Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/d7a66130-b3c1-3569-830c-018dd86178d3.roa
File:                     d7a66130-b3c1-3569-830c-018dd86178d3.roa (raw, json)
Hash identifier:          h8BwIby//opSjtOfqmrssh3ODgye905bA6ul3SSuQaA=
Subject key identifier:   3E:49:6D:BE:7B:F4:88:F6:62:A3:D0:D7:FB:3A:46:E0:F6:00:F8:FB
Certificate issuer:       /CN=a6bf83f0-8367-4e3e-bd9f-59d247528cc0
Certificate serial:       010D0C9F4328584B51C087753E4179072D926B40
Authority key identifier: 15:A8:25:57:DA:DA:4D:0D:7E:E5:42:0E:66:8C:7B:11:81:9A:9A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/d7a66130-b3c1-3569-830c-018dd86178d3.roa
Signing time:             Fri 26 Sep 2025 05:16:06 +0000
ROA not before:           Fri 26 Sep 2025 05:16:06 +0000
ROA not after:            Thu 25 Dec 2025 06:16:06 +0000
asID:                     53544
IP address blocks:        23.144.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:c0:87:75:3e:41:79:07:2d:92:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bf83f0-8367-4e3e-bd9f-59d247528cc0
        Validity
            Not Before: Sep 26 05:16:06 2025 GMT
            Not After : Dec 25 06:16:06 2025 GMT
        Subject: CN=33cd23f0-9e50-4f79-8928-148de81c4d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:9d:43:f3:aa:86:b9:52:e8:e6:37:1d:a4:
                    3b:eb:d2:65:f6:73:ec:1e:2f:3d:de:35:f9:2b:3b:
                    1e:ea:a7:72:b6:34:b1:7c:49:28:89:e8:fa:41:ce:
                    ee:61:bb:c5:de:40:43:cf:e6:53:43:0d:81:bb:d2:
                    25:1b:b4:14:56:ef:1d:8f:33:00:87:4b:d6:8a:6b:
                    bd:97:39:96:7c:85:1a:37:bf:3b:ac:66:87:c1:47:
                    02:19:4d:fa:fa:2f:9f:7b:fc:99:56:62:f7:26:3f:
                    62:21:e4:81:35:01:f2:60:b5:25:dc:b1:0b:96:b2:
                    b6:aa:35:92:a5:38:9e:28:7c:65:d7:4a:fd:cc:8f:
                    80:7b:a4:6f:68:0c:57:87:0c:00:5b:6a:2d:3a:65:
                    42:8f:d3:dd:a0:1f:33:00:ba:a9:88:9f:88:30:ad:
                    d1:88:13:70:bf:1c:51:f6:57:ee:8b:7b:b3:20:84:
                    87:d0:52:24:ca:09:57:3f:e1:a3:32:42:fb:62:eb:
                    df:10:03:94:e2:6a:5a:bf:0b:b7:ec:78:36:75:09:
                    9d:8d:4b:8e:c1:ff:a9:51:9b:b2:31:1a:5c:a1:f3:
                    ff:bc:5e:78:d9:89:58:aa:c3:0e:2b:02:db:6b:6f:
                    b4:57:c7:27:5d:73:11:cf:2c:bf:1f:4b:e6:e5:59:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:49:6D:BE:7B:F4:88:F6:62:A3:D0:D7:FB:3A:46:E0:F6:00:F8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/d7a66130-b3c1-3569-830c-018dd86178d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:25:57:DA:DA:4D:0D:7E:E5:42:0E:66:8C:7B:11:81:9A:9A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:16:6e:2e:b0:50:8b:f9:45:c6:4b:01:f9:a9:70:3a:5a:
         84:00:fc:76:71:72:e4:49:c2:f0:18:d8:1b:93:6e:23:2c:7a:
         b2:ed:0e:b0:ee:08:93:cf:9a:70:cc:2f:c3:b3:a6:04:24:19:
         c5:a1:98:6b:b3:ff:d0:0c:2a:ed:20:f1:9d:d4:ca:7c:9b:99:
         a1:cf:76:66:7b:87:ad:8e:1c:a6:00:d4:7b:83:83:b7:33:dc:
         13:b6:b0:06:fa:e2:39:c0:0c:55:3b:5a:dc:50:f6:87:c6:a3:
         1f:81:15:e5:b3:ae:4f:61:f0:43:e5:af:e9:a9:ea:58:3a:7d:
         c5:28:ef:98:e7:86:df:7c:67:d1:4e:53:68:a1:2b:28:c2:c4:
         44:e5:dd:88:b5:39:82:cb:80:3f:12:e4:38:17:5a:14:f5:d8:
         55:51:b7:d2:43:92:3c:86:09:17:4e:b0:1f:ba:9f:56:95:16:
         03:f8:8b:f1:cd:53:e9:1d:48:de:e7:c8:49:48:59:4e:c6:53:
         f7:fa:27:f0:a5:5f:10:31:4c:0c:3b:04:d0:63:7e:3e:54:dd:
         3b:cd:fb:10:63:b2:f6:01:40:c3:41:7e:ef:26:fa:d4:2b:c6:
         1d:bc:4d:60:87:8d:8e:a0:e3:cc:90:a9:b9:f1:1c:29:ab:f8:
         67:42:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 20:59:52 2025 by rpki-client