Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
File:                     685b8c27-a767-3702-ae11-c7cb2ff820be.roa (raw, json)
Hash identifier:          ww4liu6iPty+IlDmOrca/STQwJnxe8BoihyJr35RSRc=
Subject key identifier:   7E:FB:B9:1C:38:3F:9F:27:8F:1F:0F:3E:F7:5C:33:4F:9D:27:76:F1
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584B64CCC0D1E328A98BD1382100
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11870
IP address blocks:        167.23.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c0:d1:e3:28:a9:8b:d1:38:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bd345ea1-b03c-4a03-8f3f-708c354b6d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:31:12:b5:9c:a7:78:34:70:e0:b4:b0:0f:
                    d4:39:dd:b7:b2:bb:83:46:93:38:80:df:1c:28:f4:
                    3e:77:82:61:1c:b8:1a:1c:be:74:e4:a1:42:20:eb:
                    b1:d4:f4:12:82:00:47:01:73:b6:7b:04:38:d8:b1:
                    c2:ec:f2:3e:f7:27:fe:2c:72:e3:02:bc:88:35:8f:
                    54:d7:eb:d3:2e:8d:44:74:a7:1c:1a:d6:65:62:b6:
                    cf:e6:17:62:6b:cc:48:4d:79:81:ab:c1:c6:06:1a:
                    c3:7d:7a:af:38:38:dd:64:5c:87:38:b8:ff:1e:36:
                    31:81:0e:8c:14:ce:fd:69:ee:4b:a4:ab:4c:ca:e5:
                    81:b0:81:b4:67:06:e5:59:98:de:4e:75:75:c2:60:
                    d7:aa:8f:ac:13:6f:50:0c:59:69:23:ed:1a:c0:8c:
                    72:a8:49:b9:5b:63:a8:ac:e4:93:9c:ce:48:c1:b8:
                    28:1e:4c:72:fb:ec:d8:ab:68:ca:f5:86:dd:ff:8a:
                    b4:fa:c6:ff:62:80:d7:cb:3e:b9:6a:48:cc:7b:b6:
                    a6:37:04:46:d8:d3:37:da:1a:7f:39:2d:29:15:38:
                    aa:5e:62:42:31:56:7f:26:21:36:39:7f:e8:00:8b:
                    18:f6:8a:2f:5a:e5:e6:a2:89:a9:a9:b4:ea:88:48:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FB:B9:1C:38:3F:9F:27:8F:1F:0F:3E:F7:5C:33:4F:9D:27:76:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:25:5f:17:33:3d:5e:c5:f8:c2:2a:6c:46:c2:7e:f0:23:0b:
         6b:16:98:fe:05:9e:a2:0c:04:ec:8f:42:c6:a3:02:8f:d8:9a:
         c1:d9:64:15:a9:bb:02:db:57:b4:9a:1a:c9:80:fa:5e:5c:d5:
         45:54:51:19:d5:84:12:bb:d0:70:24:f5:98:52:fc:1a:18:b7:
         48:b1:02:26:f9:d7:a3:7c:e9:c8:17:0e:ba:ff:e5:fc:93:7d:
         f9:33:38:e5:e5:86:8c:15:2d:8e:bb:60:dc:f8:08:50:bd:66:
         5a:56:96:7f:a7:8a:29:ff:dd:fb:d2:e6:35:e2:5d:eb:7a:12:
         e9:c1:53:72:f4:04:05:74:ed:ee:d6:ac:e8:b2:86:bc:5e:68:
         90:65:61:fd:96:07:ae:a9:4e:9e:6d:9d:f7:58:79:8d:6b:e6:
         3f:49:84:2f:d6:21:37:d1:6d:74:62:b5:09:ac:bb:7d:ed:77:
         0a:d3:54:1c:8b:3b:af:39:c7:b3:d3:d4:77:04:bf:cc:a4:0e:
         38:f0:a2:34:15:4e:82:85:da:cc:b3:5a:37:be:ce:23:1d:a1:
         93:16:0f:70:ca:34:eb:d9:e5:3b:7c:a6:33:2e:b3:49:23:52:
         53:3b:e2:58:7c:89:89:f7:9c:74:6a:c0:68:66:03:7b:cf:9c:
         af:5b:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:50:03 2025 by rpki-client