Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa
File:                     a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa (raw, json)
Hash identifier:          VBujeu+/9w/lyAm8mrAWw1WW/cq4iVAc7yCcOMchMls=
Subject key identifier:   82:00:40:6F:44:B0:14:F8:9E:EC:43:6C:8A:F6:40:32:CA:07:E5:D8
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584BB45D352E24632C4B8E99E280
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     33182
IP address blocks:        67.23.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:35:2e:24:63:2c:4b:8e:99:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=d304a54b-2bd5-44e8-a2b1-60e353f8b112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3f:95:f1:39:4a:77:65:ef:eb:13:f3:52:7a:
                    af:6a:00:bb:7d:b3:af:a4:e0:ef:8d:63:23:c2:3e:
                    9e:80:cf:6a:3d:00:71:fd:e5:ec:a9:dc:5c:db:84:
                    ef:09:d5:87:ab:f4:a3:3e:77:b8:40:dd:05:35:35:
                    20:6c:a2:bc:dc:b5:40:14:20:06:97:a5:0e:ac:98:
                    36:47:9a:85:93:47:4a:d5:75:c4:bb:f4:64:73:7d:
                    55:49:81:1a:c6:b1:0b:4d:7e:5e:4a:83:e9:23:10:
                    2e:1e:87:5e:4b:f1:41:2b:0e:a6:36:87:b3:9c:d0:
                    6e:f7:2b:65:58:a0:cc:8c:1d:b7:69:e4:58:a0:a0:
                    0d:2f:9c:2d:ac:c5:42:b4:51:9e:7a:57:8f:5f:78:
                    75:94:e0:fe:ec:bc:d1:79:de:85:bb:fb:f1:03:8f:
                    aa:65:e8:73:87:3e:01:3c:22:32:b2:f3:98:86:05:
                    88:3e:b6:c7:0f:84:bf:63:b2:cc:9f:dd:13:fd:8b:
                    06:aa:6c:b5:4b:85:c3:10:0f:0d:d1:4e:9d:58:81:
                    98:f6:eb:a6:d7:6e:f6:96:e6:3b:97:9e:98:c0:3b:
                    a1:67:09:a6:b9:32:5b:29:5f:cb:d6:45:19:52:b8:
                    c6:19:f8:6b:df:15:78:1d:59:8d:ca:fc:9b:b6:61:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:00:40:6F:44:B0:14:F8:9E:EC:43:6C:8A:F6:40:32:CA:07:E5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.23.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:4a:37:19:3b:ad:6e:01:10:68:8b:95:9a:65:fe:2f:dd:
         0a:61:ba:6e:c3:66:a0:e2:4e:0e:76:c1:0c:bd:34:4d:84:45:
         98:eb:c8:61:19:dc:65:c9:ff:7b:a6:4f:29:dc:a7:6a:16:e1:
         20:c2:97:28:3e:c7:9b:6f:20:d5:84:58:45:83:b6:bc:f4:62:
         f2:0d:bc:12:6b:70:b4:b9:2e:a0:72:fb:45:f8:57:f2:f1:32:
         67:05:35:5e:e6:77:b8:33:d0:51:8c:a9:21:81:e8:71:ea:38:
         20:dc:f9:2e:f2:58:a1:fc:9a:ec:5c:bf:2f:76:0a:8d:da:61:
         59:19:c7:2c:74:07:c1:da:bb:53:5d:aa:a7:55:4b:f3:89:52:
         e3:e1:21:1f:ee:e4:1c:e8:71:ca:11:77:f1:5f:67:58:b6:fa:
         11:f1:76:5e:98:df:61:2f:19:64:30:d6:3b:43:3d:5d:08:9c:
         7a:95:21:44:1a:a6:1e:74:ef:09:98:ff:16:1b:3f:8f:55:3a:
         7c:28:bb:38:55:21:59:9b:28:93:c5:8f:72:8b:2d:56:5b:3d:
         b4:de:0a:98:a1:d0:09:2c:94:85:f6:2c:51:fa:9f:96:9d:4a:
         0f:fd:66:3e:fd:80:ef:e4:6e:bc:87:54:9f:47:fe:85:d6:ad:
         e3:3a:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:52 2025 by rpki-client