Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/233d30ac-1dd3-3e1d-bb05-5b676aea3d7d.roa
File:                     233d30ac-1dd3-3e1d-bb05-5b676aea3d7d.roa (raw, json)
Hash identifier:          YxpsFyChSHQwdSA1nWeCjYRZL5YxPkInikDmHurgt7A=
Subject key identifier:   54:5C:25:99:E6:1B:03:EC:78:76:BC:42:C6:0A:B2:0F:69:05:5A:38
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584AF951379A1560CAFD90C149C0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/233d30ac-1dd3-3e1d-bb05-5b676aea3d7d.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     398787
IP address blocks:        184.168.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:37:9a:15:60:ca:fd:90:c1:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=35a12812-5e7e-47b3-b2e2-d4c3ad9f761f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:98:b9:5b:ab:f3:8d:43:4f:de:fe:8f:24:
                    8a:dd:9d:76:0f:7e:b3:af:3d:57:89:87:97:24:a9:
                    f3:dd:99:dc:12:d4:55:3c:29:06:7f:3b:a6:ea:19:
                    12:a5:ee:56:d0:71:fd:b6:ba:80:99:45:c6:21:50:
                    a6:b6:67:31:d6:d9:7b:50:c4:a5:0b:48:eb:88:60:
                    b3:c7:c3:47:44:c5:8a:59:5e:17:e4:0f:d7:ab:49:
                    74:db:6a:05:3a:6b:dd:c8:c9:c9:cd:f8:a0:86:d8:
                    8e:21:f0:df:ff:63:57:5d:5d:7b:72:91:b0:62:91:
                    a2:2d:25:60:d1:de:f0:21:12:34:0f:42:44:8e:e7:
                    f7:81:ce:d7:07:31:57:b6:80:91:9e:6f:23:79:6b:
                    bf:b5:8f:ab:38:1c:7d:21:dd:9e:51:75:e6:35:50:
                    66:ca:9e:1e:ed:03:7d:22:16:3d:52:62:62:b0:53:
                    38:8d:1e:60:dd:2e:a6:62:ed:a1:ff:b1:b1:05:63:
                    55:16:16:6c:1a:90:d8:7e:12:95:3d:96:0f:44:30:
                    b6:66:b1:c9:6f:65:0d:fe:9f:eb:ba:b1:20:a2:06:
                    e8:1c:e6:4a:16:31:d2:15:73:6e:4a:32:be:50:24:
                    06:3f:cb:00:79:cb:f0:0f:89:12:53:4d:40:e9:78:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5C:25:99:E6:1B:03:EC:78:76:BC:42:C6:0A:B2:0F:69:05:5A:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/233d30ac-1dd3-3e1d-bb05-5b676aea3d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.168.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:04:bd:ac:37:f3:07:d9:26:23:de:39:b7:ca:6c:37:12:e2:
         69:f9:83:3a:96:80:12:77:04:4e:c4:36:46:b7:07:13:51:2c:
         27:21:dd:bc:fb:e3:b2:d8:81:ce:d1:94:20:1a:6d:4d:28:da:
         2b:a5:e4:22:df:4d:e2:f0:c1:5b:f5:66:0c:95:ab:f0:6f:20:
         c0:66:c5:1d:74:e6:fe:a5:6b:d6:1c:be:4c:28:e6:19:cb:39:
         62:80:00:63:90:91:a4:c3:a5:df:43:d7:de:58:be:9a:41:f9:
         cd:2e:90:e2:87:f9:47:ca:da:56:27:ad:ac:87:dd:0a:29:13:
         1b:da:63:25:5e:4b:4d:33:6a:6c:48:72:c0:9e:a8:5a:14:7b:
         59:82:e6:98:85:ac:6a:44:41:e4:46:c3:69:65:f7:27:6e:3f:
         bc:41:30:a7:f5:93:74:89:93:39:8f:46:b3:f6:f9:9a:6f:90:
         c6:0d:33:fc:67:25:92:ed:77:27:6b:43:55:95:01:da:f2:d4:
         cc:c1:0f:53:ba:f5:15:1f:f1:3b:c5:28:fb:18:77:f3:b7:73:
         92:64:21:c2:67:5d:91:4c:59:69:23:15:74:12:f5:b3:4f:90:
         47:52:20:b0:6d:0b:94:02:58:c0:91:6d:e8:8e:a4:72:80:cf:
         35:8b:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:37 2025 by rpki-client