Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/a065aa37-61db-38bb-aafe-9a03f3b919cf.roa
File:                     a065aa37-61db-38bb-aafe-9a03f3b919cf.roa (raw, json)
Hash identifier:          RojKfihPGfr6aBTevGW9FrPPZNxT6aToOIHWOhSq0Ok=
Subject key identifier:   8A:53:06:A5:82:5B:4E:C8:EB:73:5F:8A:C4:D2:99:64:1F:97:9D:6E
Certificate issuer:       /CN=b2679e6f-3d82-435c-a3df-766830f41503
Certificate serial:       010D0C9F4328584B21CC1EB8FDCBAE10B54D4B0A
Authority key identifier: 7D:BC:35:E1:F1:B7:F7:C7:1F:EF:EE:34:09:74:1C:75:94:C7:2C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/a065aa37-61db-38bb-aafe-9a03f3b919cf.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     400393
IP address blocks:        23.130.24.0/24 maxlen: 24
                          2602:271::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1e:b8:fd:cb:ae:10:b5:4d:4b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2679e6f-3d82-435c-a3df-766830f41503
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=b1870b15-094a-44db-ab43-069fdfc23ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:be:7e:e5:2c:16:31:d1:f4:47:f0:24:39:
                    0e:49:ea:34:c5:1d:82:3b:64:ce:c2:b2:37:e1:be:
                    d8:71:a0:54:0b:58:a3:3f:5c:be:fd:80:e2:a3:9b:
                    13:35:5a:c7:30:c3:92:4b:74:25:80:41:46:00:e6:
                    6d:84:33:bc:bc:0e:cf:0f:6d:0d:89:d0:fd:18:2c:
                    60:41:89:24:85:58:4d:ff:d0:7a:85:14:78:9b:51:
                    cf:de:98:f6:13:a6:9e:a9:37:30:47:13:4f:9d:a7:
                    ef:8f:ca:70:6d:e6:f5:20:cf:91:71:b3:ad:4e:bc:
                    90:a9:e4:a8:71:87:cc:83:63:e2:50:85:8b:ed:6d:
                    7b:55:8a:26:af:93:bc:ba:19:a9:0a:d3:de:b3:8a:
                    60:7c:b7:b0:6b:98:4a:df:5e:ff:04:29:cf:13:2e:
                    28:96:43:ff:3b:49:e1:c3:00:4e:68:ad:51:b2:94:
                    3c:78:ab:42:a2:f4:3b:40:38:36:e7:01:30:24:b8:
                    5b:bf:77:30:27:1d:31:65:93:d5:5b:fa:cb:9b:0d:
                    c3:e7:5d:c9:fb:9b:50:bb:1c:b2:b7:2d:51:80:9b:
                    2a:0c:a7:a5:12:8c:da:24:77:e5:ab:0f:90:b8:cd:
                    30:b1:f1:02:64:71:8f:a1:da:c9:c9:a8:8b:04:35:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:06:A5:82:5B:4E:C8:EB:73:5F:8A:C4:D2:99:64:1F:97:9D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/a065aa37-61db-38bb-aafe-9a03f3b919cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.crl

            X509v3 Authority Key Identifier:
                keyid:7D:BC:35:E1:F1:B7:F7:C7:1F:EF:EE:34:09:74:1C:75:94:C7:2C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.24.0/24
                IPv6:
                  2602:271::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:22:ad:b8:7f:16:8c:b1:58:7f:c8:c1:d5:54:20:e7:4e:
         49:8f:a2:05:9f:c4:99:1f:9e:c5:79:4e:fd:f0:4b:03:90:30:
         49:1e:f0:ec:00:67:73:70:95:07:82:90:d7:cf:1a:81:d5:3f:
         9b:94:0f:de:a5:6c:af:7f:8e:b0:ea:55:c3:da:10:40:b4:5d:
         3a:fe:f4:a1:c5:d3:55:01:44:e4:79:8b:25:48:c1:8f:be:34:
         b4:a6:47:b0:b9:90:35:2f:72:98:23:e5:7e:ad:52:89:8c:02:
         2b:6e:78:2c:af:c1:99:8c:8b:1b:00:74:cb:0f:9a:c3:93:50:
         f8:98:bd:f7:65:b1:c2:4c:ea:ec:15:ce:46:71:75:81:42:1d:
         4d:59:75:bb:17:78:9f:6a:7b:fd:ce:56:3e:e5:7b:e5:4e:25:
         53:55:f2:89:b4:76:ab:b9:2e:f5:6b:1b:8b:b2:0a:2e:76:b0:
         d3:49:e2:0b:c0:ac:39:b8:68:4a:8f:1e:2c:a1:71:0b:a6:cb:
         7a:32:df:f9:ba:3c:49:9e:59:df:56:31:92:4c:ae:fc:3c:0e:
         f2:03:d6:a3:71:b2:e5:8c:81:94:83:9c:e9:8a:e0:38:4b:93:
         92:3a:c6:13:d7:79:18:5c:77:a1:e6:c7:ad:64:53:1c:3d:83:
         67:ba:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:19:50 2025 by rpki-client