Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
File:                     ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa (raw, json)
Hash identifier:          LFz/HhahEnj6c2i4l1h5mMcLagScn3zf87V3Yq7DWAg=
Subject key identifier:   F6:F0:BE:0C:88:80:A7:43:0B:4C:EC:6C:BB:E6:A4:22:89:8B:39:41
Certificate issuer:       /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Certificate serial:       010D0C9F4328584B2FC1983DDB28F276461D4200
Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     8796
IP address blocks:        23.185.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:98:3d:db:28:f2:76:46:1d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=0982a12d-2785-47dd-9478-c42b925b665d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:13:a0:af:a2:30:71:fa:75:83:3f:29:fc:
                    e2:f8:62:48:eb:3d:b2:00:d6:93:a6:75:36:67:0f:
                    22:7f:28:8e:15:8f:d2:57:ad:5f:59:32:cf:1e:e1:
                    bf:2d:a9:93:be:34:cc:2d:3f:0b:71:93:6a:c7:aa:
                    9e:d3:10:2d:1f:30:c5:af:b0:73:fd:cd:a9:cd:cc:
                    17:06:04:e1:1b:75:95:aa:bd:2b:6e:0a:b8:a1:d8:
                    5f:3e:bb:1f:ad:87:91:43:6a:f0:c7:de:81:f2:98:
                    09:27:de:16:d4:98:a1:9e:ed:a3:b0:27:8c:1d:e7:
                    a5:a9:49:7f:5d:21:a7:54:ca:0c:85:00:6f:b3:50:
                    e3:e1:8a:d8:00:ef:ea:6a:22:9c:36:54:b2:30:95:
                    ff:2e:c1:aa:35:92:7d:23:e6:4c:03:d0:32:a9:98:
                    66:e3:13:99:0f:99:89:e5:61:46:e7:8f:30:b3:f6:
                    69:77:fb:e0:01:42:29:f8:61:cc:e0:1e:42:72:d9:
                    b8:91:04:ea:c8:54:45:cb:a7:96:6a:95:7f:b2:7d:
                    96:a4:ea:85:ba:77:3d:18:9a:fc:da:15:46:a1:15:
                    8e:df:a6:aa:90:19:80:44:3d:75:51:0d:9b:fd:45:
                    36:77:57:e8:5b:4f:7f:5e:33:d3:19:28:1a:5c:8c:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F0:BE:0C:88:80:A7:43:0B:4C:EC:6C:BB:E6:A4:22:89:8B:39:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl

            X509v3 Authority Key Identifier:
                keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:80:77:b2:4b:dd:97:3e:fe:b6:b5:3f:12:66:db:59:2e:96:
         0a:5d:67:20:aa:b6:5b:95:24:75:c7:b2:3f:c4:4f:53:0c:ae:
         6a:7d:d0:fe:7a:be:d3:06:fb:33:5e:e2:89:09:ab:a7:fe:5c:
         84:bf:36:c4:18:55:29:bc:0a:ac:95:0c:d4:84:ca:5e:c7:24:
         76:4a:0f:2d:7a:0c:21:68:95:ac:46:08:4d:ed:68:37:a7:d8:
         21:f8:78:c2:29:45:e8:80:ab:6f:c0:9a:b5:d0:dc:7f:fa:8c:
         19:1d:55:ad:94:6b:35:11:7b:c0:82:30:f6:ff:81:22:2f:fe:
         12:71:aa:7d:0e:55:2b:8d:a8:e8:80:c2:e9:f1:1a:84:e9:ab:
         c9:58:0d:28:43:e6:48:4d:a7:c5:75:64:5e:ff:b3:ed:b4:cb:
         1b:1f:0b:f4:5d:99:06:28:64:5c:b7:c4:22:0a:0f:72:bb:ce:
         cd:e7:a6:70:48:f0:20:03:f9:1f:21:b6:cd:96:07:91:34:6e:
         ed:07:21:30:be:d6:7a:fb:26:10:10:c4:e5:c6:3d:b3:31:96:
         46:ca:45:70:a4:1e:96:54:82:87:15:d2:64:3f:dc:bb:8d:25:
         3f:6b:07:a3:cf:33:4e:16:16:c7:1e:2e:ad:b9:f5:3a:c0:f6:
         bb:02:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:51 2025 by rpki-client