Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
File:                     002ef700-936e-3cb8-aa93-bc3050bdb98d.roa (raw, json)
Hash identifier:          QPYsn1EH886mA42vR06s+Wcy8e4C6TwIvoGqSyWy9NU=
Subject key identifier:   6B:18:CB:BB:89:8B:BC:9F:9B:82:92:9A:A5:5B:7A:5F:28:0D:01:5C
Certificate issuer:       /CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
Certificate serial:       010D0C9F4328584AFEE6ABDA0300050E2FD496C0
Authority key identifier: 5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     201579
IP address blocks:        23.166.72.0/24 maxlen: 24
                          2602:f9e4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ab:da:03:00:05:0e:2f:d4:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=a3d3c89d-aaf8-4701-8d59-a12fef40f90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:90:84:98:ba:81:1e:0e:71:31:ba:4a:22:
                    c7:9d:e3:43:67:7b:06:ac:40:df:47:e9:4b:4f:27:
                    41:aa:5c:6f:32:a2:27:d3:ea:7f:46:29:bb:a8:df:
                    1e:41:73:c1:ba:cc:27:1b:83:58:c8:ec:ba:6b:ae:
                    c6:40:ae:4c:93:74:07:e1:b9:16:66:ae:d5:8d:fa:
                    2f:cf:b8:2d:35:a4:82:b1:c1:d7:e8:b2:7f:95:74:
                    7e:cc:d8:ec:18:c4:26:fa:f4:05:6d:ba:46:2e:ba:
                    c3:8c:4b:57:9a:0f:d2:53:e4:2e:44:10:10:54:14:
                    df:88:de:c0:64:33:32:82:53:a4:75:04:ce:ef:fb:
                    e3:cf:fa:f1:c5:5f:5b:de:cc:b9:54:1f:2f:8e:5a:
                    a4:77:94:83:f2:43:22:03:10:3c:5e:cb:a0:27:3e:
                    f9:fc:4f:0d:29:c1:9a:48:10:84:f8:36:52:3e:62:
                    80:d7:c1:a8:a0:78:62:1e:dd:a8:82:47:12:f4:a9:
                    38:8e:18:67:fd:6f:55:84:c6:d4:f5:fd:39:c6:9a:
                    22:a2:9d:98:c0:6b:4e:31:b4:ac:26:23:a0:86:c7:
                    9d:a9:a3:75:cf:c6:9c:25:bc:a8:ad:69:74:4a:40:
                    24:21:91:6b:88:36:cb:8a:7e:4c:ee:d1:fc:86:92:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:18:CB:BB:89:8B:BC:9F:9B:82:92:9A:A5:5B:7A:5F:28:0D:01:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.72.0/24
                IPv6:
                  2602:f9e4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:4f:31:fc:1b:3b:98:0b:0f:c7:c7:6e:bd:e2:30:01:b6:
         df:bf:e9:b3:42:f8:08:78:6c:6e:31:bc:f1:f7:43:80:e3:28:
         3a:1e:21:0f:9f:2f:b7:bb:41:f0:b0:3e:cd:4d:15:33:67:7e:
         d7:0e:aa:10:a8:7c:4b:23:77:52:8a:13:90:d4:60:5e:ba:23:
         a8:eb:af:4d:44:b1:7f:04:92:01:12:6d:02:07:8a:f8:da:cc:
         68:05:67:1a:86:fb:15:e6:f1:32:e4:18:c0:9a:c5:02:b1:e0:
         41:6c:ea:71:77:7d:37:18:dd:7a:34:66:5e:70:30:f2:5c:2d:
         19:95:f4:fe:85:62:e6:79:29:9b:ca:1e:06:b1:cf:97:0a:ac:
         84:40:b6:5c:ce:6b:08:6e:89:6c:9e:d8:b5:99:ef:5d:26:06:
         d6:f3:ee:40:c0:14:5e:90:3c:56:2d:33:10:e6:86:08:33:63:
         55:41:2f:6f:8b:9b:19:a0:1e:b6:c5:bc:c2:82:c3:2c:48:a0:
         ce:7a:d8:96:54:f3:09:24:3a:3d:31:9e:d5:98:97:2a:10:2c:
         0e:4c:ba:f2:ca:38:d9:c9:e7:21:25:ca:dd:e7:c0:ff:8f:16:
         98:35:5b:5b:59:87:b2:33:29:08:61:2f:c1:ad:80:69:17:2d:
         00:d9:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:42 2025 by rpki-client