Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
File:                     cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json)
Hash identifier:          7qmlUG1fPUI2v8f0QEe0k3omUdClClcN+Pc/2XakMlg=
Subject key identifier:   1B:13:70:1D:D7:E1:A9:25:05:56:EA:AC:B0:2F:5A:67:CE:47:76:E2
Certificate issuer:       /CN=8deb6383-7043-43c4-b39c-395a97ee0114
Certificate serial:       010D0C9F4328584B2066D021E682509C8E7E2F00
Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     13925
IP address blocks:        23.131.160.0/24 maxlen: 24
                          23.131.161.0/24 maxlen: 24
                          2620:138:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d0:21:e6:82:50:9c:8e:7e:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=a75ff8c3-44f9-4096-87b9-b6350bac3974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:9a:27:2f:95:1d:08:31:fd:13:86:c0:81:
                    5a:4e:c6:7a:48:85:a5:51:0a:40:e4:6f:6c:ca:72:
                    6c:47:da:63:1b:05:b1:52:d1:9d:16:e5:f8:98:1e:
                    da:e1:4f:76:de:e9:d0:18:54:3b:66:ae:62:58:b5:
                    81:30:38:05:1f:92:75:f4:48:c2:07:34:ac:dd:bc:
                    90:af:b2:b2:d7:c3:10:99:ba:3d:8e:a8:80:1c:95:
                    3e:81:ff:5f:48:32:3a:25:c0:8d:6c:d9:9f:36:1d:
                    93:17:23:58:d1:1e:f0:cf:8a:a1:dc:e3:27:f6:4f:
                    2c:bb:51:2e:a4:6b:64:2d:fa:a0:48:a7:73:56:76:
                    08:b9:0f:40:d1:b8:b2:fd:2f:d2:53:a8:69:ba:c9:
                    a9:c5:09:4b:1a:bb:b5:4c:72:c9:c8:6c:22:a6:66:
                    f4:dd:d4:60:74:37:3b:31:29:9a:67:97:0d:29:f7:
                    79:c1:bf:fe:8e:bf:1a:3a:59:b5:55:3b:f8:30:c1:
                    bd:88:91:3c:d5:cd:f5:d0:ba:2b:aa:d3:3d:61:74:
                    f3:1e:41:32:e3:7b:7f:24:85:8a:75:a0:e8:70:c6:
                    8c:f4:6b:51:36:d6:a3:c9:f0:77:be:4b:2a:1a:31:
                    fa:f3:f4:fc:d0:30:97:a2:39:6a:73:91:46:6e:47:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:70:1D:D7:E1:A9:25:05:56:EA:AC:B0:2F:5A:67:CE:47:76:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.160.0/23
                IPv6:
                  2620:138:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:6a:54:53:1d:22:f5:f4:ef:d6:0f:49:aa:75:d5:26:c0:
         63:77:5b:e0:c5:33:d0:ce:9a:12:a0:8c:77:e1:b4:28:16:fb:
         2a:aa:4d:77:d6:a9:41:5a:43:42:d8:4a:a3:a2:92:61:80:e5:
         50:ef:a2:b2:d8:2d:8f:88:81:b5:59:cb:d0:e1:db:4c:22:a9:
         d3:fc:c3:cf:6b:17:38:76:d4:51:c2:2c:ec:32:13:0e:3d:eb:
         b1:5d:7b:6e:75:60:34:7d:9e:a3:d0:d2:bb:70:62:42:89:2e:
         4d:7e:d1:cf:f7:a9:eb:06:1d:0f:cb:89:0b:10:c3:88:e7:6d:
         05:ef:8b:fa:69:54:fd:15:b2:08:7c:75:db:b3:2e:cf:ab:fd:
         30:c8:3f:fe:af:1b:19:3a:fe:e8:e0:71:e2:65:e7:1a:b2:a2:
         c8:0a:99:bb:51:09:51:9a:6e:b4:0d:38:67:15:fe:f6:b6:65:
         08:7d:04:4b:89:bd:b5:b0:4c:fc:f4:c4:71:cf:cc:cd:a3:19:
         a8:2f:9a:59:06:77:82:e2:7f:40:9e:88:4f:5f:10:22:9f:96:
         3f:f8:24:dc:0a:a7:78:4b:fa:58:f4:61:70:d9:bd:df:2a:77:
         56:55:93:03:7b:75:bd:18:5d:e0:75:23:0c:ed:7d:74:6d:3f:
         c6:46:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:35 2025 by rpki-client