Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa
File:                     00dde76e-d01e-31a4-a3b3-7b4024f40125.roa (raw, json)
Hash identifier:          EH3t41Kbod8nU3oVz9+t9h4aVFxzcP+BBfmKvZ+21j4=
Subject key identifier:   FC:13:2B:DE:17:68:7C:03:37:7A:EF:9A:CE:BF:71:86:93:D6:0E:72
Certificate issuer:       /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
Certificate serial:       010D0C9F4328584B33F1B58135D3141455A2B7C0
Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     401595
IP address blocks:        23.132.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b5:81:35:d3:14:14:55:a2:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=c546830a-0dcf-41b4-ab1e-2cb89602ae93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:99:f9:6f:c8:05:29:83:b8:66:da:37:c5:
                    4e:8b:2b:0f:8e:ad:99:ca:74:f0:e7:4c:0d:55:b2:
                    30:c0:3a:e8:32:40:7a:56:b8:ed:c9:c5:91:78:a4:
                    1f:4d:84:57:c9:65:59:80:ae:c9:ff:da:7a:50:c7:
                    62:7b:c3:9b:46:b0:3a:2a:26:aa:e8:27:69:11:43:
                    7d:34:2e:0c:a4:df:3d:c1:cb:c8:6d:28:e6:a9:26:
                    40:f2:ae:a7:4c:58:d5:4f:df:f4:c1:06:f6:c4:52:
                    e9:38:db:99:ee:5c:81:bf:7a:1c:80:b9:d2:f0:2b:
                    6d:18:de:fd:0e:f3:cf:f5:a4:78:cb:28:80:4b:49:
                    8e:f7:f2:29:1c:c6:e7:6a:27:f2:63:11:90:2f:cd:
                    c1:d8:cf:b8:bd:7e:ec:a2:14:f6:03:03:e6:68:41:
                    08:80:15:99:6c:9d:3f:7e:ee:21:f5:f8:26:97:41:
                    12:e4:d8:e2:e5:cc:f8:14:b9:98:f6:6a:87:14:f9:
                    99:86:5a:75:fa:36:8b:90:7d:fe:ea:df:eb:c4:71:
                    41:75:6e:5d:c5:d1:c4:2f:c6:e3:a8:61:8a:20:1d:
                    1e:db:71:3c:a4:c0:73:8d:ce:df:36:9e:36:e3:87:
                    dd:69:87:1d:f6:f3:c8:1e:98:51:ac:b9:30:c1:bc:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:2B:DE:17:68:7C:03:37:7A:EF:9A:CE:BF:71:86:93:D6:0E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:d3:72:ae:8b:3e:c8:56:e8:b6:d7:fd:0d:9a:43:fe:88:
         f5:46:4a:8f:4b:a3:0a:80:b4:f2:d2:95:9f:98:a6:f4:97:71:
         26:bb:99:b2:b9:48:fb:f5:ac:ef:1e:58:2f:1f:8f:f7:ac:24:
         93:a8:2a:0c:ae:e4:fe:a7:11:36:04:c8:4d:89:ab:8e:04:b7:
         ab:03:10:64:19:8d:6e:7d:91:af:c8:12:ce:c4:37:c8:38:78:
         66:23:73:c5:d3:76:46:a2:07:58:2f:3d:6e:1f:e6:58:61:c7:
         47:ff:43:05:0b:8e:84:fb:04:f5:2f:b3:9a:4b:3e:c5:8f:64:
         49:0c:10:51:17:ce:3b:97:55:d6:9c:2a:02:37:f7:9c:58:38:
         33:3c:01:25:aa:a9:4a:ce:25:c4:44:d1:5d:0b:20:79:78:86:
         e6:0d:26:27:26:9f:06:80:31:ea:0c:60:55:d1:5b:ac:90:42:
         c1:e8:b1:63:4c:a4:50:72:a2:c2:75:b2:7e:f1:b5:fd:88:60:
         69:22:89:ad:b4:e5:e5:39:02:6f:c8:65:f7:75:6c:c2:f9:51:
         d2:68:53:74:41:c1:4d:e5:96:2f:de:bf:50:cd:bf:d3:40:e8:
         7f:d1:54:9b:0a:be:22:b3:93:2d:29:78:af:4f:5a:56:ee:74:
         04:0e:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:52:14 2025 by rpki-client