Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/b98bdb7b-0f34-3742-8c4f-8540ab9bf86d.roa
File:                     b98bdb7b-0f34-3742-8c4f-8540ab9bf86d.roa (raw, json)
Hash identifier:          JsJCFi656IpWtU9giF4G/bVt8MlbT15hPS1JXS+lzs4=
Subject key identifier:   7D:D2:58:42:FD:65:19:11:84:AA:B4:8A:02:FF:89:A2:3A:7B:58:52
Certificate issuer:       /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4
Certificate serial:       010D0C9F4328584BA93258D9BF06ECF7C1FBF680
Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/b98bdb7b-0f34-3742-8c4f-8540ab9bf86d.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     62727
IP address blocks:        23.226.80.0/24 maxlen: 24
                          23.226.81.0/24 maxlen: 24
                          23.226.82.0/24 maxlen: 24
                          23.226.83.0/24 maxlen: 24
                          23.226.84.0/24 maxlen: 24
                          23.226.85.0/24 maxlen: 24
                          23.226.86.0/24 maxlen: 24
                          23.226.87.0/24 maxlen: 24
                          23.226.88.0/24 maxlen: 24
                          23.226.89.0/24 maxlen: 24
                          23.226.90.0/24 maxlen: 24
                          23.226.91.0/24 maxlen: 24
                          23.226.92.0/24 maxlen: 24
                          23.226.93.0/24 maxlen: 24
                          23.226.94.0/24 maxlen: 24
                          23.226.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:58:d9:bf:06:ec:f7:c1:fb:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=cfadb65f-9056-4002-a6e9-eb0f1ad4132f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:d9:72:86:1a:1c:11:f8:98:af:e7:78:47:
                    5f:11:b3:92:f5:20:be:c6:81:22:5e:52:39:f8:81:
                    f7:6c:c3:f7:fe:41:b2:16:d9:4a:f2:09:66:20:4a:
                    bd:bd:99:1c:68:f0:bd:f6:ad:5a:c8:50:9f:15:ea:
                    ef:19:80:3e:6c:34:38:cc:d9:48:15:82:f9:b6:2e:
                    fc:32:bb:5f:de:90:08:0a:75:c9:e3:1b:c7:c7:fb:
                    0a:95:59:85:5e:42:ae:b8:cd:b1:0e:17:4c:0c:97:
                    ea:de:61:e9:2e:80:31:8a:6a:cd:77:73:c7:00:e6:
                    6a:78:17:16:30:b6:eb:59:ae:00:72:01:4a:90:12:
                    f7:c7:49:35:ac:cb:35:4d:14:2f:87:51:4f:0e:74:
                    fc:99:f1:80:9a:ec:e6:2c:f8:c3:6d:12:3a:e0:19:
                    65:f0:a9:ac:57:ec:80:cc:77:63:82:de:54:a5:61:
                    3d:79:24:87:e0:77:73:d9:51:b6:f6:42:64:82:50:
                    97:8f:29:34:67:25:f8:2c:dc:2d:cb:78:8f:dc:d9:
                    85:6c:05:e2:ac:02:ba:67:b1:01:50:4b:cb:2b:01:
                    a2:b6:0f:68:2f:4c:50:a7:8e:46:85:79:29:91:78:
                    52:74:8b:75:60:bc:34:ef:ee:e6:67:f6:2e:49:4e:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:58:42:FD:65:19:11:84:AA:B4:8A:02:FF:89:A2:3A:7B:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/b98bdb7b-0f34-3742-8c4f-8540ab9bf86d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:fd:b9:41:2a:00:8e:e3:04:e0:22:03:61:4a:86:d1:c2:
         80:4c:17:d5:dd:ca:47:34:68:d5:0c:48:d2:ed:e1:6a:fd:80:
         11:91:65:d0:4b:fd:19:f3:60:f0:9d:ef:54:1d:dc:72:a1:be:
         a0:a6:84:9a:12:b0:71:e0:cd:99:75:6b:e4:c2:fa:fd:dc:ce:
         40:8b:11:29:e2:ff:58:44:09:9e:ae:76:db:ca:a8:ad:df:ef:
         7c:d1:91:51:83:2f:68:70:a7:4b:af:fd:23:15:48:2b:ca:45:
         5a:c4:67:d9:a8:10:27:79:1a:6d:b0:53:e0:e1:27:a6:25:75:
         9d:67:94:e8:f8:08:b4:1b:5c:ef:e4:ee:27:51:a8:ff:a5:e4:
         34:bd:06:5d:b8:0b:4d:f4:4d:6d:10:6c:c5:66:dd:f6:0f:21:
         7e:16:48:e2:27:67:97:a5:cf:b4:74:61:30:a6:78:71:1e:55:
         1f:0b:c2:ec:a9:93:08:f2:65:7a:4d:1c:01:87:af:aa:1e:7c:
         56:b8:04:4e:f9:00:df:2b:ae:05:2d:35:5f:bf:ef:e6:1f:99:
         c5:d2:d2:cb:d4:82:65:d8:48:75:87:49:75:75:b7:b1:46:e5:
         df:6b:ee:be:06:71:13:e1:0d:98:b5:18:91:ea:ea:0c:33:63:
         a4:2f:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:40:47 2025 by rpki-client