Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
File:                     47d7fcfd-95fd-3503-adb6-67e323a7831f.roa (raw, json)
Hash identifier:          mAfr3A+R2qfTqKq8L6DBeuZhO3S7zlwlFSsClaoHrN4=
Subject key identifier:   CB:F9:DF:9E:07:9C:4C:A7:7B:DE:6D:80:27:E8:D4:A6:5D:9F:9D:3E
Certificate issuer:       /CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
Certificate serial:       010D0C9F4328584AA42B80322AFCA9977DC886E0
Authority key identifier: 0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     397554
IP address blocks:        23.134.144.0/24 maxlen: 24
                          2605:40c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:80:32:2a:fc:a9:97:7d:c8:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=47969660-644f-4233-9092-d41cc455772c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:a2:4a:ef:f0:78:9d:1c:9e:a6:da:27:2e:
                    d8:63:b7:33:6a:35:48:44:c0:2b:66:91:e2:32:75:
                    b9:62:df:1e:9f:3c:52:15:a4:a0:4b:84:17:5e:39:
                    0e:49:b9:ca:b7:fa:69:b9:8f:3e:79:e3:a7:ab:3c:
                    c5:53:c7:dd:7a:dc:a4:68:4c:87:84:83:8d:9b:2d:
                    5f:3d:aa:1c:26:9a:30:43:9d:74:3d:0c:69:4d:96:
                    49:2b:21:33:e4:9a:9b:b0:c5:fa:1b:96:b9:c9:d5:
                    af:31:39:dc:71:2c:23:60:6f:61:11:9e:ba:a9:75:
                    02:55:55:b1:30:63:c6:92:11:4b:7a:6f:73:63:94:
                    d2:dc:ca:e8:1b:ad:6c:16:63:49:92:e7:ca:9c:4a:
                    20:01:9b:ca:66:30:d5:56:97:98:5d:3d:cf:2e:1c:
                    c5:ec:b0:a3:74:1a:44:0e:01:b5:a3:f2:ee:86:1e:
                    68:c6:42:5b:14:57:45:17:6f:b7:ae:2e:eb:e2:d2:
                    bd:b7:f1:ff:7e:17:cf:c7:7c:8f:79:2c:20:32:68:
                    4d:02:a1:c9:8f:4e:fe:70:56:ce:33:9d:6a:c0:ce:
                    16:1f:0e:6c:98:22:8f:d3:df:a6:4d:c5:c6:ea:eb:
                    51:7e:4e:2d:19:a3:65:90:f5:d9:7a:8e:8a:df:3d:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:DF:9E:07:9C:4C:A7:7B:DE:6D:80:27:E8:D4:A6:5D:9F:9D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.144.0/24
                IPv6:
                  2605:40c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:f5:e4:5b:d3:ff:57:d8:10:65:c6:fc:d6:37:e1:36:68:
         65:5e:5a:f4:82:c7:7d:8c:85:4c:5a:06:6f:fa:2b:0b:76:d4:
         5a:f4:b6:90:80:7a:ae:42:bb:87:65:04:59:f3:50:e1:05:16:
         48:2e:c7:45:6f:d8:31:1a:7d:8f:02:96:82:a6:6c:7e:c3:64:
         0e:55:2f:ee:33:10:64:b9:d4:19:df:9c:cc:1f:2b:33:3a:0b:
         cc:cd:a6:e0:37:e2:58:bf:5c:af:b1:c9:4b:41:cc:ed:ac:22:
         ea:91:df:e4:4e:de:67:e3:a8:8f:fe:ad:e4:02:10:0e:98:ee:
         7f:c2:a9:ae:d5:25:79:1e:57:a3:b4:be:34:26:4e:05:7a:2d:
         b8:35:a6:65:78:c1:1c:b9:75:ba:74:e5:ab:6f:99:ef:24:8d:
         09:15:3d:b4:38:35:f8:48:ec:c4:e6:3c:23:8e:ce:dd:02:eb:
         7f:8a:64:c0:b6:6d:b7:50:8b:0b:0c:9e:06:9f:d3:ff:74:c3:
         4e:b0:bc:0c:ec:2e:64:36:07:a7:6f:19:33:b5:74:e2:8f:08:
         3d:a1:5f:e6:5d:99:f7:06:16:f5:c9:b9:f0:81:e9:74:1b:12:
         c5:d2:b5:45:77:b4:53:7a:93:13:82:2a:6d:41:06:f0:be:ce:
         22:80:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 18:17:33 2025 by rpki-client