Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa
File:                     43049f14-aa13-3e5b-9852-030af82b41df.roa (raw, json)
Hash identifier:          sf25uN0e+0YOsVSzCfXPvHOcxOMFanmknPaEJuYMJwQ=
Subject key identifier:   1D:87:4B:0B:D5:0E:DF:C3:BF:FB:78:36:62:31:56:BA:1D:7F:DD:8F
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584B64CCC034A4A00623ED77B414
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11870
IP address blocks:        167.23.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c0:34:a4:a0:06:23:ed:77:b4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6c64b4b8-8fc5-42fb-ba68-da8488d22855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:17:0c:c6:09:c9:c9:32:3f:93:5a:54:21:
                    c0:cd:e8:e2:54:f0:f9:16:2c:57:5a:47:9d:b3:59:
                    27:db:ce:f6:54:b8:68:e8:7b:92:e3:9b:49:45:f7:
                    a1:9f:85:ba:37:53:b6:8d:07:c8:30:76:69:d6:5a:
                    b8:b2:fd:a8:15:35:6b:5a:51:6b:37:2d:71:75:02:
                    57:aa:86:76:91:3f:bf:08:bb:dc:ba:0c:07:e4:0d:
                    0f:ec:09:fc:d4:f0:17:77:c5:35:a1:7f:05:29:93:
                    a6:ea:73:b9:1d:7c:d6:62:97:f0:dd:5e:70:13:01:
                    75:ee:31:95:bf:a9:3a:8d:cb:23:7e:46:d4:0b:45:
                    49:a1:66:ac:3b:aa:3e:49:81:dd:0e:2d:0d:b0:fc:
                    20:d8:6c:28:1f:ef:29:28:71:a2:e5:e1:f0:47:63:
                    1c:fd:39:d9:7f:1f:7b:ca:45:11:f2:01:92:0b:b5:
                    6b:94:b3:7e:0f:53:69:7a:a6:96:73:1c:0d:df:15:
                    f4:1e:ed:eb:9b:9c:a4:20:02:53:51:82:49:32:ec:
                    14:61:50:9c:13:49:0b:ee:04:49:05:e1:14:1a:48:
                    9e:23:79:26:88:4c:3b:3f:01:f7:df:0f:d1:d8:c6:
                    32:8b:fb:bb:86:b2:d1:58:5b:5b:e1:f5:13:cb:12:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:4B:0B:D5:0E:DF:C3:BF:FB:78:36:62:31:56:BA:1D:7F:DD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:68:29:fd:a1:7f:19:0a:0f:f7:94:8c:93:9c:6f:22:c6:
         43:d7:6d:23:33:f9:e2:6d:e6:1b:ea:62:1a:a0:17:31:f6:3b:
         0c:fd:9f:47:9e:9e:d3:20:8f:4a:27:77:30:8f:b4:ad:b4:ec:
         58:f2:9a:e5:11:68:84:63:4f:6b:62:b5:b8:35:d3:94:af:27:
         37:a8:95:cf:d8:9f:8e:9f:30:56:e0:d9:d4:42:41:6c:e4:3b:
         e4:43:6a:fc:9d:74:71:80:2c:b4:02:25:4c:db:cb:a5:4b:42:
         ad:69:84:01:40:75:22:89:33:99:ef:f8:a1:d8:6c:bc:71:a9:
         35:62:85:6f:a5:19:97:06:16:89:50:8a:7a:e6:48:8e:15:4a:
         bb:ec:d3:1c:39:50:81:10:18:64:05:1e:c9:6e:50:6c:57:7d:
         33:f9:da:73:5a:71:78:ce:c1:3c:d3:fd:19:71:73:ec:83:60:
         d2:7f:43:84:60:1b:7c:3a:82:21:d6:7f:64:bd:1e:c2:59:1c:
         d8:25:3a:c9:a9:1d:d1:91:7b:1c:e4:f3:a6:f5:69:02:e3:5c:
         02:db:4e:ab:04:a7:1d:18:62:a6:65:c8:30:a6:e1:70:c0:73:
         65:c5:aa:59:b2:42:c5:4a:a8:f5:f8:cb:08:33:a8:60:7b:87:
         81:18:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:28 2025 by rpki-client