Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa
File:                     b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa (raw, json)
Hash identifier:          84funeUMcAMSMR7dToyFmmk0q2Ehu4KVYJlTlJrLouQ=
Subject key identifier:   90:1D:A5:A3:5F:14:B9:1F:20:BF:E8:B8:23:CF:B9:11:33:7B:C0:4D
Certificate issuer:       /CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
Certificate serial:       010D0C9F4328584B28C6DFB3924ADA08B1D35C00
Authority key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     401581
IP address blocks:        23.132.60.0/24 maxlen: 24
                          2602:f741::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:df:b3:92:4a:da:08:b1:d3:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=7d5ccf0a-f1b9-4a7d-aec4-ba6300becfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:dc:f1:7f:f1:52:a6:ed:97:0f:90:33:5a:
                    b2:9a:26:16:f4:52:03:7f:3a:21:1b:7f:e9:71:4e:
                    52:02:93:e2:e5:26:61:2c:62:c7:9f:d5:84:4b:df:
                    e4:45:1b:6c:19:29:3c:e3:da:69:3a:d6:f6:1a:c6:
                    1c:1a:cc:b4:f5:77:90:75:84:ad:72:89:ff:e4:59:
                    b2:99:d4:0a:d5:75:32:62:2d:4f:f1:54:89:50:4e:
                    56:ee:dd:15:d2:86:fe:9b:c1:f8:07:8b:1d:5d:9b:
                    df:d2:ef:19:cb:f5:45:a3:35:fe:06:a6:84:7c:a0:
                    83:c2:d2:0e:a1:6f:4e:49:cb:60:5d:ed:8c:b5:80:
                    32:f0:96:29:74:2f:76:67:a7:a9:2b:cb:7a:d0:43:
                    44:df:22:9d:bd:58:cb:4d:ed:a0:9c:49:49:c7:ac:
                    da:74:f4:1e:7e:43:cd:dd:be:1f:37:50:cf:fe:e4:
                    af:25:1d:fb:f8:ef:01:66:6a:7b:3b:9b:45:46:7a:
                    f5:70:04:91:2e:ac:52:88:f7:37:14:2b:fa:02:d1:
                    90:99:bb:98:db:d6:97:4f:03:ed:4f:d4:e2:51:92:
                    e7:6a:4c:99:36:01:eb:09:78:7e:23:4b:04:25:94:
                    fc:6b:49:78:36:ea:f0:8c:c6:74:6c:f6:91:c6:76:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1D:A5:A3:5F:14:B9:1F:20:BF:E8:B8:23:CF:B9:11:33:7B:C0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl

            X509v3 Authority Key Identifier:
                keyid:8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.60.0/24
                IPv6:
                  2602:f741::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:c8:43:2e:6f:5b:91:a5:6a:19:59:79:1a:66:77:cd:b3:24:
         92:39:80:32:3a:d4:1a:68:9c:9b:64:18:13:f2:7b:23:57:49:
         c2:4d:f3:db:4a:4d:ed:fd:72:37:91:2f:f5:34:54:6d:bf:cd:
         93:e6:24:15:78:51:3f:f7:c7:de:a7:25:42:4a:e1:38:d1:a8:
         0e:6a:69:8a:4d:2e:37:4e:5f:a6:fd:de:d5:8d:25:f4:60:57:
         8c:a1:3c:25:f6:59:8a:dc:2f:2f:51:07:e6:06:f7:fa:28:fb:
         c9:2c:fe:ce:85:0c:b1:5a:f7:2f:2c:88:30:02:50:db:03:9d:
         f3:eb:91:5f:7e:4d:c2:6e:7d:a2:96:b5:5d:20:28:10:b3:bf:
         44:f5:3a:b8:e4:1a:0c:dc:5c:88:61:76:08:26:60:89:7b:e1:
         2a:74:8b:9d:c5:97:c3:13:53:d8:cc:ea:4e:9b:aa:25:9f:66:
         6d:26:67:05:a8:fd:39:1d:5e:85:b9:b4:48:ec:05:2f:d0:0b:
         fc:e1:6e:35:74:40:13:4c:52:7b:83:37:3f:e2:eb:58:f8:09:
         ab:c5:87:c0:ed:f0:37:f8:57:7c:de:e2:ca:33:0b:07:2b:e6:
         9e:c7:d4:8c:7e:c9:c7:04:e3:c2:e9:69:ac:a5:a2:70:e1:c4:
         2a:40:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:01 2025 by rpki-client