Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa
File:                     1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa (raw, json)
Hash identifier:          tGWkduuaZjexZA/0dKFe1gUWBdAedoCIu4TBBiChaT4=
Subject key identifier:   8E:2A:33:C1:1C:01:07:40:50:BC:43:A7:37:1D:92:06:0C:1F:A6:8B
Certificate issuer:       /CN=13d94d84-ae52-41c8-8236-9b11fdb2c4e4
Certificate serial:       010D0C9F4328584B5B07658C7F5E5FF3024AFE00
Authority key identifier: F0:52:63:C2:28:AA:96:56:8C:E8:D5:4A:78:08:2A:D7:00:19:4F:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     401561
IP address blocks:        23.131.196.0/24 maxlen: 24
                          2602:f751::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:65:8c:7f:5e:5f:f3:02:4a:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d94d84-ae52-41c8-8236-9b11fdb2c4e4
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=b017fc55-287e-4623-9af9-7ce93a2e9810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:42:87:fb:b9:af:8f:2c:9b:f4:d8:6e:d5:
                    14:03:61:5e:9e:27:4a:12:ba:a4:5e:be:de:67:08:
                    a2:a2:35:f5:7c:be:9e:80:fe:8c:1e:00:af:ae:8e:
                    12:31:2b:71:b7:7c:f7:69:26:c7:9a:e3:85:8a:86:
                    c4:9d:8f:28:46:52:b2:83:b4:46:54:f9:8f:84:dd:
                    b8:82:f1:a3:e4:c8:b6:f3:be:ae:c1:36:ec:c7:3c:
                    42:8a:cd:ed:30:af:63:8f:35:85:21:a6:1d:dc:b8:
                    32:bf:01:91:ec:db:c5:c8:7d:13:2b:4a:5a:dd:27:
                    da:ba:ce:b8:5f:c1:64:23:62:bd:bb:ea:95:dd:19:
                    a8:32:48:7b:82:8a:e2:62:53:dd:37:1d:b1:ae:9f:
                    83:63:5c:ad:c2:cf:cc:2d:35:97:cc:c1:05:81:7a:
                    d8:24:cf:4d:73:5e:18:19:56:e5:fd:27:00:32:88:
                    ca:f5:be:47:48:56:6a:a7:ef:e7:50:d5:67:02:f2:
                    d4:28:1b:89:8d:4c:66:80:85:9f:3c:d5:f2:d5:91:
                    2d:53:48:71:af:d7:06:55:74:37:f1:f6:08:eb:a6:
                    22:a2:cc:b1:2f:49:76:f3:d3:b8:64:95:7c:72:7d:
                    e2:0b:69:fa:41:3c:91:07:ca:60:c8:b7:2a:e6:b1:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2A:33:C1:1C:01:07:40:50:BC:43:A7:37:1D:92:06:0C:1F:A6:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:52:63:C2:28:AA:96:56:8C:E8:D5:4A:78:08:2A:D7:00:19:4F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.196.0/24
                IPv6:
                  2602:f751::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:7e:3e:57:db:aa:2a:a9:81:8d:dc:0f:d6:86:f3:91:8a:
         b6:7c:ba:9c:4f:17:6b:90:0f:45:aa:21:1b:9d:0d:d3:ae:52:
         74:15:bb:05:a3:f3:2c:74:2d:6c:2d:ff:2f:7f:99:73:c7:b8:
         36:33:24:35:13:c1:94:8a:6d:78:f1:88:84:eb:db:0f:53:8b:
         87:e0:7f:71:e9:04:31:ad:93:e6:62:aa:fe:9f:ef:e7:c8:a8:
         37:66:4f:54:8f:de:01:fb:bc:c3:d1:de:d2:a5:7d:80:75:80:
         f0:f7:ce:31:15:f0:28:1f:9e:cd:f2:53:7c:2b:c6:06:89:68:
         62:90:ae:7b:98:b7:e8:53:65:26:07:88:7e:dd:4c:3b:f6:3b:
         eb:12:45:7f:a2:36:73:5b:6e:5c:97:02:03:fe:86:3c:81:8f:
         12:03:ea:93:bd:63:44:39:f5:a2:6e:82:25:99:7e:04:a8:f3:
         20:f4:91:23:ea:04:00:7f:df:04:32:1c:ce:6c:eb:07:dc:0f:
         18:64:e5:05:40:c9:84:46:d8:f9:ac:dd:3f:55:70:51:dc:ea:
         16:19:a7:30:41:19:6e:ab:87:e8:1f:f2:2e:de:33:cf:6e:49:
         27:0b:d4:e9:68:15:60:0a:00:b2:86:d9:ac:57:ba:b6:87:0e:
         46:6a:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:57 2025 by rpki-client