Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/74cd6f9c-401a-3eb9-bc7b-e1cdb4253942.roa
File:                     74cd6f9c-401a-3eb9-bc7b-e1cdb4253942.roa (raw, json)
Hash identifier:          JPx5C7TMXO45pU7V6WbUit7XXdUFo7El0W3Nu5W9BY4=
Subject key identifier:   C9:17:79:E9:BA:5E:C1:C5:B8:CD:FF:41:EC:1B:A6:43:A7:1A:34:47
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584BA93D2BC655458087FFBF87C0
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/74cd6f9c-401a-3eb9-bc7b-e1cdb4253942.roa
Signing time:             Mon 27 Oct 2025 13:20:20 +0000
ROA not before:           Mon 27 Oct 2025 13:20:20 +0000
ROA not after:            Sun 25 Jan 2026 14:20:20 +0000
asID:                     64013
IP address blocks:        23.226.48.0/20 maxlen: 32
                          23.235.160.0/19 maxlen: 32
                          23.248.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:3d:2b:c6:55:45:80:87:ff:bf:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Oct 27 13:20:20 2025 GMT
            Not After : Jan 25 14:20:20 2026 GMT
        Subject: CN=d71bc2de-de5b-4bdc-876a-38db71044115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:97:67:dc:d1:41:53:58:be:36:40:98:56:
                    5d:06:e7:16:05:ba:2c:ff:0b:9e:98:32:39:79:aa:
                    0f:c5:ab:f3:d5:86:7b:4e:26:e7:b8:d5:d4:a1:be:
                    8c:65:cd:10:8c:be:68:b5:b4:ef:06:71:ad:cb:0d:
                    1e:03:44:0a:f0:e6:25:4a:48:cf:83:37:93:e0:7e:
                    69:99:6d:ed:6e:32:e3:c4:40:59:3d:ff:16:5c:17:
                    53:8e:9c:74:4a:32:5a:4c:82:8d:2b:22:79:c8:9b:
                    d9:2b:0f:51:a1:91:b3:e9:20:ca:6b:d1:78:de:75:
                    70:e1:43:1e:84:21:dd:16:bf:81:7f:bd:22:64:57:
                    c6:ba:a9:a9:2e:47:9d:e8:ec:2b:89:42:75:9b:e9:
                    6a:14:a1:9e:c3:76:a6:da:b4:47:09:a6:a6:50:cb:
                    08:91:eb:ef:b8:25:f4:d1:f9:ef:23:16:86:25:09:
                    2c:6e:51:f2:df:c9:79:0c:cc:12:89:4b:4f:b6:ed:
                    88:16:e8:9c:52:99:a4:ee:8b:17:c5:af:b5:9f:b2:
                    ba:16:df:26:c3:05:98:0b:f3:3b:ef:46:ad:b3:a1:
                    46:92:07:e3:1f:74:d7:83:f5:22:e8:93:22:fe:9d:
                    51:6c:df:90:ef:36:43:ac:b2:2e:9b:01:bf:82:45:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:17:79:E9:BA:5E:C1:C5:B8:CD:FF:41:EC:1B:A6:43:A7:1A:34:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/74cd6f9c-401a-3eb9-bc7b-e1cdb4253942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.48.0/20
                  23.235.160.0/19
                  23.248.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:ed:c7:91:a0:1c:11:27:02:78:72:43:79:f7:2a:11:db:
         c0:1c:30:ae:38:49:de:37:4f:cb:8e:01:f0:0a:8d:09:08:02:
         24:a1:7d:bf:2d:21:4d:f8:be:bc:06:9e:7b:a9:6d:23:7d:8c:
         9b:c4:b6:c7:eb:d7:00:64:fa:d8:a6:bd:3e:ea:14:db:c5:8a:
         64:4d:d6:35:27:53:8e:f6:97:46:a4:0b:13:54:c1:d9:f5:49:
         0f:b8:5f:7e:be:42:0a:9f:9f:f5:4e:2e:51:88:0f:ca:44:14:
         d1:7f:ec:16:5e:b7:17:02:64:e3:a6:cd:d5:db:d1:34:2b:17:
         3e:30:64:32:59:5a:5b:9e:ba:e1:3e:d7:f9:6a:5d:f5:41:f9:
         d7:41:98:22:3a:66:c4:32:f4:79:ee:5f:5a:7a:e9:df:a4:9a:
         33:01:13:c9:06:fc:aa:e3:bc:ec:07:1f:0a:f1:79:e8:ea:64:
         dc:2d:c0:5c:11:32:5e:72:75:0e:c5:5a:0e:56:08:ff:61:32:
         fa:46:22:e0:d7:63:5c:f2:a5:c3:8f:66:48:b3:83:af:57:1f:
         d0:2a:fe:ee:07:3f:31:f8:e3:67:db:1c:a6:dd:d9:34:59:ea:
         91:e1:81:87:df:f8:3c:91:ab:b7:05:63:fc:fa:c9:ee:cb:7e:
         66:eb:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:29 2025 by rpki-client