Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
File:                     7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa (raw, json)
Hash identifier:          Lv6XTJ/q8T2vANG8WYQcvMSmBUyREPkIdiFu+8huDxM=
Subject key identifier:   68:C3:FF:99:A9:80:95:8E:14:E2:B0:E9:30:93:0D:5F:42:DF:77:7C
Certificate issuer:       /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Certificate serial:       010D0C9F4328584BAEC7B056436AEB8A1192C2FC
Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     53667
IP address blocks:        23.186.113.0/24 maxlen: 24
                          2602:fc41::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b0:56:43:6a:eb:8a:11:92:c2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=71ee5194-f2ef-4977-9a7e-aebd1b2def6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:c1:19:9c:8c:9d:67:58:c6:7c:85:32:d4:
                    f2:eb:2c:f3:8c:9e:f6:34:72:74:8e:14:14:de:f2:
                    f5:f5:21:13:61:e4:e6:85:cf:2f:58:b1:75:a8:53:
                    49:4b:24:16:6d:e6:bb:6c:8c:10:03:dd:d4:0e:a7:
                    88:f4:d7:32:4a:41:be:12:54:34:03:68:db:60:f9:
                    b8:26:4e:4b:47:10:04:57:64:80:6f:06:e8:f2:f0:
                    8c:df:12:43:52:c8:7c:d6:e2:3a:24:67:ca:91:e6:
                    56:5c:41:9b:54:b4:ea:05:08:e0:38:a3:43:74:0a:
                    5b:d6:14:42:97:a6:96:50:56:c0:e0:39:c2:72:6b:
                    82:d2:76:ec:9a:aa:92:92:34:dc:b8:57:d3:0b:67:
                    eb:14:36:f6:85:79:12:35:3d:b1:83:9c:47:17:1d:
                    b5:94:ed:ae:b0:9b:cb:57:16:13:53:49:1d:fa:36:
                    61:a3:8b:71:eb:b4:00:3f:b8:25:b5:20:b5:b8:0d:
                    0f:b1:ef:d6:e1:9b:2d:10:25:ab:a1:af:d7:d1:e5:
                    f2:9a:87:eb:d5:17:2b:29:d4:56:e1:6b:bc:35:44:
                    a2:a1:50:c3:69:a0:ed:46:3c:6a:b2:fa:a9:35:9d:
                    c9:0d:8f:23:6b:56:25:8d:e2:5b:ca:04:78:52:da:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:FF:99:A9:80:95:8E:14:E2:B0:E9:30:93:0D:5F:42:DF:77:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl

            X509v3 Authority Key Identifier:
                keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.113.0/24
                IPv6:
                  2602:fc41::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:24:9a:54:e0:f4:14:62:1f:46:e2:3a:a3:3c:7d:3d:51:
         ea:3c:68:7d:a7:0d:72:0d:45:46:e6:8b:f4:54:11:1f:c6:81:
         c0:2f:dc:26:61:5d:c7:34:9d:d8:64:76:65:cf:9a:43:f0:59:
         46:cd:5a:04:12:dc:37:d1:b4:ce:3c:e2:17:77:d6:24:b6:32:
         fe:ea:e4:63:4f:db:f9:cc:f9:c2:98:b9:d2:e1:f7:25:00:46:
         96:3b:6c:29:cf:60:d6:c1:4b:de:41:7b:c5:0c:01:5c:c8:f9:
         9b:e4:c8:b0:c9:69:9e:1d:c6:78:ff:97:76:c7:b9:8b:4a:5b:
         11:f2:7e:86:f3:33:8f:13:c6:99:98:c4:52:e1:db:29:4e:24:
         c7:c6:fe:2a:63:94:1c:65:a6:dc:bf:cc:a8:7e:6f:4a:3f:01:
         29:b2:3f:f7:fd:40:1d:b9:f0:ab:7b:77:54:8c:2b:95:85:e0:
         ae:48:9b:01:60:4c:09:26:59:87:2d:ae:89:24:49:fb:be:46:
         2b:a5:17:38:fd:92:4b:49:75:ae:59:2a:ba:0b:1f:ec:c1:53:
         63:7f:29:b5:1b:e6:09:ff:8a:a1:b3:43:1c:8f:2f:2c:a4:ca:
         b7:c3:56:d8:1e:41:10:96:61:59:1d:f4:78:df:10:ef:20:ae:
         44:cd:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:41 2025 by rpki-client