Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
File:                     1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa (raw, json)
Hash identifier:          fPwzGVPfh9sn4fIjRLdsE9BExk0YaX7Cyjj0ZpnAkDc=
Subject key identifier:   3D:DF:D0:0E:B4:52:04:A0:6A:87:A2:D8:47:FD:EF:5D:E3:59:65:A0
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584B1F0172C485794C373162F880
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     964
IP address blocks:        23.140.96.0/24 maxlen: 24
                          23.140.97.0/24 maxlen: 24
                          23.140.98.0/24 maxlen: 24
                          23.140.99.0/24 maxlen: 24
                          172.111.12.0/22 maxlen: 24
                          204.9.36.0/22 maxlen: 24
                          2602:fe54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:72:c4:85:79:4c:37:31:62:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=95e0cfb8-750c-4ef4-a227-0457b8fe8de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:77:1f:3f:31:d9:8c:54:67:76:a7:77:db:
                    2b:d1:af:31:34:c8:80:93:da:75:7c:25:c8:d2:ac:
                    4d:98:2b:1d:8a:e5:f2:37:f5:e6:2d:15:c7:24:11:
                    a6:31:b3:93:45:56:86:7d:ce:56:af:da:32:08:eb:
                    4f:6c:89:0c:25:1d:7b:32:b7:db:1d:c2:f4:89:3e:
                    e1:5a:2c:85:68:46:6d:0c:66:56:a8:fb:5b:aa:04:
                    50:bb:dd:dc:b8:c2:48:7c:c1:e4:4c:3a:c9:39:38:
                    71:e0:25:e6:79:d7:36:d9:63:78:cf:17:fa:e7:a4:
                    29:db:88:32:93:e4:03:32:06:00:07:4e:55:1a:fd:
                    bc:5d:c9:6d:4a:96:da:ec:be:ca:05:b3:6c:8b:29:
                    d0:85:ce:10:6e:f8:ca:b8:5b:7b:ec:7f:b9:4f:84:
                    d4:df:41:43:54:18:83:1e:1e:17:54:0d:e9:c5:6d:
                    e2:a2:c3:91:b6:35:63:14:90:de:4a:74:bf:72:80:
                    77:89:f6:98:73:7f:6a:10:d3:28:8b:d3:66:79:8d:
                    b9:eb:d3:be:6f:13:e2:a4:3a:3e:0a:aa:8d:3d:be:
                    9d:e9:04:d3:c5:23:bc:ce:2f:25:b7:c0:f7:54:e8:
                    19:c6:c7:00:67:06:45:14:dc:73:e4:7c:a2:40:9d:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DF:D0:0E:B4:52:04:A0:6A:87:A2:D8:47:FD:EF:5D:E3:59:65:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.96.0/22
                  172.111.12.0/22
                  204.9.36.0/22
                IPv6:
                  2602:fe54::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:50:30:3d:23:75:fd:5c:c2:ea:27:9b:58:04:2f:7e:58:54:
         e2:b0:69:3a:25:54:20:cc:ad:e5:b7:e8:7b:9d:74:b0:d3:89:
         4f:4b:f3:ce:d0:33:4f:52:7a:b3:d8:0f:07:e7:60:e6:a6:ea:
         2b:a9:c2:d3:c7:dd:86:6e:1a:5a:ae:bd:3a:58:f7:96:9a:4e:
         7c:37:9e:ec:13:6c:0a:4b:95:a9:cb:4c:3f:25:04:36:8e:a7:
         a5:92:01:f5:53:b3:48:cd:9d:dc:25:c8:65:f5:94:99:a8:7a:
         d6:87:2f:26:c2:ea:83:07:08:69:a6:f0:36:82:43:54:30:e5:
         26:35:84:9b:c7:88:0d:0b:b2:57:c0:97:5c:a1:7d:f6:ae:a2:
         b8:fb:e4:a4:70:f4:98:b9:46:8e:5b:92:b9:9a:fc:cf:da:a5:
         2e:22:cd:cf:e5:d8:7f:3f:65:c8:40:54:c9:6a:b5:96:1b:0f:
         53:b5:cc:6a:9c:70:59:e2:ae:48:48:5a:5d:08:9e:88:80:10:
         07:fb:60:2a:8b:42:97:d2:41:3b:eb:84:90:d9:e9:12:d2:4f:
         0f:16:f4:82:3d:18:a8:85:22:b5:93:42:f1:28:c9:f3:fa:e4:
         7b:1b:eb:6a:aa:fd:02:36:ff:37:95:b4:e0:ad:02:dd:9d:4e:
         71:67:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:21 2025 by rpki-client