Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa
File:                     5a37443e-20ea-383a-9358-9f99e9d723a7.roa (raw, json)
Hash identifier:          jEXt6wJVVEQDm1qdYy7Elha0rgzZCRDYSZtScIn7LUU=
Subject key identifier:   0C:61:AF:9D:C4:50:B8:6A:95:BA:C0:A8:CD:A3:73:99:5E:7E:62:63
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584B196C1F7EBA499E25EF785700
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     46261
IP address blocks:        23.226.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:1f:7e:ba:49:9e:25:ef:78:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=a3410f05-dbb0-4855-afd1-c522f798a679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:3b:bb:19:3b:52:99:2c:0e:38:1c:8e:b9:
                    04:dd:52:1d:92:8b:e6:83:0e:84:b1:60:c5:34:9b:
                    b8:b8:d3:c1:eb:ea:32:c1:ee:87:7c:99:bc:a1:48:
                    5e:20:d6:46:a0:55:c9:93:e3:1c:9b:59:19:70:e2:
                    70:df:38:37:cd:f8:97:a2:7d:c0:da:9b:66:fa:58:
                    47:74:ae:4a:e7:bf:d2:7c:ad:bf:f0:0d:fe:61:08:
                    13:82:02:1f:22:55:3b:f4:7d:c2:ae:d8:72:21:8d:
                    7c:bc:93:d4:67:73:27:b4:e2:d4:69:ee:a7:70:b0:
                    9e:e5:0b:95:6e:76:b5:9d:e6:87:fe:db:54:82:da:
                    6b:c3:f0:bf:34:d6:f1:b3:00:84:fd:e2:b1:a9:60:
                    31:af:e5:6d:05:c8:1c:5e:26:ce:f6:54:a1:e6:ab:
                    4d:fd:0e:47:c7:e6:c4:54:15:6d:c5:1b:91:36:1a:
                    a7:43:35:df:e1:75:d5:78:ac:5a:d0:ca:09:d5:16:
                    f9:17:6b:d0:f3:e8:c0:be:50:25:5a:2c:2f:db:2b:
                    fb:8b:a6:8d:b9:7d:39:7e:34:41:66:2b:da:af:7d:
                    16:92:76:2e:a3:55:72:dc:a4:ed:84:73:cd:6b:98:
                    7f:41:37:57:9c:52:b9:ab:d3:f6:77:86:1c:f4:86:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:AF:9D:C4:50:B8:6A:95:BA:C0:A8:CD:A3:73:99:5E:7E:62:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:be:a7:8c:e1:af:f0:55:55:92:0d:4d:a9:76:20:e7:13:ed:
         f3:e5:a9:d3:62:e8:92:1c:21:84:12:9e:cc:3b:cb:a8:d0:a9:
         59:48:72:20:81:95:ae:7b:b1:b4:89:f6:71:53:8a:a1:26:da:
         ab:f4:c6:d4:fd:7c:be:87:c7:72:01:38:e8:71:6e:6d:f4:ba:
         39:04:4a:90:b3:97:d9:0e:16:86:6c:6d:a3:5f:18:d2:a4:7f:
         d5:32:5a:ca:df:e2:bc:5b:99:6c:1c:2b:99:fb:62:ce:c5:b2:
         12:de:9c:ea:7a:80:6d:3f:4e:fe:28:f9:42:14:be:3c:7c:0e:
         5b:e9:fa:9b:eb:3e:8e:cf:de:61:c8:1b:a4:47:e6:e9:69:18:
         79:e1:c4:6d:7e:7e:0e:c2:66:0b:8e:5b:27:6f:30:88:bd:6d:
         ad:40:73:6c:05:20:ec:15:40:d0:6c:00:80:e8:e3:4b:62:80:
         1b:58:e0:ef:46:1c:33:11:42:b5:93:21:fe:56:a1:0a:99:b0:
         44:3e:f7:9a:22:05:12:a4:44:01:28:ae:20:96:9b:e5:65:97:
         ef:db:75:44:9f:35:76:75:64:8d:d0:6a:39:11:e3:3a:94:83:
         f0:d9:bb:eb:ed:aa:58:49:fe:78:2a:1d:c8:22:14:20:bb:d5:
         69:af:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:27:57 2025 by rpki-client