Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
File:                     ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa (raw, json)
Hash identifier:          VNIt3JdnTSO2XAZYbO9VcWHvbDVz7xt9uQSY+RqWqrc=
Subject key identifier:   3A:F3:70:E1:E3:AE:3D:B7:EA:E0:6F:01:3E:48:DD:FC:DA:47:40:B1
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F4328584B715CA834BCC9CB316EBE7400
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     33436
IP address blocks:        23.165.144.0/24 maxlen: 24
                          2602:fd09::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a8:34:bc:c9:cb:31:6e:be:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=ec489cfe-2a5b-44f3-ac0d-ac2ffc2eae0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:a1:79:95:e5:9c:cb:bd:d8:24:ed:5a:05:
                    66:32:34:60:c8:ec:a5:0f:cc:53:d4:16:c7:ec:c2:
                    a8:f3:57:2e:f8:79:8a:1d:71:eb:aa:05:f1:be:f2:
                    fe:49:fc:e1:8a:0b:54:1c:4c:9a:31:ad:60:5d:c4:
                    5d:dc:a0:4a:ce:67:d2:37:bd:dc:7a:d1:42:5a:26:
                    91:59:83:4e:8e:d9:70:2a:7a:f7:49:a8:46:b4:6c:
                    1b:a0:bb:0f:be:34:09:1b:14:05:a5:20:bb:7f:de:
                    2e:9a:01:52:d2:df:63:42:df:af:95:0c:88:ab:cb:
                    34:35:c2:08:5c:6e:ad:bc:40:a2:f1:28:69:d7:10:
                    5c:e3:9e:cd:c6:83:aa:b9:3e:99:ea:88:8f:97:dd:
                    c2:24:17:eb:ef:7a:64:ec:29:83:aa:8e:2e:5f:6a:
                    1d:a2:fc:29:3b:00:0d:fc:ee:71:d2:a8:a9:66:e5:
                    d5:5d:55:7f:da:54:26:5a:9f:4d:8e:87:a4:0b:99:
                    0a:ee:51:e8:b7:1a:33:da:d6:6a:39:21:8f:ad:69:
                    a3:7a:8e:b8:84:41:b3:56:56:4e:c5:0b:5d:ba:db:
                    64:fa:56:16:ef:1a:fe:7d:65:2d:a6:75:37:3d:ad:
                    ff:fa:6a:ba:21:be:d4:67:50:7a:c7:95:2c:1c:33:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F3:70:E1:E3:AE:3D:B7:EA:E0:6F:01:3E:48:DD:FC:DA:47:40:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.144.0/24
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:27:e5:85:93:2e:60:04:07:f4:bb:0a:58:1f:de:fc:03:
         4c:5f:f4:0a:94:d9:79:d0:1e:a9:75:68:d4:45:ee:b2:f9:d3:
         6c:f1:a4:d1:06:ba:7e:e0:d8:cc:53:87:e4:b9:e0:c5:e2:58:
         0b:73:41:78:95:0e:f5:94:ca:f4:97:0e:3c:37:a0:7f:93:3b:
         6e:bb:d6:1d:07:44:ac:5b:26:41:1b:44:24:d6:c1:05:be:c3:
         aa:b2:3e:d5:0e:38:49:75:b3:5d:3c:d2:9b:6b:c8:f3:a4:7e:
         e0:23:58:05:7f:25:57:70:96:5c:30:ed:9c:90:e6:48:d5:18:
         eb:4d:f8:e7:7b:02:b8:58:3b:90:e9:b0:fc:47:0a:2c:4d:97:
         d2:32:50:4f:ea:96:12:ec:98:bb:af:85:79:ba:e2:6c:3d:76:
         6f:08:e0:37:d8:73:0d:ea:2d:4e:f1:7b:2d:08:6d:5d:bc:a0:
         f0:68:06:d9:b4:ad:5b:0a:45:76:97:7e:e6:00:e5:20:93:04:
         ef:19:a2:00:3e:b0:cf:c6:5f:fe:44:07:60:54:a0:59:05:a8:
         be:a6:19:0c:b9:14:9d:59:4f:5a:26:e2:ea:9b:5e:3e:4f:e2:
         62:5a:33:6f:4f:ee:84:52:03:bb:cf:10:a0:05:cb:2e:1b:c0:
         0c:cf:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:23:53 2025 by rpki-client