:a9:
         c6:0c:50:b2:84:bb:cb:23:33:8f:8b:fb:b4:db:9f:a2:72:a9:
         4a:c7:e5:e1:24:25:55:bf:b5:80:ff:88:98:06:d4:75:fb:c8:
         6d:68:75:e6:63:a4:22:a2:89:eb:d1:b4:ae:2a:b5:ad:5b:e2:
         f5:94:b4:43:7b:83:1b:fb:b4:73:68:f1:7d:2b:5c:84:f3:e4:
         b1:ac:b5:e3:a2:4a:88:cf:78:3e:ee:03:c9:f4:01:6b:4a:ad:
         6c:0b:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 08:27:41 2025 by rpki-client