Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa
File:                     188915cb-79c3-3ca3-89d2-581c69426afb.roa (raw, json)
Hash identifier:          SrMcoEZxTidVDd2H/Ea32pwloPGLRySHiuK/5VtCzCA=
Subject key identifier:   D9:80:4E:44:9F:20:E9:A7:E6:81:C7:AB:5B:14:36:AF:12:3B:A3:B9
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584B6BC75CAC55FCB5704F76AA00
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     197547
IP address blocks:        23.158.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5c:ac:55:fc:b5:70:4f:76:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=92df9d1b-b718-4808-b9f6-800ca09fd078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:e6:85:bb:6d:d7:78:58:8e:e8:8d:c8:9f:
                    94:45:5d:2a:23:fb:8a:05:71:7a:65:e5:b8:cf:08:
                    9f:e0:8d:16:c3:6a:6b:59:6e:a0:15:e6:8c:13:dc:
                    bb:51:2a:e7:93:c6:e9:93:99:4c:b7:ab:9f:4a:b6:
                    8c:8d:2f:fe:93:83:37:9a:16:04:69:2b:60:2b:21:
                    d0:35:61:b9:e1:27:d5:fe:27:ab:f7:92:48:02:85:
                    14:17:1a:0b:aa:2b:fa:36:36:26:0e:10:d2:c4:7b:
                    16:77:d4:56:8f:05:49:de:f3:db:9b:96:da:02:fa:
                    e5:fe:9d:4d:42:0e:09:8f:a7:9c:25:e5:5c:92:80:
                    f2:46:a8:99:a6:77:51:64:5b:6d:c8:91:18:21:a6:
                    5c:5a:f8:e6:58:5f:43:21:52:58:5c:9c:cd:0e:62:
                    58:6e:41:77:02:06:af:74:6f:5f:9c:86:d5:51:13:
                    ae:ae:9f:17:49:21:48:f6:36:24:1b:08:80:0e:f7:
                    1a:3a:55:d9:af:d8:a3:20:0e:9e:8f:6f:39:89:61:
                    b8:1b:8d:97:f7:1e:38:b5:fa:a9:27:10:5e:a6:0c:
                    49:d9:c0:71:28:d1:0d:24:02:33:fc:10:f6:df:d6:
                    0f:b2:b4:1e:b7:3c:78:ae:f9:80:a3:db:42:bb:1c:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:4E:44:9F:20:E9:A7:E6:81:C7:AB:5B:14:36:AF:12:3B:A3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:36:8a:5a:b2:a2:65:77:6f:87:63:4b:d1:3a:c1:a2:ec:10:
         5d:ef:f8:f0:6e:2b:93:50:d0:e0:6a:c0:52:fe:22:d4:63:28:
         56:5a:8c:4e:47:7b:18:4f:70:86:23:93:3c:17:ec:17:45:29:
         51:ca:f3:3f:af:25:6f:e6:90:eb:da:36:cc:c6:4b:95:9b:66:
         25:04:00:a8:7b:d5:54:4b:2b:98:97:5e:37:46:16:76:45:54:
         32:68:02:6e:6e:a7:72:f2:8b:1c:90:3d:6d:92:dd:3f:b1:ad:
         1c:56:7b:46:1e:00:af:5e:91:b1:75:d7:65:e1:b4:d6:6c:bc:
         96:42:e6:88:3e:83:ae:d1:f9:12:6a:62:bd:3e:b6:21:1e:b4:
         25:73:20:80:21:06:b5:b3:bd:0e:60:fd:bf:ad:45:bc:a6:7c:
         27:ee:ce:d0:47:be:b7:6c:bb:82:a9:38:35:75:10:32:21:4b:
         1e:50:b6:4d:2a:db:55:52:01:5d:8d:cc:a1:4c:96:7f:e9:04:
         17:9b:76:a8:3a:7e:67:49:37:39:d3:3f:44:a0:0f:9f:aa:c3:
         e5:37:93:76:32:2d:fb:ac:10:d8:5c:08:89:24:a5:43:b1:80:
         54:02:a4:4e:cd:ae:5f:33:b1:cd:91:f5:88:79:42:d3:fc:08:
         60:26:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:46:03 2025 by rpki-client