Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa
File:                     da638dbb-2b83-395f-8e51-53f37ab89035.roa (raw, json)
Hash identifier:          8QCJVK81nIqOmyAeg72CXl/vDNy6SDjuHKxcMSq590I=
Subject key identifier:   74:94:EB:D6:49:12:AC:CC:EA:0E:DD:7D:2D:5D:78:34:FC:5E:FD:0E
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584B64CCC0AE9F3D476128F534C0
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11870
IP address blocks:        167.23.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c0:ae:9f:3d:47:61:28:f5:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=15f417d7-d714-4611-8c6e-bcbf858242fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:36:1a:46:d4:01:19:e1:91:67:1e:50:35:54:
                    95:39:a9:16:1e:c6:f2:22:02:1c:4e:6b:0d:07:94:
                    b2:bb:1f:3f:2d:93:c0:1f:eb:36:81:00:8b:8e:27:
                    c0:e7:98:f4:30:b9:6f:cb:a3:4b:d5:25:38:76:9b:
                    c3:ff:96:07:b4:66:30:48:a5:8a:77:11:7e:fc:26:
                    14:aa:97:ee:43:74:a8:69:b4:0e:27:08:e1:82:bd:
                    9d:b6:85:04:a8:95:8b:0d:bd:52:02:5f:87:bd:f5:
                    8e:56:d8:27:3d:27:87:52:58:ce:29:d1:a9:ac:73:
                    f6:0f:f4:85:1d:19:0a:dc:42:b5:a0:c4:c3:e1:c8:
                    87:ac:9f:3d:a9:63:b2:05:8e:a8:d1:fb:79:3a:3b:
                    e1:d8:2d:87:0a:83:40:87:e1:81:8b:11:76:b8:59:
                    ad:a8:e2:57:f9:83:8d:e3:be:4b:07:6d:af:ff:5b:
                    db:d4:c1:40:6b:39:34:f2:27:b6:0b:29:de:c1:08:
                    08:af:e6:96:ce:89:7f:a4:72:fd:c9:7c:e5:7c:03:
                    75:44:b4:83:a7:06:41:06:b1:c3:2a:d8:cb:1c:c2:
                    01:aa:04:9f:7a:01:44:a5:8e:ac:a7:3a:af:de:57:
                    71:0f:b1:db:b3:8b:a6:90:11:bd:a4:1a:be:a2:74:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:94:EB:D6:49:12:AC:CC:EA:0E:DD:7D:2D:5D:78:34:FC:5E:FD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/da638dbb-2b83-395f-8e51-53f37ab89035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:22:4e:a9:43:f9:65:47:0b:1a:c4:45:91:9e:5d:3d:08:
         19:cb:34:45:3f:0d:8e:b7:64:17:e1:7d:10:2c:cd:52:2d:14:
         93:e5:91:67:33:43:5a:45:fb:a8:1c:73:7e:3e:13:5d:85:20:
         0b:16:69:b5:6e:2e:15:2f:a6:3d:7a:73:57:71:19:a5:d2:18:
         df:3d:85:33:c3:ab:e2:d2:3f:67:9f:6e:bf:88:c5:fb:c1:3b:
         3b:e8:2e:0d:b9:94:79:1f:78:18:9f:14:58:a9:08:69:8f:b6:
         93:04:be:a5:1e:9e:19:1f:a5:ce:12:ea:49:bf:6d:ae:b1:5d:
         96:50:34:19:0b:0e:4b:a0:32:1a:f3:33:92:e8:3a:35:45:de:
         c8:5a:34:e9:b6:f6:98:83:a0:a3:48:26:cf:70:8e:6d:33:de:
         e7:39:bd:81:16:3e:9d:12:f0:24:db:9c:87:f9:fd:7f:f9:1f:
         d8:cd:76:75:6d:fe:93:b7:0d:11:36:43:6c:9b:0a:e3:6e:b5:
         7e:59:1f:34:af:3d:05:e6:d1:90:3f:43:b9:22:d0:6b:03:19:
         86:e6:5e:31:2f:99:1d:9d:dc:11:0f:da:c5:c8:1d:a5:9c:5b:
         d3:16:17:80:74:fc:bc:1d:8b:48:06:09:07:5d:7d:37:64:ef:
         d9:0b:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:49 2025 by rpki-client