Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
File:                     da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa (raw, json)
Hash identifier:          bl7ceytwPjnE5gl1HH6S7c0k4YU8hcv3baJ8O+URI4E=
Subject key identifier:   AC:AD:59:F5:38:E1:15:93:36:66:38:E4:54:51:C5:E6:F6:4E:4D:B1
Certificate issuer:       /CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
Certificate serial:       010D0C9F4328584B3556DF9D044715AE0AC99C00
Authority key identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     63023
IP address blocks:        23.137.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:df:9d:04:47:15:ae:0a:c9:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=8d881367-a1ea-4f9c-971f-f8b3e5a3e9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:30:05:c3:ec:24:f0:2e:f4:00:ee:70:e1:
                    b6:c0:8e:c4:4d:14:bb:d6:8e:24:7e:3c:bc:74:3c:
                    1b:74:96:88:69:2e:93:13:ed:8b:13:f1:f9:80:84:
                    5b:f7:31:52:e9:eb:eb:f9:85:5f:08:78:d7:a1:af:
                    b1:76:ad:3e:6b:9e:d2:ad:36:45:37:08:41:62:79:
                    28:21:9d:39:0b:9e:21:e1:bd:85:72:a3:6e:19:86:
                    56:2f:b5:bc:46:5f:00:8d:36:29:89:59:a3:57:73:
                    99:87:ad:31:74:b4:82:4f:bd:a5:f5:1b:2e:5e:de:
                    37:27:01:df:de:a0:53:16:fd:f8:76:0d:f9:09:ea:
                    e9:ba:ce:bb:2e:ca:81:cb:2c:99:aa:c2:27:37:98:
                    b4:38:80:8c:7e:31:e3:58:21:bd:f9:89:24:f1:86:
                    d3:64:fe:ff:a9:5b:de:9e:e0:7d:99:b7:e5:d5:06:
                    c6:42:d2:db:1e:fb:9b:ae:c9:ce:83:6b:93:f8:09:
                    b9:47:57:d3:b6:b3:6b:80:f4:c7:23:78:fd:d3:40:
                    4e:ad:eb:a5:1d:de:41:f7:88:f2:b9:d1:b1:3b:93:
                    2a:7b:21:90:03:ce:a7:2e:a6:0c:ce:7a:ac:2a:2d:
                    5d:6c:52:46:52:12:e9:9c:1d:33:86:35:55:ca:2d:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:59:F5:38:E1:15:93:36:66:38:E4:54:51:C5:E6:F6:4E:4D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:a8:a0:e4:78:5f:61:d3:ce:41:23:4f:6f:c7:72:3b:7c:
         72:c3:44:db:f8:bc:1a:d7:af:56:25:b8:26:f5:a1:44:c1:f7:
         41:ed:a1:17:71:a6:a3:dc:91:26:c0:58:87:34:ef:19:a3:be:
         d3:54:0f:4e:12:24:46:44:4e:81:83:36:27:bb:68:f1:ba:25:
         98:ef:2d:0a:c9:08:c2:c4:12:d4:ff:41:98:71:e0:d8:e9:d8:
         ed:d6:36:9b:65:f2:0f:ea:34:35:be:c4:d1:45:27:5d:54:1e:
         0f:f9:ea:6c:e3:e5:c7:3e:c1:ca:de:2c:d7:d0:78:4a:e2:21:
         62:97:e7:cf:88:96:97:d5:32:58:0b:fc:93:44:c4:90:0a:e9:
         c7:68:16:bc:71:71:96:c9:d3:70:ec:f0:50:06:7c:b4:08:da:
         c1:f4:bf:f4:b8:be:da:35:55:2e:4f:3b:20:4a:b9:0c:f7:28:
         8f:34:8d:dd:72:78:15:ea:26:15:c3:d5:00:9f:17:0d:9f:ad:
         e7:bc:e3:de:fd:ae:6f:b9:84:22:50:0c:f1:20:6b:db:12:95:
         21:bd:07:5e:21:30:c5:aa:55:a9:8d:df:9b:65:38:73:f5:04:
         26:af:0c:2d:f8:f1:f0:0d:79:40:17:9d:37:22:03:d9:cf:49:
         f1:17:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:11 2025 by rpki-client