Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
File:                     e6a5be0c-3342-3531-9d15-9b4cc482f541.roa (raw, json)
Hash identifier:          jTyjcnc6q24gylXbTp0lBUrm296sKJgu50Zayxmcii4=
Subject key identifier:   A4:FD:E8:5B:9D:8E:EB:2C:40:5E:0E:C5:26:33:30:F2:83:C5:CE:70
Certificate issuer:       /CN=0e527a59-f1c7-4664-a1be-8a0911a07432
Certificate serial:       010D0C9F4328584BA39D0AA8F319ABCA55757A10
Authority key identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     40864
IP address blocks:        23.159.240.0/24 maxlen: 24
                          96.125.192.0/20 maxlen: 23
                          2606:1b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0a:a8:f3:19:ab:ca:55:75:7a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e527a59-f1c7-4664-a1be-8a0911a07432
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=62898f33-7ba3-4093-93ad-9bd5ed9b46f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:ed:1d:a2:69:e9:86:9a:9e:42:ee:53:c8:
                    81:bb:0d:53:26:5a:72:e2:cf:e2:51:eb:72:cf:c2:
                    19:0a:dc:1a:8c:fc:55:b4:04:2a:df:05:06:b4:3f:
                    0d:9e:21:fd:67:a4:6f:43:eb:06:32:17:18:f7:01:
                    73:6b:87:8c:60:ed:4b:62:21:85:d7:d8:1d:21:04:
                    37:d0:0d:3b:8c:ac:42:16:4a:22:95:54:37:33:21:
                    9c:fb:58:e1:fa:a7:cf:e5:e4:cc:7e:1f:56:42:04:
                    1e:14:3f:07:a2:ac:92:86:38:ab:67:46:c3:c1:15:
                    cf:02:78:70:81:f3:14:37:63:12:be:8a:7d:26:ec:
                    50:87:92:c9:18:cf:9b:4c:c5:65:99:15:9d:1e:d0:
                    56:ea:d4:a4:d6:bd:8e:e2:e5:9d:b3:b5:1b:4d:45:
                    61:43:ab:d9:ab:1d:75:e9:61:42:c6:2f:c2:f7:15:
                    55:5c:b0:73:61:b7:ef:2d:59:76:c8:3c:3f:62:ff:
                    76:0c:71:c6:10:75:28:f3:b6:6c:4c:52:e3:8c:e7:
                    d2:34:f2:04:c2:8c:53:29:b1:13:7c:b8:94:5c:a4:
                    8b:ca:bd:51:17:dd:28:82:d8:ea:a6:c8:eb:c3:4d:
                    37:a4:f1:1e:24:ed:a8:0e:a5:77:23:71:d6:a4:2f:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:E8:5B:9D:8E:EB:2C:40:5E:0E:C5:26:33:30:F2:83:C5:CE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl

            X509v3 Authority Key Identifier:
                keyid:6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.240.0/24
                  96.125.192.0/20
                IPv6:
                  2606:1b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:bd:86:f8:f5:f0:ee:7f:63:d3:c4:97:a0:34:bf:6b:21:c4:
         ce:14:86:bb:9c:b4:db:c8:77:64:11:3b:74:15:93:2e:ef:f6:
         f8:7c:62:00:19:1b:00:d3:be:b4:fc:eb:e2:71:ac:2a:e5:d2:
         de:77:0e:72:d9:c5:09:7e:a1:57:9b:b7:c3:f9:ca:13:67:e5:
         34:e2:31:21:93:24:c6:62:88:da:b2:7c:07:89:91:65:98:61:
         40:1f:69:49:5f:e9:f3:ed:23:35:42:40:e7:2a:b8:52:5a:01:
         5d:27:68:a3:e7:2d:0e:1d:17:57:68:d8:cb:f2:79:7d:0f:6f:
         a0:12:e2:d6:e4:6d:a4:d9:0d:57:7c:a6:36:63:59:b5:d6:66:
         dc:e2:90:74:83:1b:f8:5b:57:35:ad:0b:1c:71:fa:12:4c:b1:
         40:89:c8:23:4b:58:67:ff:8a:74:8f:47:5f:54:6a:cb:53:39:
         dd:d8:72:e5:ee:7f:ca:ec:48:e3:c4:49:9f:6b:fb:d7:6f:72:
         92:84:4d:57:3d:5a:62:aa:ff:ea:6c:0a:fb:8b:a5:dd:0c:f2:
         e8:4e:a0:7b:19:96:45:25:70:24:c3:6c:98:f8:77:ff:26:c6:
         50:e7:77:1a:83:c9:cd:e7:c3:cd:04:fb:b1:44:b1:51:33:ff:
         aa:d1:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:51:42 2025 by rpki-client