Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c/0b7ed70b-d76b-3a9c-a6b0-d39e37f92af2.roa
File:                     0b7ed70b-d76b-3a9c-a6b0-d39e37f92af2.roa (raw, json)
Hash identifier:          iEiXHPL1oEh4RFn1HcDu7dkgYqMTkFueF5Xzxp5ZZTE=
Subject key identifier:   E6:44:EC:9E:90:82:69:F7:B9:03:2A:C6:7A:23:3A:07:22:A3:1F:F4
Certificate issuer:       /CN=26515a0e-3772-461f-804d-7151b1b5bd8c
Certificate serial:       010D0C9F4328584B2261E7163B6854511511B8C0
Authority key identifier: B2:AB:8D:B3:55:39:2B:8A:30:0E:EF:A1:C5:DA:47:8B:51:3D:AA:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c/0b7ed70b-d76b-3a9c-a6b0-d39e37f92af2.roa
Signing time:             Tue 09 Sep 2025 06:02:27 +0000
ROA not before:           Tue 09 Sep 2025 06:02:27 +0000
ROA not after:            Mon 08 Dec 2025 07:02:27 +0000
asID:                     8143
IP address blocks:        23.145.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c/26515a0e-3772-461f-804d-7151b1b5bd8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c/26515a0e-3772-461f-804d-7151b1b5bd8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:22:61:e7:16:3b:68:54:51:15:11:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26515a0e-3772-461f-804d-7151b1b5bd8c
        Validity
            Not Before: Sep  9 06:02:27 2025 GMT
            Not After : Dec  8 07:02:27 2025 GMT
        Subject: CN=30ed1af9-86e9-459c-991e-0176a3b6d2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:26:b6:22:e1:aa:cd:bf:3d:33:eb:44:8d:
                    74:1e:fb:af:ec:fe:86:f5:6d:8e:c6:b0:83:ba:53:
                    17:20:f9:4a:06:a5:4f:ac:11:cb:06:c5:eb:c2:00:
                    b6:d0:bc:b7:35:ac:89:23:a0:bb:9f:33:69:75:c2:
                    f0:8b:ee:d8:b6:c0:4e:5d:27:56:5c:2c:2a:bf:a2:
                    2b:95:32:2a:c5:2d:0d:95:dd:43:67:a5:1e:c1:c0:
                    93:cf:dd:3c:c8:8a:87:8f:96:30:e4:53:04:dc:8d:
                    e7:25:b1:cc:df:64:5b:7a:52:c4:18:c8:ac:93:02:
                    5f:77:e6:92:76:44:9b:e1:b7:82:7e:89:67:c4:9b:
                    b0:1c:5c:88:98:1c:1d:72:eb:bb:91:58:c4:bc:2f:
                    be:45:0d:2c:ec:79:84:fc:75:f3:e5:64:6e:8b:55:
                    0b:af:5d:97:e8:fe:25:60:59:48:0a:77:b4:92:cc:
                    67:7e:a7:87:fa:02:ed:a9:f9:89:32:e2:19:02:2a:
                    29:c1:86:37:0e:86:18:fc:f0:ba:bd:32:69:57:cb:
                    19:7d:7e:c9:39:41:7e:d0:ae:c9:63:4a:d3:c6:72:
                    e6:54:48:92:7c:7c:ca:c1:97:99:c6:f9:24:23:e7:
                    75:3c:08:42:d9:65:1f:bb:02:c1:cc:17:2d:99:e6:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:EC:9E:90:82:69:F7:B9:03:2A:C6:7A:23:3A:07:22:A3:1F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c/0b7ed70b-d76b-3a9c-a6b0-d39e37f92af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c/26515a0e-3772-461f-804d-7151b1b5bd8c.crl

            X509v3 Authority Key Identifier:
                keyid:B2:AB:8D:B3:55:39:2B:8A:30:0E:EF:A1:C5:DA:47:8B:51:3D:AA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/26515a0e-3772-461f-804d-7151b1b5bd8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:81:1d:33:54:9d:21:bd:9b:ac:cd:d4:d0:09:48:90:a3:88:
         d0:1e:50:ad:b5:64:5c:bc:cd:8c:0a:a8:62:3b:f7:34:8c:f1:
         93:65:39:b5:ea:a2:aa:04:59:c8:14:4e:87:37:90:f1:3b:7e:
         0c:aa:6d:7b:2f:dc:54:32:12:17:1f:8d:ec:a8:1c:64:10:0e:
         44:cb:82:2c:bc:59:ad:b8:24:9c:a2:f1:94:83:1a:1d:d4:78:
         d5:af:0d:84:4f:78:67:ff:79:a3:0e:c3:61:70:74:5c:c9:7e:
         f7:08:56:b9:9d:7e:de:74:b7:fd:e1:59:0a:25:48:1d:25:f8:
         e3:be:30:53:e6:c0:af:c3:99:53:fe:92:f8:70:c0:cb:cb:70:
         77:11:68:7b:ab:27:58:13:8e:cd:c8:64:34:e1:01:67:8d:6d:
         d2:6a:dc:98:c9:9d:49:4f:35:1e:0a:a0:41:d7:aa:f5:1d:e4:
         e2:db:ec:40:bd:20:dd:8c:18:73:1b:41:ae:6c:b1:63:e4:4f:
         b4:5f:35:86:7a:96:0b:28:5d:c8:7e:c7:69:bf:19:83:84:c8:
         8b:c0:be:f6:f2:04:1f:ec:46:db:8e:91:8f:00:c9:e5:b6:83:
         1a:ec:60:35:4f:7e:2a:55:29:15:5e:fd:d3:29:99:8e:92:44:
         dd:84:04:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:10:38 2025 by rpki-client