Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/d9b42277-6cec-3845-8e35-18bd35d7340f.roa
File:                     d9b42277-6cec-3845-8e35-18bd35d7340f.roa (raw, json)
Hash identifier:          K8mzfxoUoz+VHX9/CCM0j2ZdJsasKCyIgIp5dqd1xbw=
Subject key identifier:   7A:3F:F4:B1:58:64:4F:AE:38:BF:49:C6:A2:C3:FF:71:3F:7E:DA:DF
Certificate issuer:       /CN=b0a66ebc-132f-425f-af00-116407f972f2
Certificate serial:       010D0C9F4328584B963B9CEC582167BF7802B000
Authority key identifier: BC:73:CF:4B:7F:38:67:3E:1F:91:BC:D5:AF:EB:06:56:87:C4:60:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/d9b42277-6cec-3845-8e35-18bd35d7340f.roa
Signing time:             Mon 20 Oct 2025 17:59:04 +0000
ROA not before:           Mon 20 Oct 2025 17:59:04 +0000
ROA not after:            Sun 18 Jan 2026 18:59:04 +0000
asID:                     979
IP address blocks:        23.144.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/b0a66ebc-132f-425f-af00-116407f972f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/b0a66ebc-132f-425f-af00-116407f972f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:3b:9c:ec:58:21:67:bf:78:02:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a66ebc-132f-425f-af00-116407f972f2
        Validity
            Not Before: Oct 20 17:59:04 2025 GMT
            Not After : Jan 18 18:59:04 2026 GMT
        Subject: CN=c8afef9d-0f7a-4d43-824d-d05aa8f57c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:a2:32:2f:9c:28:8e:fd:bc:eb:ba:09:05:
                    d9:72:48:0b:ad:87:62:63:a7:46:71:11:1f:dc:b1:
                    de:07:a3:d3:44:0a:68:68:61:35:44:51:33:76:c2:
                    b7:15:65:5c:b6:4e:aa:00:68:f6:19:f8:b4:77:0f:
                    8d:0e:19:b5:1a:a9:40:f9:47:da:1a:fa:88:a9:53:
                    a5:67:9b:ba:da:2f:0f:12:2f:f9:05:06:2c:31:b1:
                    19:00:27:5d:4f:36:06:50:df:d1:81:b5:35:48:c7:
                    02:f4:05:a0:bb:79:e4:46:b9:ca:a0:1e:13:3c:eb:
                    90:9c:3f:f8:f4:45:10:6e:73:92:67:62:13:10:9e:
                    80:57:9b:3c:7c:2f:56:75:ee:d6:a5:ea:f2:48:90:
                    b9:4e:25:03:28:aa:91:61:a7:1b:21:e1:2f:17:47:
                    18:4f:b7:40:26:c9:5a:7f:3c:15:df:cc:4a:bd:47:
                    cb:3c:c4:29:bd:75:ca:62:53:29:8b:c2:0f:e9:8c:
                    73:68:1a:62:92:b5:e6:6a:5e:97:fb:aa:1f:fd:5c:
                    fc:a3:8a:36:df:c8:78:0d:e6:87:ba:9d:90:c2:42:
                    d8:57:b3:96:1b:97:04:e4:c6:22:10:47:30:19:d6:
                    bd:3b:39:b8:4f:9b:e9:bd:64:a2:8d:cf:b2:51:c1:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:F4:B1:58:64:4F:AE:38:BF:49:C6:A2:C3:FF:71:3F:7E:DA:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/d9b42277-6cec-3845-8e35-18bd35d7340f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/b0a66ebc-132f-425f-af00-116407f972f2.crl

            X509v3 Authority Key Identifier:
                keyid:BC:73:CF:4B:7F:38:67:3E:1F:91:BC:D5:AF:EB:06:56:87:C4:60:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:28:3c:a7:82:1a:db:6d:e2:29:4d:bb:76:e3:91:c1:26:98:
         5e:10:b1:93:60:58:f1:bc:ee:2c:ef:ea:86:b9:97:c6:1d:30:
         b7:24:e5:34:ed:34:b1:14:8f:be:f0:00:3e:58:53:03:d3:89:
         0a:91:40:5e:40:07:3e:e8:34:d6:bb:29:66:37:b8:59:e8:d1:
         f1:53:7c:74:3d:de:5d:61:aa:85:3b:e9:e7:39:c5:f8:aa:16:
         2e:8b:34:62:0d:ba:60:41:92:e3:41:f0:8c:2c:8c:e9:44:9e:
         11:fb:44:3c:a9:65:61:e4:b0:3f:e5:4b:8b:6e:20:c9:1a:3a:
         3c:52:ce:a5:66:87:14:42:b9:38:6a:78:34:3d:d0:da:a8:b5:
         97:1a:f8:af:f5:31:f3:33:5b:ff:10:9c:84:bb:83:d8:c5:9c:
         7d:1a:f3:1e:c2:c1:86:e3:ab:08:41:2c:28:88:e4:7a:74:04:
         8f:13:d4:5c:92:df:34:ba:5e:f7:e4:ae:cb:8b:20:61:9c:20:
         57:27:b2:01:8c:2b:c9:13:fa:be:56:7c:e0:02:a6:78:7d:3f:
         42:65:32:b9:4b:dd:45:11:82:5c:0a:35:4c:a8:9f:62:9b:84:
         6b:b0:45:24:f5:6b:cd:f0:81:4c:13:08:a5:6e:9d:22:45:d2:
         f8:27:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 08:17:53 2025 by rpki-client