Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/61156331-8ce7-3b7d-934a-aaeeeb0eaf11.roa
File:                     61156331-8ce7-3b7d-934a-aaeeeb0eaf11.roa (raw, json)
Hash identifier:          mQKnjmohQ6pvNvrKURR4VnA5amEvMjMIlgxtWeuCfhQ=
Subject key identifier:   61:8B:FF:D6:4C:A8:1D:7A:BD:3C:32:C1:7E:5F:9B:13:16:B2:50:61
Certificate issuer:       /CN=2b564b98-807f-4472-b081-8e4364ab6410
Certificate serial:       010D0C9F4328584B4FE707547F41D5C5F9C46A00
Authority key identifier: B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/61156331-8ce7-3b7d-934a-aaeeeb0eaf11.roa
Signing time:             Thu 25 Sep 2025 13:22:03 +0000
ROA not before:           Thu 25 Sep 2025 13:22:03 +0000
ROA not after:            Wed 24 Dec 2025 14:22:03 +0000
asID:                     402000
IP address blocks:        23.146.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:e7:07:54:7f:41:d5:c5:f9:c4:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b564b98-807f-4472-b081-8e4364ab6410
        Validity
            Not Before: Sep 25 13:22:03 2025 GMT
            Not After : Dec 24 14:22:03 2025 GMT
        Subject: CN=5ed82fb3-c39a-4c41-bd4c-fc33af4a4378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:93:7f:7a:e7:a2:26:ea:6e:c4:b2:86:d0:
                    a3:66:85:cf:49:e8:9a:43:02:a4:d6:8d:c0:3a:e1:
                    48:f9:45:45:ed:7a:69:21:db:a2:68:cc:94:85:f3:
                    8e:d4:ba:43:70:5f:49:8d:66:a8:44:4b:74:c7:30:
                    c4:7c:dc:17:00:a7:db:4a:fa:f6:1e:ec:34:54:ff:
                    18:13:57:31:47:2c:e0:dd:17:d8:e3:0c:8c:17:c0:
                    7f:d9:75:74:c8:d0:14:6a:c0:c5:11:ae:9e:df:ef:
                    aa:1b:c8:83:bd:db:84:67:70:b0:e9:a3:49:f9:50:
                    75:f3:c5:ca:fe:72:11:bd:4f:29:09:1f:da:7f:40:
                    03:f5:5c:3b:a1:bf:da:d5:bb:d6:43:cf:69:35:3a:
                    51:eb:1a:b9:16:71:c3:23:0e:e8:76:33:1a:64:6e:
                    e9:54:96:9e:73:54:a4:f1:c8:df:4f:14:c9:a5:3c:
                    49:ad:4d:2d:6d:3d:00:f5:f3:50:24:e0:a3:55:e2:
                    ca:39:74:50:bb:7e:14:19:2c:1d:f5:f3:4f:f0:0b:
                    b7:b6:85:3d:12:ce:52:8e:3a:f0:8a:f6:19:c2:84:
                    10:78:b3:9e:cb:e9:3b:57:46:51:b6:2c:aa:08:a6:
                    b4:db:33:06:f3:39:4e:c6:00:f3:2d:8b:2d:a1:25:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:FF:D6:4C:A8:1D:7A:BD:3C:32:C1:7E:5F:9B:13:16:B2:50:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/61156331-8ce7-3b7d-934a-aaeeeb0eaf11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:62:4e:73:ea:89:8e:3e:07:66:fc:0a:b5:27:bc:1b:d3:f2:
         78:63:3e:17:71:fe:7d:1e:08:7d:e8:a9:c1:3a:82:8b:4b:af:
         15:3b:0a:df:71:dd:3b:f0:4e:26:a7:dd:2e:f5:73:ac:5a:1b:
         0c:f9:8e:0c:09:9a:67:4c:00:96:2a:e8:2e:66:69:92:a0:bb:
         a2:58:ad:f0:86:8c:c3:e5:9e:22:86:04:83:0b:da:da:9a:75:
         13:a5:0d:f3:ee:3c:0f:7d:c1:c2:ba:2e:2d:8c:52:56:4f:a2:
         3f:f4:b1:f9:d3:6d:9c:fc:fd:43:f9:74:7b:e0:43:2f:4e:08:
         1f:86:c5:48:07:a1:97:b3:8b:6e:b3:20:70:09:aa:1c:22:4f:
         2d:90:db:9f:1f:ba:d4:0f:21:63:d5:3a:3e:19:ca:06:d2:33:
         9d:09:5f:f5:e4:16:29:7a:e7:63:1a:35:11:f5:76:2c:15:12:
         ae:8d:d7:19:ae:58:04:5d:79:a3:9a:8f:eb:48:ef:64:4a:36:
         2d:7b:05:09:9a:78:5e:bf:14:d0:d7:77:1f:ed:f0:1f:cf:97:
         96:7e:48:20:16:3d:3a:4a:87:79:db:8c:f1:3a:e3:f2:f2:e2:
         e3:33:de:43:95:d8:21:15:83:4f:11:bf:17:be:49:92:35:1f:
         17:7b:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:32:29 2025 by rpki-client