Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3/8464a033-2ec8-3c6a-a6c8-64f273eb1182.roa
File:                     8464a033-2ec8-3c6a-a6c8-64f273eb1182.roa (raw, json)
Hash identifier:          K+SBwPYU9qYV8IDVKH4equJFU7EGFicc/Nt8GPVkyi8=
Subject key identifier:   3D:7F:0E:72:9A:DD:87:A3:82:0F:A9:9B:E7:36:B9:78:53:DF:65:10
Certificate issuer:       /CN=d7b25666-6568-466c-a3b0-5727a6163bf3
Certificate serial:       010D0C9F4328584B2CDF6B48C8317D1DF3D42F00
Authority key identifier: C3:54:A3:39:32:B1:CE:51:51:9C:43:0D:44:D1:6A:43:2E:1A:51:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3/8464a033-2ec8-3c6a-a6c8-64f273eb1182.roa
Signing time:             Sat 13 Sep 2025 00:13:26 +0000
ROA not before:           Sat 13 Sep 2025 00:13:26 +0000
ROA not after:            Fri 12 Dec 2025 01:13:26 +0000
asID:                     6079
IP address blocks:        23.145.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3/d7b25666-6568-466c-a3b0-5727a6163bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3/d7b25666-6568-466c-a3b0-5727a6163bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:df:6b:48:c8:31:7d:1d:f3:d4:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7b25666-6568-466c-a3b0-5727a6163bf3
        Validity
            Not Before: Sep 13 00:13:26 2025 GMT
            Not After : Dec 12 01:13:26 2025 GMT
        Subject: CN=0168962d-82d8-47e8-a21e-f1d4f64057ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:7f:0b:91:bb:35:ab:40:0d:2d:57:38:22:
                    41:10:3c:1e:b9:90:62:0d:34:df:86:ee:ec:8f:93:
                    f1:c1:ff:36:c3:95:c1:7b:8a:30:31:b3:96:d2:81:
                    af:c1:7a:e2:75:47:40:f4:c3:73:0d:f4:d4:5a:3b:
                    bf:f5:fb:85:58:c9:21:a6:6d:15:c2:43:51:5e:c6:
                    c8:fd:d3:69:89:24:95:47:70:53:bd:20:20:a4:6e:
                    16:0a:eb:6b:56:a2:a1:08:a1:ff:85:19:c3:5b:35:
                    5b:3e:4e:d5:4c:7f:fa:6e:3f:95:cb:81:93:84:cc:
                    b6:82:bb:79:ec:47:35:2d:50:96:cc:f8:5a:ce:02:
                    81:d5:50:69:4f:63:4c:85:14:64:16:bd:03:f7:a8:
                    6f:a6:23:af:d6:d9:20:d1:93:59:38:74:d8:e1:d1:
                    e6:8d:09:23:16:09:85:89:f3:e3:63:42:ff:04:23:
                    c7:27:86:6e:a0:5b:b2:45:5c:b0:f4:b7:10:9e:72:
                    f8:37:5d:a2:c2:8c:d6:06:ce:e8:2e:55:4a:eb:63:
                    70:26:62:0e:0c:61:1b:af:ab:c5:7c:3b:32:de:b2:
                    46:ea:c0:fb:e7:7c:e2:1a:3a:6e:8d:d2:c1:aa:a0:
                    b6:6f:6b:d0:79:bc:50:8b:d9:ae:dd:7d:46:f8:6c:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7F:0E:72:9A:DD:87:A3:82:0F:A9:9B:E7:36:B9:78:53:DF:65:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3/8464a033-2ec8-3c6a-a6c8-64f273eb1182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3/d7b25666-6568-466c-a3b0-5727a6163bf3.crl

            X509v3 Authority Key Identifier:
                keyid:C3:54:A3:39:32:B1:CE:51:51:9C:43:0D:44:D1:6A:43:2E:1A:51:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d7b25666-6568-466c-a3b0-5727a6163bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:99:c9:eb:ad:e3:77:7d:d5:2c:33:31:71:95:57:4b:f5:
         dc:5b:0a:a5:73:8a:19:4a:34:d3:92:ae:41:46:c9:4a:db:e0:
         a9:87:2e:e1:ce:ce:fa:e9:17:9e:6f:f6:5b:7c:31:05:01:89:
         f7:2c:92:36:cb:16:dc:65:e2:30:dc:1d:23:e5:7d:77:cf:52:
         c4:78:65:0f:57:f5:e6:72:14:84:3e:a2:0f:88:42:cf:bd:3c:
         71:f5:04:5c:6f:3b:07:f0:9e:8a:e5:5b:28:67:26:26:95:b7:
         cf:d9:b8:ab:8b:0c:68:55:20:63:af:21:f3:7e:ba:19:f2:88:
         65:9a:65:34:59:d3:07:05:95:33:9e:c3:9a:24:99:4d:a9:f2:
         7b:6c:f7:19:6d:52:3b:6f:84:e0:58:89:75:53:4f:ea:e9:66:
         fd:d5:46:10:36:ab:4c:84:93:cc:da:60:f5:5d:94:8d:4f:e0:
         a2:e2:bd:2d:b2:e9:ff:99:24:ba:7f:b1:88:e6:5d:fc:0b:31:
         56:41:4c:7f:6a:e4:75:44:3d:1c:3d:8d:d3:4d:26:31:13:23:
         3f:3c:cd:17:7d:67:8c:6f:25:f0:42:18:55:10:45:14:d2:d9:
         36:ac:fe:b6:c0:a6:31:46:50:d2:71:c0:b5:6d:70:f1:35:3a:
         8b:62:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:08 2025 by rpki-client