Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa
File:                     5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa (raw, json)
Hash identifier:          HwlnT1iGiYkr9Itgp4mguKUvr3uan56bZxWxBrUvPoo=
Subject key identifier:   86:DB:15:C1:B8:2B:F5:95:DE:B7:1E:EE:BC:FF:15:5D:0B:6F:C1:CA
Certificate issuer:       /CN=3dce7e6f-4588-4d9b-bb90-80f074656851
Certificate serial:       010D0C9F4328584B4FDC71868E81E21C8F292B00
Authority key identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     26042
IP address blocks:        23.133.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:71:86:8e:81:e2:1c:8f:29:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dce7e6f-4588-4d9b-bb90-80f074656851
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=d0a747ad-f8aa-47fc-adad-789909de7f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:16:b4:56:18:6c:7e:36:f4:9e:6c:b0:b0:
                    b0:d7:2e:c5:ed:cc:d7:27:c3:79:f8:21:43:ce:6c:
                    cd:1b:8d:42:34:b8:21:2b:20:78:61:d4:50:6b:2b:
                    6e:98:2d:f8:82:d5:0f:46:16:a1:c5:ee:50:92:c3:
                    27:d8:2b:f8:fb:f4:8c:0d:9b:02:af:db:8f:09:4c:
                    15:80:52:38:a3:2b:a8:9b:ec:ab:36:4b:a9:81:bd:
                    0d:f0:5e:66:56:08:0f:03:8c:bd:f1:26:a3:58:e6:
                    ed:0e:6f:b7:45:d1:9a:06:ec:25:2f:c7:6e:b5:4c:
                    e8:aa:e9:58:05:ad:49:79:5f:e9:9b:4b:6b:94:a7:
                    f5:9b:d5:39:f7:45:5f:57:de:18:17:b3:34:67:4f:
                    3d:cc:b1:5c:c3:7a:44:20:90:53:40:e0:ec:0f:e4:
                    94:e7:dd:6f:45:3d:4e:53:ae:78:06:f5:9a:0b:2a:
                    d2:ea:11:c1:57:bb:41:14:03:3f:d6:9d:b8:5c:a2:
                    ec:a2:0a:67:63:3e:7c:50:fb:ce:94:75:91:a2:4f:
                    71:d3:ae:af:b6:b0:6f:eb:8b:09:04:44:86:da:78:
                    0e:9e:97:61:da:ff:41:f8:eb:7b:db:14:a9:76:15:
                    06:b1:c2:3a:78:9b:f1:78:87:96:e0:16:9d:9e:0e:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:15:C1:B8:2B:F5:95:DE:B7:1E:EE:BC:FF:15:5D:0B:6F:C1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl

            X509v3 Authority Key Identifier:
                keyid:25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:44:e3:bb:1b:f9:ec:8f:54:02:f5:41:28:d9:f1:aa:9f:7c:
         bb:37:71:b7:63:db:c5:9f:1d:33:f1:7b:d6:8d:4e:2d:37:7f:
         a2:50:08:19:d4:6c:c6:af:5c:21:d2:7d:59:93:3b:05:7d:26:
         f8:e8:aa:7b:b4:f8:4e:bf:1c:19:5e:5f:30:5e:fa:2a:77:23:
         b7:2b:ba:40:73:33:43:29:6c:86:db:11:ee:15:87:bb:96:94:
         b5:a2:f6:72:e8:71:5a:1b:f5:fc:12:fe:13:9b:9f:46:dd:b1:
         f4:dd:1c:d5:78:48:4a:78:22:6e:73:16:5a:4e:6e:67:8b:08:
         db:e3:8d:8f:95:0a:ad:30:9a:ff:a0:e9:29:02:53:0e:84:1a:
         19:04:8e:59:92:d4:f8:ee:ba:87:57:ab:95:39:4d:b1:ba:ef:
         35:a6:97:37:36:52:3a:f0:d0:24:a4:58:be:a5:43:03:cd:84:
         d7:e4:43:18:d7:e6:b4:23:2e:b0:77:b2:05:0d:61:ae:6a:02:
         87:b8:d7:e4:69:ad:95:fe:49:23:24:60:ba:81:c1:42:6a:03:
         cc:9c:bb:d7:39:64:f6:41:5b:37:60:f8:70:99:09:3a:6e:d6:
         89:6a:f4:27:1a:76:9d:00:03:8b:30:9f:08:8d:82:be:b4:95:
         58:06:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:28 2025 by rpki-client