Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
File:                     57901a8d-3025-36c9-bed1-42964cd3980b.roa (raw, json)
Hash identifier:          byBIAc/g0kuWk3sPIh+bbu5spe926Jo76K1Abubrt9o=
Subject key identifier:   06:2B:63:50:F4:11:E5:BB:E9:D1:A5:C9:F0:8E:B6:A3:05:A5:44:91
Certificate issuer:       /CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Certificate serial:       010D0C9F4328584B6631FE86D4F29DF461A1A700
Authority key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     54785
IP address blocks:        23.160.104.0/24 maxlen: 24
                          2602:fa57::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fe:86:d4:f2:9d:f4:61:a1:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=16ca1861-985e-4736-9f23-04ba74f57faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:f4:31:63:cf:48:d8:e7:53:a8:d1:1a:3c:
                    62:5a:f4:fa:bc:0a:8d:63:ca:4a:1a:7e:2e:72:a9:
                    fe:8f:8d:bd:93:ce:ab:e8:74:66:fd:ee:e7:16:f1:
                    2d:f3:d8:2a:65:d9:d0:52:7a:1e:f2:12:c8:56:6c:
                    82:39:bb:95:24:81:06:7c:19:c7:41:15:53:32:ed:
                    9d:25:fd:b9:d3:e1:9e:ed:4f:0e:18:a5:bf:b4:8f:
                    5b:72:07:65:c3:d1:1b:07:1e:ad:fc:a8:a0:be:0b:
                    c9:08:ba:63:54:0e:8a:d3:6f:85:bc:7e:b2:a3:80:
                    69:af:08:fc:e9:fc:01:7b:47:bb:1a:1d:75:b1:c0:
                    44:6b:c0:41:da:c5:04:6e:e0:ea:6e:a9:a8:92:19:
                    81:fd:d7:89:71:9b:a8:2c:9f:be:56:22:30:d4:2e:
                    5a:c0:33:e3:3c:4b:78:86:59:69:fd:be:25:f2:66:
                    0e:c9:f7:ee:90:2a:49:11:f1:b7:88:4f:a7:8a:2b:
                    df:97:2b:72:46:2e:39:7f:d0:7a:65:7f:43:5a:91:
                    19:b0:e9:dc:70:96:98:c7:01:2a:ca:c5:d6:b8:b8:
                    d2:2e:a5:74:35:52:39:ad:30:ab:31:35:da:9c:0c:
                    33:15:5d:17:b0:fb:89:bb:ac:6a:7d:65:77:d6:e5:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:63:50:F4:11:E5:BB:E9:D1:A5:C9:F0:8E:B6:A3:05:A5:44:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.104.0/24
                IPv6:
                  2602:fa57::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:30:b2:24:56:e7:6e:b6:f5:8f:d7:fa:3f:d9:ee:c8:94:
         dc:fd:e7:43:bc:83:24:d8:55:68:1e:98:50:bd:97:a2:e8:4c:
         19:71:ef:60:c4:af:64:be:8e:7d:cc:3e:36:fc:fe:94:5e:59:
         3c:53:a0:db:28:72:47:ed:69:9e:b0:19:1e:27:d9:46:13:4e:
         6b:09:b4:3f:40:21:f3:fc:bc:6f:11:f2:b9:99:b9:fc:96:6d:
         ba:b1:d7:56:36:63:0a:f7:fd:bd:22:de:e1:50:9a:bd:e1:6f:
         ad:1d:8b:7f:92:60:29:f5:42:b4:81:5e:57:ab:84:f3:d2:38:
         30:30:9a:e6:84:0b:b9:1d:d7:ce:d7:bc:7c:f8:6d:95:b9:f6:
         ae:fb:85:d1:88:e4:a7:a0:9b:89:9c:60:ab:92:a7:60:4d:ce:
         23:3a:3e:ae:bb:9a:25:8f:86:4d:8e:4e:7d:03:75:cd:63:ca:
         e0:21:ff:02:bc:28:cd:94:16:bc:9c:0b:f2:6d:4b:4b:2b:67:
         26:80:37:ac:96:2f:20:1a:e5:3f:50:91:49:40:46:c9:74:d9:
         3a:9f:60:9a:ad:c7:a7:87:ef:f6:99:7f:1d:ac:b8:d7:54:e0:
         4a:55:f4:e9:59:cd:3f:87:7d:23:7f:a0:50:a0:ce:7b:a3:6c:
         dd:ce:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:47 2025 by rpki-client