Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa
File:                     426b412f-a43c-3d09-aae6-0833d218aefc.roa (raw, json)
Hash identifier:          qx6ngHzVGmMTeZvCorpicIRIp9WZXCM72OgbiNv/Ou8=
Subject key identifier:   65:89:DD:B7:C5:79:34:82:F4:79:8D:39:2B:49:5C:09:1A:85:92:39
Certificate issuer:       /CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce
Certificate serial:       010D0C9F4328584A7E7B589834E5DACD61475080
Authority key identifier: 14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     46515
IP address blocks:        23.155.152.0/24 maxlen: 24
                          2620:ad:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:58:98:34:e5:da:cd:61:47:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8a31737a-8a70-4b8c-aab3-599584af04fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:b7:3c:79:1c:cf:fd:c0:d4:d1:72:46:25:
                    84:05:13:7a:b6:d0:34:ca:7c:e8:f5:fe:71:8a:27:
                    b4:3d:4d:09:11:25:02:d4:e2:c0:0e:86:01:0b:f4:
                    52:b0:09:f1:39:a6:93:e9:58:c4:64:18:c3:8b:13:
                    fe:50:74:f8:96:9a:fd:72:00:e1:66:94:3e:1d:d2:
                    12:d9:85:d5:46:85:7c:9c:d8:66:34:88:2a:9a:81:
                    d5:26:b4:fe:0a:da:a7:b8:b7:9d:3d:c3:c2:df:d8:
                    ff:63:53:c8:5d:b4:b7:01:91:b9:f2:38:ae:4f:58:
                    5d:52:ff:7b:f7:82:b8:da:8b:3b:2b:32:4a:88:95:
                    57:34:d7:08:c6:30:da:0f:b5:82:41:1a:de:fa:00:
                    a8:bb:e9:0a:e1:1f:55:fd:24:3d:27:f0:a9:5a:dd:
                    e1:75:a5:65:80:cf:4c:90:3b:f8:57:b6:22:a2:ff:
                    59:58:53:c4:5d:98:01:26:f1:3f:9d:e6:c0:3b:ec:
                    05:01:9f:85:cf:37:6e:95:f3:7e:9d:bf:d2:2e:82:
                    fd:03:d0:e7:77:7d:3d:4a:6d:44:9f:86:28:23:bb:
                    a3:5a:b5:52:1c:1c:44:5c:58:91:28:10:05:ac:09:
                    da:88:38:bc:ae:b5:78:47:17:73:74:81:b3:8f:c9:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:89:DD:B7:C5:79:34:82:F4:79:8D:39:2B:49:5C:09:1A:85:92:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl

            X509v3 Authority Key Identifier:
                keyid:14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.152.0/24
                IPv6:
                  2620:ad:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:69:22:93:d2:a9:5d:85:41:f9:f7:27:85:48:a4:87:41:
         57:69:29:f8:96:6c:72:a4:a7:88:1f:84:55:bf:c0:e6:5b:e4:
         66:a3:2b:4b:3c:f7:dd:b2:07:7b:1e:b5:c4:d2:4e:dd:cd:7f:
         74:0a:a1:a5:bf:db:c7:9f:69:6a:a3:d6:05:4a:c2:b1:95:69:
         dd:5d:04:77:57:88:7d:4f:ca:c8:86:7f:19:a7:0e:a8:63:10:
         ac:88:3a:29:dc:6e:82:68:68:ca:1d:bb:1d:58:6d:76:65:1e:
         3d:63:45:f6:8d:f9:a2:a6:54:f3:b2:a9:d6:56:f6:69:36:08:
         23:32:67:30:34:53:57:02:80:48:1b:b2:22:a1:9d:09:f2:98:
         14:cc:a6:9b:4c:f3:6a:ba:87:1e:c9:b7:03:dc:42:a1:70:8c:
         b0:0f:93:b4:c9:a4:6b:e1:e3:1d:7b:df:79:60:12:22:de:f9:
         a5:6c:8f:86:7a:0f:ba:6b:21:f1:f0:26:8d:19:fe:cf:3a:94:
         d2:5f:f5:7f:e1:d5:ae:be:0c:9d:08:7d:54:2f:47:3e:a1:ac:
         28:4d:02:36:6c:98:55:6b:1b:b6:81:3c:fc:c9:fd:f1:55:d3:
         45:30:18:8d:85:99:e1:fc:83:ed:8b:ce:a4:76:97:ca:b7:56:
         fc:f7:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:39 2025 by rpki-client