Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa
File:                     b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa (raw, json)
Hash identifier:          w8XVpuP4gFCA6OuPpMe0gc5KzL6E/UIbrJkGmtsQimA=
Subject key identifier:   42:12:CD:4E:77:C6:4A:84:E3:2E:C4:89:6D:6B:F1:C0:01:C6:55:D7
Certificate issuer:       /CN=127a8f9d-78b3-435d-91ec-6d948f908a3f
Certificate serial:       010D0C9F4328584BB744056816FBFA2B35FE5AE0
Authority key identifier: BE:19:D4:32:BF:CF:63:4C:0C:9B:D1:C2:27:20:39:41:27:E5:6E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa
Signing time:             Sat 01 Nov 2025 13:57:41 +0000
ROA not before:           Sat 01 Nov 2025 13:57:41 +0000
ROA not after:            Fri 30 Jan 2026 14:57:41 +0000
asID:                     400004
IP address blocks:        23.140.188.0/24 maxlen: 24
                          149.112.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/127a8f9d-78b3-435d-91ec-6d948f908a3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/127a8f9d-78b3-435d-91ec-6d948f908a3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:44:05:68:16:fb:fa:2b:35:fe:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127a8f9d-78b3-435d-91ec-6d948f908a3f
        Validity
            Not Before: Nov  1 13:57:41 2025 GMT
            Not After : Jan 30 14:57:41 2026 GMT
        Subject: CN=874b5490-259f-42cb-8575-711148576831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:49:f5:9d:f1:a0:16:bd:b0:a9:f8:cc:c8:
                    26:09:a9:ba:b5:7e:fd:7b:20:7b:c7:5c:6f:b7:7d:
                    6c:13:34:fd:21:a2:74:e6:90:14:b7:9b:87:85:82:
                    ec:de:88:31:bf:46:8d:19:75:8c:1b:9c:c3:96:ee:
                    8d:a3:bc:d5:5e:1d:5d:59:d9:ec:68:54:fb:00:d4:
                    f0:0a:8f:b8:4e:ac:32:47:1c:14:81:84:19:77:c4:
                    ac:f2:9e:2f:ce:40:49:78:35:20:0f:5c:8c:e8:37:
                    b0:d2:a4:ae:73:ff:ef:b7:cf:7e:e7:db:6c:3f:74:
                    0b:59:c9:25:3c:89:63:8a:94:92:cf:60:a1:6a:b0:
                    e2:2c:ca:58:3e:ac:d5:cc:7a:9a:2e:ed:9d:a8:03:
                    72:8a:f6:63:83:68:8d:21:57:ec:22:44:05:96:61:
                    41:1c:30:92:15:38:59:d6:4e:07:71:92:8d:28:27:
                    ad:f6:de:0d:6b:fb:ea:89:b5:d7:05:c4:f3:ed:e7:
                    90:97:8c:2a:77:20:42:74:08:25:70:bc:15:78:10:
                    54:68:bb:02:57:10:08:39:b6:7f:85:44:86:f8:93:
                    e9:5f:b1:54:b9:a2:f0:17:fb:e2:1d:e8:df:a2:1f:
                    9f:0a:e8:c6:e6:c7:84:c4:41:a8:b0:df:4a:0a:6e:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:CD:4E:77:C6:4A:84:E3:2E:C4:89:6D:6B:F1:C0:01:C6:55:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/127a8f9d-78b3-435d-91ec-6d948f908a3f.crl

            X509v3 Authority Key Identifier:
                keyid:BE:19:D4:32:BF:CF:63:4C:0C:9B:D1:C2:27:20:39:41:27:E5:6E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.188.0/24
                  149.112.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:2e:d6:b2:db:84:0f:74:91:88:19:f1:fe:b5:93:fe:17:
         7a:1b:2a:2e:b4:d8:cd:5b:24:9b:08:08:22:6b:78:35:26:76:
         08:bc:48:65:ae:bf:e0:cd:aa:fb:9c:0e:31:fe:47:2c:cc:4b:
         d5:11:86:9f:d9:ae:9b:77:fd:df:86:8b:87:2a:c3:8f:2b:ed:
         b2:95:25:0d:f3:5a:1c:51:a1:7a:5e:73:84:8c:fa:df:29:57:
         63:f5:b7:2c:b0:9d:21:74:a9:25:48:75:f4:d2:91:8c:0f:80:
         34:1b:9b:d8:b0:07:3d:d4:c8:08:f0:9d:c7:e4:83:39:96:bc:
         06:f9:57:c4:58:d9:44:ca:ba:83:ec:a8:61:d7:f8:db:dd:7b:
         db:55:cc:38:88:9c:53:e7:28:2d:93:62:59:9a:9e:ea:ea:7d:
         af:ce:95:54:df:3b:7c:86:cc:2f:34:e3:9e:6c:c8:47:1a:c3:
         4b:85:7d:c6:8a:49:93:66:08:ec:16:8b:d2:0e:9e:21:2a:15:
         14:71:3b:dd:fe:0f:15:01:08:46:b4:cd:d1:19:0c:78:7b:8b:
         73:7b:e2:a2:7c:d2:d8:3b:d9:b7:71:d9:fb:a9:3a:e1:cb:2c:
         89:bd:bc:6b:3e:46:dd:9c:71:09:65:db:12:70:48:b9:e4:64:
         fb:a7:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:46:49 2025 by rpki-client