Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
File:                     34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa (raw, json)
Hash identifier:          fZDPFmPKQ0KfhRoxoMUzvIivalE9Yx3Unhyw6OlDtss=
Subject key identifier:   5F:2A:AC:22:24:B3:9B:0D:82:20:9F:A2:8B:64:1F:3F:42:9F:02:18
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584BB2F7AA3B7B1BBB5FC20BA4C0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     396982
IP address blocks:        23.227.56.0/24 maxlen: 24
                          23.227.57.0/24 maxlen: 24
                          23.227.58.0/24 maxlen: 24
                          23.227.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:aa:3b:7b:1b:bb:5f:c2:0b:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=1762c009-0dae-4b1d-9861-7ad61c0c0ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:0d:ed:67:bb:dc:ea:cf:4f:31:b3:d1:ad:
                    17:d4:d2:f1:79:0f:11:cf:68:9d:fd:96:69:24:50:
                    e5:a8:56:8c:f4:3e:38:1a:0c:1b:ab:3c:18:06:36:
                    0c:50:62:bc:7b:b7:cd:43:41:dd:25:1c:fd:ad:19:
                    a8:98:cf:4e:a5:4b:d2:43:5b:3a:ce:6b:32:62:ee:
                    b0:06:a0:f2:5f:31:fc:40:57:d6:ae:52:79:0f:4d:
                    ed:6a:a0:59:00:86:9e:34:bb:0a:c5:6d:da:da:3f:
                    ac:65:63:ef:21:be:9e:60:ca:e1:1c:32:fc:34:d3:
                    6f:ba:d7:03:bd:b5:8b:93:17:6c:42:50:f7:83:c0:
                    51:7d:f2:e9:8c:32:61:27:61:42:a3:b4:30:7f:01:
                    39:0c:c2:65:b3:1e:3d:8d:5b:54:7c:10:67:62:ab:
                    82:f7:d5:a8:51:cf:c9:24:a6:a7:ef:00:38:c5:c6:
                    90:a3:c9:99:b0:ea:38:e7:27:e8:13:2d:f8:30:12:
                    62:97:50:8a:a1:5d:b1:e8:49:b2:9a:4b:ae:0d:d6:
                    a8:2a:a6:49:8b:92:42:f9:4d:94:92:65:61:de:32:
                    79:0d:20:af:38:db:13:d0:33:34:c8:19:b7:c7:23:
                    49:24:c3:47:40:94:92:25:80:12:7b:df:53:95:36:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2A:AC:22:24:B3:9B:0D:82:20:9F:A2:8B:64:1F:3F:42:9F:02:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:15:17:b0:8e:c5:21:95:01:aa:0d:90:8d:0d:2c:61:7a:
         fe:e1:01:b7:2f:80:e5:7c:cf:bc:0d:51:8d:0b:c4:87:b9:53:
         94:d1:ab:f5:1b:32:29:6e:95:96:dc:7f:bc:b7:6d:27:ea:45:
         42:09:a4:03:78:0d:c5:74:00:cf:fd:7a:b7:64:db:0f:6d:2f:
         c9:2c:3b:49:0c:f3:34:2e:3f:d7:cb:c7:55:74:21:76:53:8f:
         5a:10:2b:f5:db:2e:5c:41:ed:e5:c5:b4:3f:9d:22:60:ca:2a:
         aa:68:dd:c8:30:1d:e8:74:be:45:29:e7:95:a5:a8:f8:c7:cf:
         43:f6:7c:1f:d9:af:50:90:4b:ec:f5:8d:e1:a3:b5:71:04:30:
         2c:e4:fe:13:62:a0:98:a4:e0:73:e6:a4:6e:77:62:19:78:b3:
         9a:80:75:92:91:95:42:8d:97:6f:53:3a:0b:f2:31:ae:61:b4:
         51:52:66:5d:75:d2:b5:4e:9f:1f:c3:12:e4:b8:f5:11:31:6f:
         96:42:2c:aa:cd:02:00:93:96:75:46:f5:cc:e9:b5:be:73:ef:
         a7:44:75:45:8f:42:7f:e0:26:a0:f6:bc:ac:47:dc:11:f0:83:
         d4:57:43:55:cb:92:5b:15:55:ed:b8:76:7b:bb:3e:af:43:aa:
         82:d5:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:05 2025 by rpki-client