Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
File:                     8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa (raw, json)
Hash identifier:          U3dPaFxgecBQgYyJwTXPCH3RlvB6VLR3iL12K/hylbs=
Subject key identifier:   DE:38:52:2F:46:E7:F5:6B:53:EC:3E:17:AE:3C:FB:90:48:0A:B9:94
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584B99D780FE2A144300E3961100
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54632
IP address blocks:        23.159.112.0/24 maxlen: 24
                          23.160.176.0/24 maxlen: 24
                          23.170.32.0/24 maxlen: 24
                          23.170.33.0/24 maxlen: 24
                          2602:fe6a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:80:fe:2a:14:43:00:e3:96:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=fc391ec7-5262-4cea-b0a7-3d69cb892aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:73:59:05:76:5d:7b:29:e9:5f:ab:43:95:
                    5f:64:98:5c:11:dd:78:84:81:bc:3a:d8:d9:cd:37:
                    92:a1:a2:b4:06:3b:e7:01:a2:af:14:e2:f3:84:0a:
                    69:b0:82:64:1e:e4:97:49:2a:6d:e2:37:ba:23:82:
                    b5:f5:15:80:74:c8:b4:1d:78:1d:dd:fd:f3:04:6d:
                    59:1b:72:0e:39:65:a2:7c:45:22:ad:80:7b:07:67:
                    9e:8c:70:77:01:51:8d:31:30:f7:17:5a:7a:a4:73:
                    60:32:da:2e:2c:fe:01:e5:1d:bf:dc:31:6f:77:10:
                    ad:ce:ee:6a:70:7b:65:6e:1f:c6:8d:37:91:eb:bc:
                    73:e4:a2:13:b9:7d:25:ab:66:01:87:1a:de:a9:23:
                    d5:24:ad:b6:b0:cd:45:69:6d:15:7f:1e:43:2a:b1:
                    1a:27:9c:6d:e6:75:6b:f6:be:b1:ba:ca:99:2d:8f:
                    85:a9:69:02:f4:b6:8e:67:fe:e5:71:cc:3d:ae:ed:
                    70:80:23:31:a3:2e:07:02:49:4d:37:fe:9a:11:86:
                    a5:05:b2:55:cc:2b:e2:e5:37:83:40:41:35:73:a5:
                    85:d8:a5:81:a3:82:f9:6e:15:7c:4e:d3:1f:c6:5e:
                    78:6f:fe:8a:af:12:95:8a:b3:3d:8a:be:2c:7a:70:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:38:52:2F:46:E7:F5:6B:53:EC:3E:17:AE:3C:FB:90:48:0A:B9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.112.0/24
                  23.160.176.0/24
                  23.170.32.0/23
                IPv6:
                  2602:fe6a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:38:ee:bd:21:d4:7f:06:e8:ad:2f:30:be:f8:5e:61:3f:
         ba:02:fd:2c:3d:11:a7:22:4c:a8:3c:84:d2:56:06:c8:c6:d1:
         a7:49:e6:27:b8:ed:a5:11:3c:01:c0:19:6f:9e:f9:8a:3a:95:
         8d:7d:10:f7:1c:4c:a2:5f:a6:4c:32:00:69:8a:9b:7e:3c:23:
         45:39:c5:a4:dc:32:a0:9d:21:fb:8c:e1:30:83:fb:ea:3d:7a:
         3a:64:bc:f2:6a:6f:be:e0:bb:d1:19:07:d0:39:c6:64:6a:8d:
         5b:00:df:c9:a4:34:34:2f:db:c9:67:88:b4:25:ad:99:f8:fa:
         84:b6:af:72:07:09:04:21:30:78:fc:49:ee:be:7b:d9:50:53:
         93:3e:54:64:75:b9:a4:12:0c:c8:1a:10:d4:ae:cb:3d:ea:90:
         76:0d:ca:2a:64:41:01:c9:82:ae:5a:89:85:7b:60:7b:2b:f9:
         bc:38:24:7d:22:b3:2e:25:1e:9e:6e:10:9b:3e:b6:c2:0b:8c:
         21:df:4c:ff:1f:4f:66:d0:43:3c:76:ac:55:1b:50:4b:81:4d:
         a9:38:c8:e0:8a:59:37:aa:87:df:51:e9:13:d4:6e:a7:ed:1a:
         82:07:61:bc:45:c2:ed:9f:4b:d9:2d:fb:a0:41:e0:7e:ab:83:
         bb:5a:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:56:20 2025 by rpki-client