Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa
File:                     a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa (raw, json)
Hash identifier:          /0xJxI8ZiBWqZxnJqWbAX6UVI0mRd9ZIvLftrlJV4RE=
Subject key identifier:   5F:FA:BB:E9:89:66:9C:07:68:3F:00:B6:95:5B:25:B6:75:7B:2A:01
Certificate issuer:       /CN=fb993146-757e-4177-9a61-207cb7b716c0
Certificate serial:       010D0C9F4328584B1D9C2C6F0C14F2794F884000
Authority key identifier: 3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     32598
IP address blocks:        23.150.136.0/24 maxlen: 24
                          2607:2fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2c:6f:0c:14:f2:79:4f:88:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb993146-757e-4177-9a61-207cb7b716c0
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=9f7ba0ec-07a8-421d-b618-6b5783fe6000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:4e:eb:57:28:e9:7b:75:26:38:12:c3:00:
                    d5:61:8a:38:48:63:1e:64:3b:8f:5c:ec:a6:8d:33:
                    6a:bf:99:12:eb:50:b9:3f:d4:7d:29:a3:df:04:5b:
                    17:17:a1:3f:fb:3f:96:60:f2:1d:1a:fc:a4:d6:de:
                    23:59:2b:50:e2:f5:61:5d:c0:13:b8:8d:1f:ed:fd:
                    6b:98:00:c7:dd:6d:72:a2:c5:21:e3:f0:63:f7:2a:
                    18:42:a9:0c:a7:35:7e:99:56:b5:10:98:2c:80:b3:
                    e4:17:05:1d:21:89:5e:3a:12:d4:e0:2c:0e:c8:de:
                    32:8e:88:ff:e7:0a:e9:53:22:46:fb:7c:10:85:c7:
                    55:e1:50:7a:4e:6c:fe:b5:f7:f6:b4:39:29:aa:ab:
                    1b:8c:4e:ed:5e:f3:a0:2b:08:92:06:dd:b4:0e:65:
                    2f:2d:64:24:83:c0:5f:81:2f:92:3d:72:23:c1:f0:
                    19:88:d6:39:87:1a:1b:98:42:68:94:7e:b8:13:60:
                    a1:a1:75:3c:e4:f0:dc:b8:f3:d5:2d:98:91:b4:c0:
                    9e:0f:62:85:12:e3:7d:34:7a:ec:e9:d3:de:1c:35:
                    6d:42:2e:5b:c6:6e:25:31:cd:0d:22:70:91:45:8b:
                    e0:90:f3:77:ed:39:7f:b4:69:fd:6b:f4:66:e0:db:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:BB:E9:89:66:9C:07:68:3F:00:B6:95:5B:25:B6:75:7B:2A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.136.0/24
                IPv6:
                  2607:2fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:66:05:b4:5d:73:72:6f:34:0d:3b:93:19:6c:9c:e4:cc:
         6a:d1:4e:51:dd:06:f4:0e:fb:9f:ce:50:8b:c2:41:e2:11:ca:
         7e:fd:a2:04:01:34:63:38:83:dc:a5:a2:78:00:2c:38:fb:4b:
         f9:12:a9:f7:9f:7c:a2:62:ff:dc:6b:5b:0c:a4:7c:42:13:bf:
         15:68:78:8a:bf:38:81:58:4d:b2:bf:56:59:46:b1:d2:f7:7f:
         57:c5:1e:c2:1a:93:19:70:2c:88:82:98:82:ae:25:da:5f:81:
         42:b9:e8:1d:e4:2d:a3:db:7c:c2:10:68:9b:ef:07:e6:f1:f3:
         6f:58:af:49:0c:f2:74:de:b9:f8:78:2c:a9:55:42:79:cf:4c:
         2c:de:b2:b8:ba:a3:a4:a4:77:ab:c7:cb:f2:68:a8:74:37:6e:
         00:cf:be:9f:53:48:87:c6:16:48:0d:f6:b8:00:15:87:93:64:
         39:07:84:35:1a:04:fa:dc:0f:92:3c:8a:11:46:d0:19:13:73:
         a4:3c:96:c2:4f:55:45:ed:7c:24:4f:e3:8c:8a:93:49:6b:2b:
         f6:73:7d:48:7f:df:63:3c:21:a7:59:7d:8e:2f:1c:34:4c:3b:
         0c:2a:99:6b:48:4c:0a:1e:15:df:dc:65:a2:8f:bc:31:52:96:
         9a:71:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:06:39 2025 by rpki-client