Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa
File:                     0a42a172-0f73-3008-af81-6fbc4d92431b.roa (raw, json)
Hash identifier:          8E//xzP79TUESP9oUOSKoznYlzzYjVLDL7dwnzXwOl0=
Subject key identifier:   77:31:67:FE:C7:A0:79:91:3E:3F:77:19:CD:CA:2B:8B:D9:5C:4B:BF
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584B970CF5657F5D612B17F158E0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     133752
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f5:65:7f:5d:61:2b:17:f1:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=42da128b-ce83-41e0-884c-69a5def8160b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:db:b3:23:18:fe:0f:c5:77:69:38:51:4c:
                    ce:b4:95:9b:21:66:65:9f:27:9c:c3:bf:fb:31:ef:
                    3e:4f:15:17:73:b4:34:44:5c:b6:ea:24:65:fa:b5:
                    a2:95:ee:4f:7d:91:26:7b:1b:a2:89:d2:58:06:9d:
                    61:1a:e6:22:5b:ba:5f:ff:56:7f:76:ff:00:34:ba:
                    fe:6b:77:e4:8c:63:27:e7:29:fe:0d:92:0b:87:35:
                    95:69:48:05:6b:09:73:8a:3d:59:0f:16:b7:47:5d:
                    69:6b:04:83:d4:6e:a8:87:26:88:9c:2f:83:e4:1e:
                    ec:cc:6b:ba:ec:41:df:6f:f7:55:f5:7d:6a:28:0a:
                    3a:0f:22:d3:0d:6b:61:50:d9:22:36:8f:a4:cd:5c:
                    8a:e2:20:38:4c:08:af:08:11:8f:d6:a9:4f:47:09:
                    f8:22:d8:b8:ed:d4:5f:78:f9:85:93:9c:6d:55:01:
                    31:7a:cf:89:35:eb:4c:6a:17:73:ef:5a:67:16:95:
                    a6:5f:1d:7e:36:0d:e3:fd:34:9b:3c:3d:ba:1c:37:
                    f3:e6:da:88:1c:43:f4:a2:ba:70:f4:69:55:3e:c0:
                    14:07:19:a6:1c:2e:76:d7:7d:37:5d:0d:17:75:79:
                    ab:61:0f:4e:d3:0b:18:e5:62:5a:dd:34:1e:2e:10:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:67:FE:C7:A0:79:91:3E:3F:77:19:CD:CA:2B:8B:D9:5C:4B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:90:d9:02:b9:21:23:56:fa:fe:56:ee:5e:5e:d4:85:46:
         92:50:57:81:4c:bf:2e:08:4d:12:c3:30:a3:d6:2f:83:25:7a:
         66:d6:59:43:b7:c7:e4:f9:a6:98:7f:76:db:e3:0c:46:43:ae:
         fc:58:fb:dc:d5:f5:f5:7e:4d:8e:1d:73:e3:1f:6a:8b:85:e8:
         38:72:c0:2e:eb:85:fd:b7:a3:4a:8a:0d:08:4c:03:10:dc:22:
         ae:c4:54:66:0d:fd:62:a2:0e:44:be:22:46:7f:26:a4:6f:6d:
         bf:53:8c:35:dc:7e:ae:1c:0d:37:8d:cf:ad:76:b0:62:4b:33:
         8c:b1:c1:ef:e7:a4:0e:7b:ea:88:02:35:61:af:87:b1:8f:1b:
         18:cc:96:8c:a3:04:e8:c8:69:13:e6:eb:fb:a7:be:33:88:7a:
         36:5b:37:ee:ee:ad:57:b6:70:e1:40:59:26:0f:87:a1:01:ea:
         38:f7:a0:7a:f9:6c:4c:8a:d4:13:2d:77:cb:31:75:52:fa:58:
         4a:3c:d5:8c:1f:d3:c5:b4:2e:f6:18:f0:8f:87:e5:f2:10:91:
         68:c3:28:59:2f:80:ca:60:e9:7a:ef:81:22:9e:5a:fa:3a:43:
         19:eb:15:88:44:54:5e:64:82:68:29:9e:1f:e7:4e:50:a2:87:
         48:28:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:23:17 2025 by rpki-client