Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa
File:                     70c1be47-61d4-30b1-8808-92c328e5b495.roa (raw, json)
Hash identifier:          LfyDnfD5cvxTwSM9x3evYIQGaFUGRKyRnmuv8shhLso=
Subject key identifier:   3B:E0:C3:BD:DA:FE:41:71:D6:EC:16:68:3D:DF:F6:AC:9A:ED:87:77
Certificate issuer:       /CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
Certificate serial:       010D0C9F4328584B13D6FEC9C72AC2FB23285140
Authority key identifier: C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     395409
IP address blocks:        23.143.32.0/24 maxlen: 24
                          198.51.233.0/24 maxlen: 24
                          2620:2:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:fe:c9:c7:2a:c2:fb:23:28:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=1637142f-1693-4d99-b5fe-38c1e274c485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:64:6c:ee:aa:7a:45:65:c1:78:c3:bb:cb:
                    bf:ce:0f:40:4b:63:20:e0:1e:07:62:1b:e7:57:59:
                    f8:2b:b7:f2:ab:8d:e6:bb:3f:7f:86:d1:fa:03:3f:
                    e6:74:90:ca:08:e3:47:d7:4b:73:44:62:dd:a7:42:
                    64:dd:0a:e0:dd:4c:5b:59:2f:e3:fc:81:d5:a3:9e:
                    d8:77:dd:61:7e:51:90:98:f7:d7:0c:46:e5:97:ac:
                    00:24:44:a6:5e:18:12:cf:c1:3d:ad:04:fe:b4:ba:
                    22:05:07:5b:09:71:af:d2:0e:db:fa:1b:03:6b:cb:
                    db:ee:bb:0c:e3:ec:9c:2b:8f:61:f6:c6:a6:79:df:
                    aa:9e:36:e6:24:55:f1:2e:3a:a2:1f:59:d6:12:82:
                    7e:ea:20:2f:5f:8c:c0:45:8f:6c:b3:7b:dc:3f:bb:
                    d4:b2:d7:4d:92:03:cf:e9:bb:ae:3a:a3:ad:6f:07:
                    7f:cc:2e:c3:fc:e3:10:d8:c3:9c:6b:13:83:f8:28:
                    aa:87:e2:12:23:03:24:07:a2:1f:91:31:bb:73:34:
                    9a:d9:a4:8e:87:27:31:8c:dc:70:89:d5:f3:21:b8:
                    e2:53:82:3a:4f:bf:ae:fa:af:a8:bd:c8:a7:04:65:
                    61:a9:9c:59:e6:cf:fe:7a:72:bf:2a:1c:6a:7f:a9:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:C3:BD:DA:FE:41:71:D6:EC:16:68:3D:DF:F6:AC:9A:ED:87:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl

            X509v3 Authority Key Identifier:
                keyid:C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.32.0/24
                  198.51.233.0/24
                IPv6:
                  2620:2:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:e7:55:bb:dd:d4:cf:dc:b9:11:43:20:7c:77:ec:e1:62:
         17:88:2a:33:46:14:d7:f6:ea:3b:af:e6:23:20:05:ae:2a:60:
         cb:dd:1e:55:b4:8c:3e:33:5c:0e:b8:4c:a0:dd:c0:d7:44:fb:
         c6:6c:bf:55:11:70:7a:de:5e:8c:7d:44:3a:a0:51:3e:e6:e5:
         fb:36:cb:ff:3d:2a:a8:a9:b9:06:bc:87:e0:2c:c5:8a:78:0e:
         b1:36:83:35:68:b1:3c:04:29:f1:0d:3e:29:68:a8:e0:66:0a:
         24:ba:0c:46:12:4c:4d:62:ef:3a:7d:9e:b8:67:71:9c:f0:bf:
         3a:0d:4c:bb:38:e3:d2:bb:cf:7e:b6:08:4e:56:2d:35:06:68:
         15:f7:9b:cc:ee:63:ce:47:08:02:01:a4:5e:23:ac:73:2e:e9:
         59:1f:90:47:5a:91:9b:01:d8:4c:aa:d0:ea:ce:3c:a9:e2:8b:
         06:cc:61:f0:be:0b:78:c0:20:f6:76:d7:38:31:c3:ed:61:ed:
         42:29:fa:10:12:3a:10:5e:5a:10:2d:54:43:10:bc:07:5c:a9:
         3c:24:e8:05:d7:45:94:49:a9:ea:2e:41:c8:29:fe:79:6c:4c:
         17:f9:03:d1:30:cf:85:f3:54:e3:22:a7:af:11:26:d2:2e:a1:
         da:2a:5a:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:05:48 2025 by rpki-client