Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
File:                     7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa (raw, json)
Hash identifier:          C+egB1dxlJrLyTXh+cPXtQ16U932Nxo1eSkg6PnqxUc=
Subject key identifier:   82:FC:48:97:0A:77:1D:41:5B:E0:E0:B0:33:D9:A3:38:E2:65:C0:8B
Certificate issuer:       /CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Certificate serial:       010D0C9F4328584BB88D0E496EE705C03664F180
Authority key identifier: 42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     35990
IP address blocks:        23.177.48.0/24 maxlen: 24
                          2602:fca6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:0e:49:6e:e7:05:c0:36:64:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=88f0d644-3402-479b-a686-3160a67df5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:62:52:1e:01:9f:4d:9f:e5:00:26:7a:b6:
                    90:2b:e3:92:4d:90:bc:d3:f5:77:71:d0:b5:7e:59:
                    f9:b8:a2:16:7f:04:a1:d6:89:53:a1:c4:c1:f1:d5:
                    1a:4c:3f:45:f7:0d:6d:4d:a3:01:49:b1:bb:90:d7:
                    3a:69:7f:32:b3:c8:1b:37:a7:77:a2:17:5b:30:14:
                    b2:e9:f0:e3:a7:cd:d8:d5:00:75:90:28:b2:36:5e:
                    33:b2:78:ef:27:8e:a8:4f:5e:e9:1e:e3:40:89:56:
                    b8:b9:17:0f:eb:1c:7b:83:36:24:1c:23:35:07:68:
                    c0:b7:af:4c:4f:58:a4:4e:a7:d6:61:77:b7:4a:dd:
                    12:1b:d4:f2:16:6f:1e:c9:11:4c:47:c3:99:93:c3:
                    66:b2:74:eb:09:6c:2d:d6:48:5b:0d:96:ba:43:3a:
                    a8:53:ee:d6:b3:06:10:f1:98:24:00:52:02:52:db:
                    a7:00:d0:a4:35:1f:cf:87:ed:95:37:a0:52:42:0e:
                    e2:06:17:9d:68:3f:44:2e:bf:9d:fc:9b:08:8e:68:
                    c1:26:ea:07:64:d1:16:b7:7f:8c:c6:6f:e8:2b:97:
                    8a:76:b9:92:0d:d6:84:e5:dc:5a:4d:30:3a:df:37:
                    2a:e4:71:2f:e3:ad:6f:5c:f0:fb:ed:8b:60:b0:a4:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:48:97:0A:77:1D:41:5B:E0:E0:B0:33:D9:A3:38:E2:65:C0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl

            X509v3 Authority Key Identifier:
                keyid:42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.48.0/24
                IPv6:
                  2602:fca6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:37:7d:5e:68:0b:d9:19:82:ba:0d:e8:69:78:ed:02:9f:
         9b:e3:7b:cf:5b:5e:4b:c0:91:8a:02:3a:d3:09:76:74:df:ab:
         28:7d:73:46:49:27:3d:0f:a0:81:1f:9a:40:d7:43:ba:75:a1:
         11:83:4a:a3:6c:5b:d8:41:71:ce:b9:34:b3:20:73:d5:8c:68:
         86:bf:07:ea:f5:f3:a1:43:1a:ec:55:77:f8:3f:a8:bd:e0:ed:
         6c:13:01:67:b8:fd:91:3d:be:7a:f3:d4:f5:6a:1d:1c:4d:36:
         95:17:7c:50:f7:16:c9:47:7b:0a:31:3c:6f:4d:73:ae:af:3b:
         7f:16:61:ff:7c:13:80:4d:11:b5:3e:15:b1:4d:e6:81:c8:8d:
         30:da:fb:39:ce:c0:43:3f:46:a9:81:dd:c9:a7:37:91:b2:27:
         c8:a3:39:e1:40:91:85:56:cd:d5:bc:78:7b:22:3a:ed:e3:a3:
         59:71:93:36:cb:20:f7:5b:c6:ea:a6:5d:f5:8c:8d:ff:48:7e:
         b2:aa:7e:ba:ec:01:39:d9:16:de:6e:31:c4:c7:41:b4:8e:c5:
         7b:5f:39:28:7e:9b:37:77:67:8c:8d:11:72:9b:4f:a9:13:5e:
         58:63:30:77:fb:ae:26:f2:e4:1f:ab:65:7f:05:12:23:84:f3:
         1b:26:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:24:28 2025 by rpki-client