Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa
File:                     39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa (raw, json)
Hash identifier:          /2n8RDsPya9ZY/ouA9ucFGetnXyK11pLVnCHqjs+UVE=
Subject key identifier:   45:99:5C:47:29:75:A4:47:E9:29:13:0D:46:A7:00:74:7B:F5:C4:92
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584B004BF1947AD5F2B6CD073700
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     7489
IP address blocks:        23.133.1.0/24 maxlen: 24
                          23.133.2.0/24 maxlen: 24
                          45.58.59.0/24 maxlen: 24
                          162.245.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f1:94:7a:d5:f2:b6:cd:07:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=71dd73d6-7c68-4e86-8d6d-8332bb0d3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:99:99:2c:81:ea:2b:f7:76:4a:ba:43:15:
                    d4:b0:b3:eb:84:3f:0f:f6:21:4e:51:75:47:30:e5:
                    b3:ac:dc:2d:d6:36:58:20:6c:a0:dc:70:c8:e7:cd:
                    78:e7:13:bc:70:fd:72:25:89:ec:bf:c1:d9:48:f7:
                    98:62:75:ea:81:8a:19:b8:15:ef:c4:10:02:3d:ec:
                    04:a4:e2:42:77:e1:dc:c8:97:37:3e:8f:47:24:a9:
                    68:28:a6:50:63:9c:fc:96:20:b2:85:be:56:c8:88:
                    57:a9:1a:fb:4c:f4:5d:68:78:64:0d:62:42:a4:87:
                    8a:9c:25:23:13:b7:34:05:86:cf:3e:10:0e:76:cb:
                    a2:56:a6:e4:ed:c1:0f:2a:51:f2:84:88:a8:14:d7:
                    5e:32:0b:e7:a3:84:66:ee:c9:e6:4f:f8:6d:35:64:
                    be:a9:42:d8:fc:ea:ad:4a:4a:5b:35:ec:24:10:56:
                    19:7a:6d:3a:44:57:89:09:df:2b:28:71:86:68:cc:
                    f6:0a:46:9c:90:e0:e5:68:87:b5:2d:ed:a2:af:7b:
                    22:01:13:ae:09:ac:00:83:bc:c1:81:e3:38:1a:a0:
                    e5:e3:c6:28:50:f9:87:e5:82:7e:ad:d7:8d:69:24:
                    ed:9e:2b:5e:0e:09:2e:e9:6f:cd:8c:40:0a:d0:0a:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:99:5C:47:29:75:A4:47:E9:29:13:0D:46:A7:00:74:7B:F5:C4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.1.0-23.133.2.255
                  45.58.59.0/24
                  162.245.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b5:50:7e:f9:9f:e3:ea:8c:93:06:25:b3:e6:3b:39:0f:3d:
         b4:fa:9e:d3:fb:67:22:bb:63:dc:a1:01:a7:51:f9:db:91:b3:
         f5:d6:f5:9e:a8:b6:29:9a:0d:6d:0c:5f:8c:2d:b9:d1:51:fd:
         79:f8:72:1f:26:cf:5c:64:cf:1f:31:65:23:6e:c7:fb:8f:75:
         df:b4:b9:27:28:41:97:0e:59:e2:a4:c9:96:a9:a5:bc:aa:36:
         31:d0:61:fe:e7:d1:14:5d:4c:42:df:c6:09:32:86:6c:37:7d:
         2d:31:cc:1b:57:41:bd:96:d7:81:0b:12:cf:04:ac:58:0d:31:
         7e:cb:07:db:28:43:d3:f3:fb:e3:73:0e:e0:72:6e:07:2f:3d:
         4d:f8:e2:58:32:bf:b3:25:98:21:99:a6:29:3f:f1:f3:12:bc:
         ec:eb:24:90:1c:38:f4:75:3b:9c:0b:97:39:b9:73:ac:fc:74:
         34:7f:26:45:46:ab:29:e0:a9:48:ed:a9:af:62:b9:84:6a:77:
         79:65:ff:d4:29:7f:f6:54:d3:5f:15:33:d6:ef:43:52:ad:e1:
         32:87:e8:7f:cc:70:20:b2:f7:26:ae:60:6c:0f:1e:21:f7:f1:
         9e:f3:62:05:3c:42:a7:2f:ec:ab:50:cf:58:5a:29:c5:f1:b9:
         27:13:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 15:38:47 2025 by rpki-client