Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24ff722b-c003-304d-b442-42fbe741037b.roa
File:                     24ff722b-c003-304d-b442-42fbe741037b.roa (raw, json)
Hash identifier:          vX3u1ypJEa+gO7/vzTA4njUPqOt3Rpfav48lAc52ynk=
Subject key identifier:   81:21:20:9B:EA:B7:BB:BA:A5:B5:30:2E:97:B1:18:E2:8D:B9:C1:B9
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584BA93265AB152F93ABCFF4A200
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24ff722b-c003-304d-b442-42fbe741037b.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     394432
IP address blocks:        104.233.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:65:ab:15:2f:93:ab:cf:f4:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=133a020d-b45f-4cdc-b625-6ea4c1f0e079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:1e:9d:18:00:4b:08:19:44:f5:b5:08:3d:
                    4a:d6:71:3c:7a:38:85:bd:a3:8d:91:61:b2:83:02:
                    f6:1a:dd:0e:eb:c5:54:16:9c:2d:83:23:9a:c7:db:
                    bd:4d:ad:0c:4c:2a:55:ac:a1:ba:1b:65:3f:5a:f0:
                    cb:7c:f3:08:74:f9:72:62:cb:3a:91:5f:a4:de:fd:
                    37:1d:74:20:c7:c9:ca:fc:4a:72:07:83:db:93:a6:
                    60:39:49:2a:02:2b:9a:78:ef:d7:b9:2c:b0:8e:1b:
                    f2:f5:58:b5:13:c4:0f:8f:5d:89:a7:c2:e0:8f:40:
                    1b:48:6c:ae:30:18:76:e3:52:a5:95:86:fc:d3:fb:
                    4e:18:27:85:c0:dd:7d:0b:72:23:85:c9:98:28:19:
                    f2:dc:12:53:72:99:9a:b9:85:ed:a9:95:67:f1:0d:
                    fc:16:53:da:aa:66:5c:2a:b3:ab:c8:23:99:44:0d:
                    0d:55:ec:25:2b:3f:f7:14:e0:93:7f:0c:9c:e3:64:
                    37:fd:9b:1e:c9:f1:6b:db:b6:0e:35:62:55:b3:af:
                    32:05:85:49:f9:7f:6c:19:18:6a:73:24:56:72:e5:
                    2e:4e:30:2d:d1:ee:b4:28:07:4c:1a:ea:3a:69:e0:
                    ea:7b:6f:e3:24:e6:bf:5c:88:3b:41:07:77:50:c5:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:21:20:9B:EA:B7:BB:BA:A5:B5:30:2E:97:B1:18:E2:8D:B9:C1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24ff722b-c003-304d-b442-42fbe741037b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:68:0a:49:1a:7a:48:49:bf:a3:2b:e5:40:7b:9a:d5:c7:9c:
         f6:57:dc:7c:bb:e5:8c:04:87:30:65:8b:59:c6:ab:cf:67:6b:
         1d:00:98:8b:4c:27:83:71:dd:68:ae:8c:05:5c:63:7c:7a:48:
         d0:53:04:62:27:13:c4:5a:f2:35:13:04:9e:23:71:95:5a:6a:
         20:be:12:4f:b3:8d:68:28:2b:3c:f2:03:da:58:f3:73:35:05:
         0c:f6:2c:70:d7:76:11:62:e9:98:0d:bb:08:e2:bc:ab:be:77:
         ba:89:fe:bb:32:74:68:ff:39:84:cc:bc:57:9b:de:5c:3b:a9:
         84:06:9e:c1:27:47:17:f6:ab:17:25:55:b4:63:f2:f2:db:5e:
         3f:e9:28:d3:d7:12:ed:c4:c2:d5:ff:0c:be:68:1f:04:76:7a:
         52:93:c3:e4:e9:1c:74:00:05:4c:59:91:ad:a0:ef:19:46:d9:
         39:80:93:b0:34:de:63:82:35:08:92:e9:72:15:13:e6:ad:24:
         b0:be:4c:14:e3:1d:10:61:db:08:2a:4e:10:d5:7c:c5:99:29:
         71:83:8e:29:c4:ba:fa:b1:dd:61:6e:df:c2:ab:a4:a9:49:df:
         20:ac:7c:30:56:03:d4:5d:b7:44:3f:41:b6:a9:6f:f7:a8:c3:
         8e:ea:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:14 2025 by rpki-client