Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
File:                     633d00b0-379d-3045-b69f-cbef8b659900.roa (raw, json)
Hash identifier:          ym9RRVqeKO9TLkpzHR789qgM3k91/3hKZ8p9OFaXbKg=
Subject key identifier:   E3:08:E8:29:08:90:A2:C4:DA:62:6F:25:FA:36:4D:9A:BC:B0:F3:0A
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584BDB9070738FB831267BE19D00
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
Signing time:             Fri 14 Nov 2025 14:00:37 +0000
ROA not before:           Fri 14 Nov 2025 14:00:37 +0000
ROA not after:            Thu 12 Feb 2026 14:00:37 +0000
asID:                     10779
IP address blocks:        23.161.104.0/24 maxlen: 24
                          192.104.136.0/24 maxlen: 24
                          2602:f590::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:db:90:70:73:8f:b8:31:26:7b:e1:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Nov 14 14:00:37 2025 GMT
            Not After : Feb 12 14:00:37 2026 GMT
        Subject: CN=b1f8e8e6-38fd-450d-9761-1b5fa3cc8831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:3d:b1:09:af:bf:cb:89:d6:48:f6:f6:5f:
                    e9:e1:f1:12:cf:13:22:49:b9:53:81:6f:4a:4c:92:
                    27:ef:3b:4e:97:fe:85:1d:29:1f:1d:10:b9:01:d9:
                    81:7d:ab:a5:65:04:67:83:50:2f:df:ae:d9:34:99:
                    f4:93:a7:f5:6b:67:97:ad:7a:5f:09:19:1f:02:34:
                    e5:71:27:18:42:d7:45:e1:6f:fb:3f:66:b6:03:4a:
                    88:57:3b:5a:c5:e0:23:42:6e:1e:fc:bf:94:42:63:
                    8e:c3:54:d5:f7:ee:99:67:17:2c:3c:6c:19:b5:7e:
                    25:a9:19:95:25:32:74:d9:09:07:6f:e4:3f:ba:e5:
                    cc:03:5b:4a:48:77:4c:e3:0b:69:0e:08:e1:06:4e:
                    41:7d:ba:16:d0:aa:09:6a:b1:f6:77:66:63:96:3b:
                    87:13:03:9a:47:78:45:ba:fd:4e:49:a2:e5:ba:58:
                    b6:23:c3:44:e5:58:bb:76:ab:b6:f4:5c:d0:f1:c5:
                    ca:87:69:a0:31:45:06:ad:19:08:56:e2:b0:78:4f:
                    64:43:d7:21:5e:ce:a3:46:35:5d:07:95:5a:39:66:
                    7b:d5:70:5f:2d:72:b7:4c:29:e1:ca:e5:b1:8e:85:
                    22:0c:9e:74:31:97:e4:11:bf:c3:23:5e:85:5e:ef:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:08:E8:29:08:90:A2:C4:DA:62:6F:25:FA:36:4D:9A:BC:B0:F3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                  192.104.136.0/24
                IPv6:
                  2602:f590::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:94:ec:7d:88:84:19:87:65:42:d8:57:74:42:9f:5e:dc:9d:
         98:0c:6e:19:8f:b3:2b:c3:a5:ea:68:5f:65:28:d6:52:65:ca:
         23:65:6b:93:81:c6:35:c8:74:b5:e2:f7:bb:4e:0d:2a:b4:08:
         73:d1:26:52:cd:70:09:42:52:03:0b:11:9a:d8:14:9f:84:81:
         3f:04:6c:2c:e0:64:d4:ef:31:8d:40:4d:d7:78:5e:b6:2d:95:
         2a:61:ce:d7:90:2e:df:60:e0:ed:79:ff:6b:78:a8:06:fb:b4:
         f1:d8:7b:91:8b:a5:48:d7:57:df:21:e9:cc:7e:8b:c0:ad:8f:
         08:df:3a:9f:de:69:2b:95:54:4b:b4:12:10:48:5f:b1:65:3e:
         1d:9f:51:e5:01:58:ad:2b:d9:42:4a:8e:b1:ac:3a:0e:b2:7b:
         09:33:e5:1f:83:4c:ad:3a:14:20:62:e1:57:ca:34:f6:54:00:
         12:2e:4d:56:57:e8:dd:19:c7:c3:b4:b9:37:cb:10:47:52:1d:
         3f:e9:2b:41:a1:bf:f4:f1:66:85:b8:57:72:36:69:20:ff:c2:
         6e:17:c1:5a:db:6a:b3:05:21:4c:8e:be:2f:19:53:b8:3d:96:
         af:44:33:d7:9f:60:1d:27:6e:fb:78:7a:9b:eb:aa:6e:24:b2:
         07:ba:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:09:49 2025 by rpki-client