Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa
File:                     79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa (raw, json)
Hash identifier:          39e4tW9cjA/IbjVzg8Ig0sUlisHmFhW8HjheQdkzysQ=
Subject key identifier:   73:C7:ED:A1:E4:DD:10:CD:FA:23:2A:82:F4:3C:F6:01:66:C2:E5:29
Certificate issuer:       /CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
Certificate serial:       010D0C9F4328584B3987085B1CB2C64D41F200C0
Authority key identifier: D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     399032
IP address blocks:        23.185.64.0/24 maxlen: 24
                          2602:fe76::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:08:5b:1c:b2:c6:4d:41:f2:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=270f981b-1dcd-4cb4-a100-9dc598937846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:0c:25:62:e1:68:ea:6c:a8:dc:c2:4d:a9:
                    c1:39:02:01:6b:86:ff:98:e9:2f:aa:62:b8:79:ef:
                    fe:0c:3f:22:7f:5c:62:1a:0e:42:28:bc:03:62:52:
                    a8:f2:8e:86:18:50:77:70:03:63:2b:64:15:53:f3:
                    05:6a:b1:ba:25:50:4c:1d:9c:74:dd:7e:79:27:39:
                    b1:3e:c9:39:df:a5:e9:4d:c2:62:9a:df:67:56:d7:
                    eb:1b:42:fb:6a:6b:4f:e0:93:c3:18:ba:4a:15:52:
                    7c:ad:a9:b2:7b:70:75:17:99:b8:6e:59:71:b5:c8:
                    94:08:e4:2d:95:ee:d5:13:b6:99:4f:6c:f5:47:ec:
                    ac:a7:a5:33:db:de:d3:1a:98:56:a5:1e:c1:20:3a:
                    76:d1:3c:88:fd:75:b1:a4:0d:fb:e1:99:aa:26:09:
                    d8:76:9c:50:35:25:0d:a6:b1:8b:ef:a6:98:f9:b5:
                    57:73:fc:de:68:c0:9b:3b:99:0c:c6:00:81:1a:e2:
                    fd:a8:fe:f1:99:7b:44:47:ee:67:93:1b:63:17:37:
                    d1:60:3f:6f:44:a5:de:b3:36:10:53:4a:0a:f5:49:
                    f4:49:f5:da:a5:ca:2b:cd:a9:3c:ae:a1:11:e1:3e:
                    8f:09:23:35:51:b0:44:1b:c2:32:1b:23:e4:13:58:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C7:ED:A1:E4:DD:10:CD:FA:23:2A:82:F4:3C:F6:01:66:C2:E5:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl

            X509v3 Authority Key Identifier:
                keyid:D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.64.0/24
                IPv6:
                  2602:fe76::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:07:62:01:ea:bc:e3:cb:7e:cd:cd:ac:22:cc:d7:64:8c:
         59:d5:f5:af:aa:61:bf:78:0e:6f:8d:86:f0:75:93:7e:f9:53:
         45:61:b3:20:ea:bb:6e:83:3b:6e:b0:61:39:f9:6e:cc:db:92:
         cc:25:d3:0a:9f:41:4a:f0:6a:2c:47:e6:df:8f:51:31:9b:2e:
         9a:32:a4:92:85:ca:7c:84:04:50:dd:52:a0:1b:00:af:11:62:
         0a:42:ba:c9:3f:0a:0c:eb:f3:df:df:2b:08:d4:19:da:dd:8b:
         c6:c1:31:59:ed:45:3d:f4:54:71:55:0e:d0:12:09:d4:81:c0:
         60:5b:78:ed:cf:09:7e:59:a3:9e:fa:97:bb:e7:c7:db:47:9e:
         7c:5b:c7:6e:a9:59:66:27:60:14:65:a5:56:8a:b3:21:d7:46:
         25:4c:11:e4:e6:b6:db:dc:89:44:a7:51:c9:a1:a7:4e:20:6a:
         e2:e7:07:e1:a3:a1:be:d4:ae:50:0c:cf:99:c3:2b:61:54:f0:
         ee:9b:40:f8:37:57:20:47:12:75:fc:c2:81:f8:b3:8a:6a:a9:
         6b:c1:b4:a7:65:2c:b2:8c:af:53:de:a3:73:64:ad:16:10:ed:
         4f:fd:1f:fd:f9:75:a7:c3:5e:a0:f4:5e:00:f8:61:83:7a:f8:
         08:91:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:40:11 2025 by rpki-client