Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
File:                     633d00b0-379d-3045-b69f-cbef8b659900.roa (raw, json)
Hash identifier:          5BpL8F6lzqx9M+aHXZXnNG3afLYegrXpyhQWevNm0+I=
Subject key identifier:   16:45:24:20:77:37:F9:03:A5:AF:0F:27:A9:EA:50:1C:F6:0B:83:48
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584AFBF69234FAB7D9BC7B2C5080
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
Signing time:             Tue 26 Aug 2025 11:45:28 +0000
ROA not before:           Tue 26 Aug 2025 11:45:28 +0000
ROA not after:            Mon 24 Nov 2025 12:45:28 +0000
asID:                     10779
IP address blocks:        23.161.104.0/24 maxlen: 24
                          192.104.136.0/24 maxlen: 24
                          2602:f590::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fb:f6:92:34:fa:b7:d9:bc:7b:2c:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Aug 26 11:45:28 2025 GMT
            Not After : Nov 24 12:45:28 2025 GMT
        Subject: CN=d3bd1722-321a-489f-a012-9c763090b15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:6b:1f:07:c2:7a:cb:72:71:f3:1d:11:78:
                    f3:2d:a4:7a:cb:2f:d6:80:c8:37:26:45:c8:a5:02:
                    3e:f7:03:ba:64:68:5a:0d:c0:28:39:79:5c:56:10:
                    fd:7f:06:d0:28:3e:a4:e8:e6:4b:38:6c:93:9f:e6:
                    16:c2:5f:12:f2:ca:28:ca:f6:b2:ae:e8:aa:63:79:
                    43:cc:52:2f:f7:22:10:c7:a1:1c:47:8f:87:55:63:
                    10:76:38:1b:40:a7:86:69:dc:5c:04:2f:e3:9b:1c:
                    4d:94:f9:86:93:a0:d9:3c:0f:5b:84:81:ed:38:3c:
                    62:a8:bf:39:d2:cb:d4:3f:a6:1c:94:39:c7:57:ad:
                    b3:9b:e3:dd:65:c2:fa:63:93:91:72:99:69:44:e9:
                    72:7f:93:2b:ea:b6:8d:f8:a1:1f:9b:86:23:34:05:
                    c1:ba:f5:4f:e0:a4:4b:2d:c0:ab:59:38:44:8c:90:
                    ec:55:0f:27:71:33:56:ff:11:64:15:9e:cc:91:33:
                    a1:a5:4d:0c:3b:47:ae:c7:be:2b:cf:17:1e:1e:c0:
                    c2:e6:6b:1a:62:71:3b:a2:3b:7e:1b:8c:2f:3e:eb:
                    0f:76:c3:6c:2e:13:ed:33:73:e2:4d:50:5e:cd:a5:
                    02:91:3c:4f:62:81:81:08:f9:38:5b:d2:40:0c:66:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:45:24:20:77:37:F9:03:A5:AF:0F:27:A9:EA:50:1C:F6:0B:83:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                  192.104.136.0/24
                IPv6:
                  2602:f590::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:19:4b:72:bc:26:ee:e1:a3:cc:1a:c3:80:2c:54:24:8e:
         f8:ee:ce:36:fd:42:bf:af:5d:0c:0d:fb:f2:71:ee:09:8d:40:
         2c:52:2c:f3:6d:63:f4:28:e6:e4:1b:f0:4c:04:64:63:a3:ce:
         ca:a2:c5:e2:c9:47:12:2b:ef:b9:f1:eb:46:d1:7b:21:7a:65:
         af:40:66:6a:81:22:7c:86:03:eb:53:3c:8d:37:40:48:7e:8b:
         64:6f:b3:39:e4:0c:a4:46:c4:ae:00:e1:f5:fb:95:d3:f5:46:
         c6:56:c1:62:94:a4:d0:7b:44:fd:76:28:ce:29:7c:25:30:cc:
         ed:19:ff:77:72:8c:37:95:21:d5:fe:bb:26:a1:9f:0d:eb:7e:
         29:cd:8d:bb:50:21:60:0d:3e:e0:70:62:ba:e4:1b:c5:fe:61:
         98:69:d2:69:ef:f0:d3:7e:2e:dd:3c:73:d6:c6:7d:fa:7b:30:
         5c:e6:9a:fc:9f:0c:7f:a1:1e:f2:d7:a5:74:1e:b8:7c:26:82:
         c1:ec:d8:01:c3:2d:7d:3f:f7:d0:7c:7f:02:4b:ea:76:b1:3e:
         93:9a:9e:7f:04:18:1a:cc:64:b9:39:b2:a8:26:11:4c:41:c4:
         2c:cb:43:3a:3d:ea:78:e4:70:f6:bb:cf:9d:ed:ef:7f:55:82:
         27:11:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:18:23 2025 by rpki-client