Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/e66b647d-b635-3cf0-b9e9-6d7c5b4e2b8d.roa
File:                     e66b647d-b635-3cf0-b9e9-6d7c5b4e2b8d.roa (raw, json)
Hash identifier:          g/TACb2R07asB95rkO+yB3RBaDLqyOoc/YRgo9i7p+I=
Subject key identifier:   C7:E8:90:08:FA:38:5B:F6:5A:94:E3:62:F6:F3:1E:ED:B7:27:DF:92
Certificate issuer:       /CN=b94e0278-7f16-4317-8890-88ac004494dc
Certificate serial:       010D0C9F4328584B452FF3A066210E8B0C89EF00
Authority key identifier: 8A:5F:8F:1F:12:D4:4B:A5:56:6D:C1:71:60:0F:87:D2:81:59:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/e66b647d-b635-3cf0-b9e9-6d7c5b4e2b8d.roa
Signing time:             Sun 21 Sep 2025 17:15:06 +0000
ROA not before:           Sun 21 Sep 2025 17:15:06 +0000
ROA not after:            Sat 20 Dec 2025 18:15:06 +0000
asID:                     401870
IP address blocks:        23.143.36.0/24 maxlen: 24
                          2602:f5bb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:45:2f:f3:a0:66:21:0e:8b:0c:89:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94e0278-7f16-4317-8890-88ac004494dc
        Validity
            Not Before: Sep 21 17:15:06 2025 GMT
            Not After : Dec 20 18:15:06 2025 GMT
        Subject: CN=a765e63c-90fc-4434-b269-6e0fb2957c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:00:8e:02:0d:a9:1d:6a:8d:a9:a0:62:e8:
                    a6:f1:87:7a:d2:fc:ac:32:1d:f1:fe:c4:59:fa:28:
                    40:53:a0:6a:5b:a3:77:b0:2f:d6:a8:da:58:6c:0f:
                    db:a3:cb:95:6a:8f:37:b3:12:7a:b4:85:ae:7f:44:
                    9f:f1:c3:a2:b7:f9:74:47:f7:60:67:6c:24:d7:61:
                    af:26:e7:c0:bd:c1:80:8b:8d:b2:67:13:37:d4:5b:
                    8a:c3:07:83:fe:34:73:f2:ad:b8:4a:d9:b1:cc:ab:
                    7c:3d:aa:46:0a:72:77:2c:30:d8:58:d8:dc:25:e0:
                    19:b2:77:bd:34:9d:cc:21:1d:c4:aa:36:0a:2f:9f:
                    6c:c9:4f:15:88:eb:3d:1c:b1:88:3a:66:2b:3c:08:
                    f9:99:69:77:63:de:73:39:21:c6:2e:8f:9a:53:8b:
                    7f:74:15:2a:48:a3:c9:a6:22:f2:f0:54:63:4e:58:
                    24:3d:1d:43:c5:ee:6a:4e:86:5c:a7:f5:f0:32:57:
                    d3:f0:08:29:a7:b8:39:da:55:cf:d2:09:03:c0:4f:
                    db:47:3e:fb:b6:3c:d5:2f:44:4d:11:20:08:7e:0d:
                    ba:a0:55:e0:2c:fd:25:22:6e:05:55:4c:39:78:80:
                    7b:2e:88:ed:14:02:c0:a3:bb:e6:79:7a:f3:a6:d0:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E8:90:08:FA:38:5B:F6:5A:94:E3:62:F6:F3:1E:ED:B7:27:DF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/e66b647d-b635-3cf0-b9e9-6d7c5b4e2b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.crl

            X509v3 Authority Key Identifier:
                keyid:8A:5F:8F:1F:12:D4:4B:A5:56:6D:C1:71:60:0F:87:D2:81:59:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.36.0/24
                IPv6:
                  2602:f5bb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:98:d6:0d:07:b1:ca:89:45:5f:15:e8:b9:87:fb:da:3e:
         25:d5:2a:11:a2:6a:08:9c:94:20:70:51:a8:33:25:4f:95:44:
         90:98:cc:9f:1c:b2:30:1a:00:2f:53:12:48:ff:df:4c:c3:db:
         4c:4f:6a:b4:60:dd:50:8c:e4:db:b2:38:b7:5e:c3:98:32:f9:
         bd:10:6c:c2:d8:1f:53:18:7d:18:7c:d5:00:ba:fa:88:ab:62:
         74:14:69:a1:42:34:24:b1:fd:b8:f2:1f:22:b7:e9:1d:91:0c:
         64:8e:2a:d5:8e:57:c7:99:ad:28:db:61:c5:9c:87:a9:1a:54:
         14:de:e1:17:37:6b:13:08:29:72:80:68:5f:54:65:4d:b9:9b:
         43:64:01:e6:77:a5:e7:15:17:e1:f3:69:f0:f1:61:8b:f8:fe:
         82:ac:03:29:f0:10:0c:ca:16:f8:60:58:b1:66:32:1b:11:3a:
         a1:28:cd:95:5d:ba:d5:0e:bf:a7:18:34:5b:ef:58:cc:f3:af:
         b8:b0:49:b5:c6:2d:7f:54:ca:8b:0f:37:85:f2:c7:c2:9d:6f:
         69:3b:0f:a3:43:64:17:1b:cb:73:a7:06:64:27:b8:e5:ef:ca:
         1e:5f:98:17:a8:14:0b:49:d3:cf:9e:2b:00:c1:7c:d6:19:4f:
         0a:bd:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:40:10 2025 by rpki-client