Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          YJrVBeDqk1G9wBQhIFFLeloc6Vvb5GOav0nB4+ZYciY=
Subject key identifier:   37:4B:BF:C2:B5:AA:65:0E:74:36:8E:53:8C:77:7D:A3:52:DF:F6:6A
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F4328584BBA10458608EA8CB6221EB080
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:45:86:08:ea:8c:b6:22:1e:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=0eb0ace7-9c01-4227-bfd9-cb716b73f24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:f4:57:5d:10:93:9b:b5:c1:22:c2:fd:b4:
                    b2:9a:e5:f3:7f:f0:db:48:ef:38:5f:2f:fd:72:a4:
                    f7:6c:5e:f8:e6:47:66:97:c5:72:12:7a:1e:cc:b7:
                    d0:e7:f9:c5:38:a5:8a:ca:53:8c:64:9b:83:0f:23:
                    b5:96:b8:c1:08:7e:27:a8:28:69:e2:fa:a0:fc:61:
                    d0:78:1d:28:5f:5d:66:70:04:32:3e:98:af:a6:b2:
                    17:50:4c:11:94:b5:21:b2:94:ac:fb:c0:52:cc:68:
                    06:22:c9:f8:bb:f1:7b:ab:d5:cf:00:65:65:0c:17:
                    a1:86:19:ce:df:28:bd:8d:4e:24:58:e2:e2:74:e3:
                    9d:9b:27:47:25:b8:46:1a:8a:04:4c:97:9a:7a:95:
                    e2:a9:33:45:d9:e5:9f:22:dd:94:30:34:7c:6e:39:
                    7c:62:99:e1:7f:2b:3e:39:b4:6d:dc:da:3f:8f:d9:
                    a1:f4:9b:a5:d2:5c:51:7d:79:0b:5b:79:36:50:b3:
                    26:f0:c0:aa:fc:28:4e:bd:18:9b:97:f2:d1:a4:74:
                    4d:38:4f:ef:07:17:58:46:aa:d4:97:b3:03:ab:c7:
                    f5:47:2b:26:2d:8c:07:98:9a:0b:30:70:3b:d3:0c:
                    0a:a1:a8:ec:b3:22:4d:71:be:c4:ab:ab:9d:61:89:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:BF:C2:B5:AA:65:0E:74:36:8E:53:8C:77:7D:A3:52:DF:F6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:c1:96:d2:4b:20:40:8a:06:93:29:80:d4:86:ee:38:70:
         e0:c2:8f:f1:a8:4e:db:84:b5:c7:da:d0:67:43:a0:ca:6d:87:
         b4:6f:e9:29:2f:a7:bf:64:35:0f:b7:a5:d9:6e:61:ca:86:f0:
         53:d6:36:3e:50:fa:39:a8:e0:1e:f9:4f:f1:b6:fa:0d:8f:af:
         da:dd:ad:13:00:b1:d3:5a:86:aa:22:9e:48:ab:ea:f8:e6:8e:
         6e:8c:0e:a3:95:db:bc:75:07:36:ac:5d:b3:e7:16:e7:17:90:
         0a:cb:5f:4c:ef:48:70:4c:53:a7:22:0a:15:df:7e:6a:91:2c:
         a2:fa:dc:2e:99:d3:7d:06:ee:a0:8c:e1:ad:5d:88:5a:84:af:
         b0:dd:95:89:46:88:db:d0:46:9a:31:df:d1:f1:ea:25:11:c7:
         10:97:5c:5b:51:d1:a2:f5:a4:0e:77:64:08:d5:78:dc:62:ab:
         0f:12:13:86:52:c4:aa:aa:fe:5d:c3:03:1b:b2:03:a7:b2:da:
         8a:48:59:f9:bf:30:43:21:76:aa:67:46:46:cf:23:22:01:b5:
         50:7e:69:dd:23:02:f1:68:c1:1b:e0:4e:ca:fe:cb:ca:48:79:
         73:41:e1:64:74:c1:52:a2:a8:11:63:ba:2b:b6:43:eb:82:96:
         1a:74:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:04:47 2025 by rpki-client