Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b3e8c76b-edfc-3abc-8523-01ddd088f73a.roa
File:                     b3e8c76b-edfc-3abc-8523-01ddd088f73a.roa (raw, json)
Hash identifier:          /tjOgyT2B6amWacSXxnS6xRYyheAry1XqhF1X+lM+Ac=
Subject key identifier:   0D:08:BB:52:5B:CC:96:98:AC:AD:BD:7B:6D:B4:A1:BB:83:3B:EE:12
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584BC27065502AC4D6230C2CDDA0
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b3e8c76b-edfc-3abc-8523-01ddd088f73a.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     397018
IP address blocks:        23.151.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:65:50:2a:c4:d6:23:0c:2c:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=ebc27691-2cdf-40d6-89d7-684658459cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:40:b0:7d:20:0f:5e:9d:d7:3e:a7:a3:2c:
                    3b:76:94:a2:53:8b:6c:68:ba:71:5e:62:44:ec:ca:
                    ee:78:e1:6a:92:31:f3:3e:8b:ce:7e:dd:bb:c4:27:
                    18:14:19:80:9a:79:2b:a0:fe:d1:27:70:3f:23:85:
                    1d:ba:ff:22:bb:5d:3d:6c:39:ae:73:be:f2:17:40:
                    76:08:76:c8:57:61:53:17:c7:da:8d:c4:7c:94:3a:
                    1a:d8:cf:c3:b8:00:c1:32:0e:0a:f6:7c:ce:fc:ba:
                    6b:ea:46:b0:4c:16:50:6e:f7:e1:e6:b5:ff:91:60:
                    d3:48:e6:65:01:fb:95:b3:13:60:f1:17:f1:9a:f7:
                    8e:b6:b3:f9:9a:b6:89:ad:e1:d2:eb:75:29:8e:43:
                    e5:29:e7:98:ad:53:1d:20:ea:eb:88:fb:40:bc:98:
                    46:f8:77:f2:a8:d0:97:d5:9e:4c:e3:f1:41:02:cc:
                    4f:1f:f9:26:2d:80:ed:82:48:97:93:56:26:cd:10:
                    1a:33:2d:b2:65:a1:eb:5e:64:74:60:45:1f:a1:a8:
                    0b:cf:55:f2:07:d9:3d:c4:95:33:66:4f:d0:83:e5:
                    13:0f:55:86:4c:00:32:52:9f:1c:a2:f8:f8:b3:8c:
                    d9:bc:15:db:c4:62:2a:7e:9e:51:a8:56:a6:8c:bf:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:08:BB:52:5B:CC:96:98:AC:AD:BD:7B:6D:B4:A1:BB:83:3B:EE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b3e8c76b-edfc-3abc-8523-01ddd088f73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:69:27:03:de:d9:d1:76:c7:40:3b:f9:53:9a:04:ef:6f:
         d0:66:64:23:96:d4:31:2c:3f:bf:86:63:da:b5:6c:a8:e5:88:
         c9:9c:6a:74:23:0f:0d:78:1f:bf:97:14:95:59:e3:49:60:a9:
         50:8d:40:b1:36:ba:92:a0:08:d2:8b:3a:f3:af:af:29:59:a0:
         38:6e:e7:11:b0:63:8a:f2:40:ec:1f:cc:e9:ee:4d:cb:07:03:
         1d:b8:71:5c:ea:d1:be:53:fd:69:d7:93:98:de:ec:e3:aa:f1:
         20:e0:45:61:fc:1d:14:59:2f:a6:78:eb:a0:6b:7e:2c:3b:85:
         34:3f:da:b0:e0:42:d0:29:c6:35:73:ba:0b:cd:56:4c:df:52:
         46:f9:4c:50:b4:a8:ba:69:b3:d2:b3:32:54:db:b7:07:35:b9:
         49:bf:7a:9a:29:cc:a3:b6:cf:09:6d:db:19:c8:39:20:2a:1c:
         7c:65:ac:e9:43:46:9b:d9:4d:e9:f1:2d:42:7c:48:0c:e9:4a:
         2a:79:b1:20:a4:ca:70:01:ab:d1:a3:27:79:0b:67:9e:e8:eb:
         f8:5b:64:51:45:83:64:bd:31:63:d9:22:85:76:bb:c3:2b:aa:
         ea:a5:27:97:6b:92:cc:b4:a3:90:ea:7e:8b:ab:fb:47:3f:2f:
         dd:70:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 23:49:12 2025 by rpki-client