Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/475361da-0a9c-37ab-933e-f38cea3fe0d3.roa
File:                     475361da-0a9c-37ab-933e-f38cea3fe0d3.roa (raw, json)
Hash identifier:          SEOfe0p9khn2iRoZRm/2qFaW2/ctCgSaZuS8DN886lc=
Subject key identifier:   4E:92:FE:0A:9B:AB:0B:F0:0B:03:6A:54:C6:A2:F5:2A:3C:0F:39:E7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434CA7B13B2317636299A080
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/475361da-0a9c-37ab-933e-f38cea3fe0d3.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        23.255.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a7:b1:3b:23:17:63:62:99:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=9575fd10-2877-4a58-9244-5b492602cbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:39:21:52:0e:65:7b:7a:10:40:84:47:0b:
                    59:0a:bd:d2:1d:39:33:05:40:f3:0a:86:ad:67:0d:
                    fc:f2:84:d1:8b:8e:20:7d:5b:ca:22:fd:5e:d7:8e:
                    33:a1:a5:86:f3:dd:ff:1b:3d:c2:98:30:2e:2d:64:
                    67:2f:be:33:8e:4c:b2:b5:df:e0:5e:61:e1:b4:f5:
                    46:5b:a4:db:65:2d:ea:f1:32:e4:64:40:9e:17:b4:
                    8f:8e:9e:27:87:54:65:5c:74:c1:c4:95:78:8a:14:
                    b7:8e:95:98:9a:7c:0b:2c:96:85:e4:f0:fb:b4:6f:
                    21:aa:ba:0d:1f:de:44:2e:06:65:9f:85:b8:f7:71:
                    ac:8b:e2:47:ec:60:17:00:53:12:eb:9d:c9:87:fb:
                    7e:09:28:9f:63:2c:a5:f7:4d:23:e8:a2:39:50:72:
                    df:cf:b6:ac:b0:4e:ea:a1:9a:12:b3:13:b9:a0:5c:
                    e5:8d:c6:94:db:72:5a:55:03:a5:19:46:a5:8b:df:
                    32:2b:3b:db:5d:94:13:fb:ae:a8:10:a9:8a:71:36:
                    f7:43:8e:13:06:ba:25:32:e1:29:3d:64:bc:27:95:
                    64:f9:3c:3d:90:87:4b:61:5a:f1:36:eb:4c:71:07:
                    77:60:45:01:f0:10:a0:21:6d:6f:ae:51:94:ea:de:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:FE:0A:9B:AB:0B:F0:0B:03:6A:54:C6:A2:F5:2A:3C:0F:39:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/475361da-0a9c-37ab-933e-f38cea3fe0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.255.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:3a:40:f0:1e:c0:18:81:38:66:0e:e2:d9:95:46:6f:a6:
         a0:77:e1:d9:8a:99:9c:34:5e:37:bb:ba:b8:49:80:5d:8a:4f:
         c7:f8:8d:ec:85:bb:18:a4:f0:08:32:70:b0:4c:41:08:94:20:
         23:e3:4f:39:62:fe:5f:3f:01:96:25:95:3c:fb:f3:b9:66:ee:
         14:3f:1e:28:37:f4:6a:2a:ec:69:35:b7:bd:e8:f5:97:5d:7c:
         6b:50:52:b5:5b:13:e9:da:09:a4:28:ac:a0:2f:4d:e7:75:22:
         5b:3a:65:d9:54:f5:0c:4b:5b:d5:8b:06:69:62:0c:53:4a:55:
         6a:60:93:7c:3b:b9:05:eb:31:9a:de:46:d6:65:7f:e9:33:0a:
         dc:7d:19:b2:31:50:ab:80:e5:c6:5a:27:b7:c4:36:6c:6e:2a:
         4d:9d:f7:06:ae:51:43:12:91:49:fc:04:a6:48:fb:06:5e:b3:
         c8:a5:79:c7:9b:30:94:43:ae:72:35:59:82:6c:45:8d:d5:17:
         d4:0d:97:e6:97:ca:ca:2f:99:42:7a:73:69:7e:ba:0a:dd:63:
         e7:ba:9c:70:55:8c:4d:b3:bb:3c:b1:16:d0:c2:b1:73:6c:f1:
         69:17:d7:f5:72:42:eb:d5:db:28:54:9c:f9:81:98:6b:7d:58:
         9f:78:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:13 2025 by rpki-client