Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa
File:                     930022df-4888-35d9-a721-aaffe888b06a.roa (raw, json)
Hash identifier:          C92qNXnmALgrzG9yOIakw0GANqq0FZQ808ppjZD0qqQ=
Subject key identifier:   62:3E:1A:5E:5E:1C:EB:E7:37:9E:FA:94:36:63:E8:1E:85:2C:C7:64
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584B9E07C090A5153AA066016900
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     54681
IP address blocks:        23.133.248.0/24 maxlen: 26
                          23.133.249.0/24 maxlen: 26
                          23.133.250.0/24 maxlen: 26
                          23.133.251.0/24 maxlen: 26
                          23.133.252.0/24 maxlen: 26
                          23.133.253.0/24 maxlen: 26
                          23.133.254.0/24 maxlen: 26
                          23.133.255.0/24 maxlen: 26
                          170.205.56.0/22 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c0:90:a5:15:3a:a0:66:01:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=a9db0992-8f80-4afa-9955-690627d6e123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:aa:de:c6:32:24:70:87:16:ff:5b:f5:52:
                    1a:48:17:ae:37:5d:c8:9a:bf:68:21:db:ea:2e:59:
                    8c:b8:07:7c:67:f2:ec:1a:cc:3d:01:9c:23:af:0f:
                    ae:a7:3b:45:7e:15:2f:7f:47:0c:4d:e0:6d:21:91:
                    0d:64:e7:04:45:47:84:24:b8:83:f5:5e:18:ec:c8:
                    85:a6:6c:ce:51:14:7e:93:cc:93:be:8b:92:0b:66:
                    33:a3:6b:37:79:33:a8:4f:94:1e:2f:ad:6b:a2:42:
                    d8:61:72:ff:15:0f:17:20:0f:23:55:ea:d5:74:db:
                    01:3e:f8:9c:ac:5c:da:d6:ec:31:e7:88:72:e8:4e:
                    34:02:12:a0:eb:4e:8c:b8:0f:f9:44:a9:8e:15:5a:
                    9b:fd:8e:95:bb:0d:53:2e:5c:13:cc:ec:86:72:75:
                    51:7d:b1:e7:5c:2d:8d:0c:cc:55:21:b5:27:a6:54:
                    6a:ff:a7:d4:b2:c1:a0:fa:54:37:69:8d:56:02:3c:
                    ce:d4:74:c0:4a:e6:57:5e:42:fb:d8:37:0b:40:d0:
                    1c:e1:a2:38:86:c9:4e:46:34:4c:bd:8c:bf:72:f9:
                    d4:b6:ab:72:72:0a:a7:07:99:c6:da:5e:b7:35:15:
                    82:a7:4b:ec:f9:d7:95:f9:94:18:54:28:56:6e:2d:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3E:1A:5E:5E:1C:EB:E7:37:9E:FA:94:36:63:E8:1E:85:2C:C7:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.248.0/21
                  170.205.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:02:1a:d8:24:03:61:e2:f7:f8:e0:5f:03:88:c1:75:58:c6:
         5b:29:57:ea:28:55:bb:86:28:d0:7c:bd:79:24:61:99:ac:c3:
         9a:67:bc:f9:69:81:d6:03:76:5e:07:3d:95:fb:da:4d:4f:81:
         0d:60:9c:66:ac:9a:d4:06:26:06:dc:30:fe:f0:b3:ff:79:9c:
         67:32:c2:99:ca:2a:10:d9:35:32:5f:c0:43:96:49:71:05:f9:
         8c:b2:1d:56:48:74:f4:cf:be:a0:b4:95:cc:59:cf:b9:7e:b4:
         4f:f7:c5:ed:22:eb:f0:61:38:47:d0:f7:d9:d5:83:8d:3d:0a:
         f7:78:80:9e:74:3f:5f:a3:29:4e:5c:a3:98:36:04:07:1e:9e:
         c4:99:d9:4f:f4:f7:04:b4:6a:09:a2:26:46:1a:e4:75:fb:c8:
         b4:36:d7:90:a9:cc:f3:54:fc:2a:ce:23:de:a2:de:5f:c5:06:
         9a:e5:bd:97:1b:c6:92:8a:1f:91:84:1f:e4:ce:7d:f8:6a:0a:
         40:7c:b9:bf:bf:9a:79:dd:1b:55:ab:09:66:96:53:3d:ce:ef:
         c1:ff:43:c3:b2:42:df:ba:1b:37:cc:c8:4f:4c:e8:4a:60:25:
         96:60:5e:3e:b4:69:eb:5b:66:19:50:bf:f3:07:f2:9f:17:0d:
         dd:8f:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 08:19:22 2025 by rpki-client