Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa
File:                     13156011-7624-36a7-93ec-fb2c055d8fd0.roa (raw, json)
Hash identifier:          R5Asyq08YfZDKlE0kXuedxMVhh9F7AjvsQ5+75SCZz4=
Subject key identifier:   D6:E4:B6:3C:39:2B:26:B0:8B:D8:0C:C9:CE:94:86:62:F8:E9:54:BA
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F4328584BA7CD17676FBA869FF7D66700
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     55799
IP address blocks:        23.154.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:17:67:6f:ba:86:9f:f7:d6:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=c789246b-42b7-40b0-84d2-70c353dcc9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:fb:8d:94:a4:9f:c5:b9:63:b1:8e:30:f5:
                    b4:da:b2:94:0d:7a:d4:be:9b:08:ca:65:7d:62:e4:
                    69:73:d6:86:95:b6:9b:83:d5:be:d1:3e:e4:78:3b:
                    97:e4:2b:ac:c6:84:9e:dd:24:cc:28:d0:03:03:db:
                    e2:3d:59:3f:36:2b:b5:ce:e7:a2:d8:10:0d:b9:63:
                    b5:6b:87:42:a1:6d:a9:ca:3f:41:52:5a:70:01:9b:
                    c7:d6:37:7c:22:98:86:65:e0:ba:e4:d2:73:62:51:
                    26:37:d0:0a:c1:97:c1:9e:c1:09:12:93:ee:53:5a:
                    bb:1d:e1:10:a0:c6:37:17:08:a2:f8:69:e3:8f:cd:
                    80:4f:f0:72:74:89:b1:01:7b:4e:8d:52:b6:01:0b:
                    47:82:75:05:2b:43:01:c9:a8:94:89:27:5a:58:fe:
                    3e:59:e5:e4:2d:df:42:e6:f4:35:3c:bf:af:3f:c0:
                    69:78:c3:26:44:a3:f5:26:e9:a5:18:8b:49:0d:b7:
                    51:18:dd:25:89:3c:4a:6a:20:4d:12:f4:2e:d7:4f:
                    bb:6d:df:7a:69:67:60:4c:1b:22:29:55:ff:6e:fb:
                    53:70:3b:bc:dd:d5:71:c5:d2:c8:07:61:d0:9e:73:
                    7e:07:44:3f:8c:6e:a6:70:3a:af:fc:a3:79:26:f3:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E4:B6:3C:39:2B:26:B0:8B:D8:0C:C9:CE:94:86:62:F8:E9:54:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:01:cf:c6:7c:d3:cf:95:19:d0:83:e1:93:5d:19:83:17:
         e0:6a:65:5e:b7:80:f0:9d:26:17:ca:3b:04:9e:96:fc:ba:26:
         c4:50:38:05:ac:81:69:ee:8b:f0:cd:9e:55:1e:af:39:ac:b8:
         3d:c9:3d:a2:cb:14:18:d9:40:9e:e7:ae:07:77:78:64:7e:4d:
         5b:6f:a2:23:37:a9:27:1d:c3:15:26:13:41:fa:78:d7:e7:ae:
         ac:8a:7b:0e:1b:02:64:5a:5d:0a:26:82:0d:6a:7d:37:65:4d:
         3e:88:f6:c6:a1:dd:b0:d0:74:e6:25:98:f8:a6:b0:28:3f:07:
         41:2a:c3:50:65:ae:7f:51:6e:06:48:97:85:d0:f6:75:fb:a7:
         86:ad:90:77:c5:ac:57:0d:b3:65:94:21:8e:5d:92:9a:6d:67:
         31:eb:22:2e:8c:13:6d:fc:e1:64:e6:f6:ac:99:4b:c2:93:92:
         3b:16:7e:5b:d9:61:50:9f:17:d8:cb:3a:a2:7d:8d:88:43:f5:
         d9:b0:f7:47:31:81:22:f0:77:e0:70:3e:cb:5b:91:6b:05:9d:
         43:29:6c:72:19:55:da:58:00:8f:32:41:ec:da:69:f7:ca:77:
         48:9e:90:e0:15:dc:01:5e:3f:3b:f6:12:9a:03:e1:6d:2b:84:
         d9:71:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:41:50 2025 by rpki-client