Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/60395450-4a74-3660-821a-3f7121c2e161.roa
File:                     60395450-4a74-3660-821a-3f7121c2e161.roa (raw, json)
Hash identifier:          q8Jrh19r8ep7P2sNeyEQys/O7bt3+4Nu4QrEh2J9+eU=
Subject key identifier:   AC:02:32:1C:F8:57:08:AB:89:87:9F:54:12:D8:30:5B:8B:83:7A:58
Certificate issuer:       /CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e
Certificate serial:       010D0C9F4328584B3C51AAFBA4EEA7CCFC6B7E80
Authority key identifier: 7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/60395450-4a74-3660-821a-3f7121c2e161.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     395886
IP address blocks:        23.186.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:aa:fb:a4:ee:a7:cc:fc:6b:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=fee20dfb-6a43-401f-89d1-60d04518d8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:fa:8e:42:54:03:4b:72:29:6a:8b:af:ee:
                    01:2e:1f:52:0b:8e:15:cf:97:d7:8a:0f:62:d6:2c:
                    80:aa:ba:68:63:d3:0a:08:5d:0a:90:a5:56:0f:2a:
                    e5:bb:2e:93:86:0c:b4:fd:ee:e6:84:2e:a0:8c:1a:
                    82:56:5c:6e:43:cf:33:25:78:c4:2a:d4:29:87:5a:
                    b8:7b:90:08:05:40:29:29:10:2c:f7:73:1f:f9:31:
                    1d:60:f4:e9:bd:61:16:f6:15:e8:4c:39:02:dd:72:
                    ee:aa:d2:3d:63:73:b2:b5:fa:1b:33:40:54:c4:94:
                    98:67:21:03:f0:e7:af:e5:d9:94:ca:3c:5b:12:26:
                    b4:f4:51:c3:c9:2b:0b:09:2c:5e:c1:56:03:e8:ba:
                    9f:64:86:01:10:18:c5:14:3d:a6:b9:1b:bf:40:3f:
                    c6:38:61:01:ed:2c:00:68:fb:6c:ef:7c:f2:d4:d1:
                    24:03:de:10:3f:1d:99:52:f6:d7:91:bd:b0:70:ab:
                    37:5b:5e:62:65:0b:33:e5:db:48:e1:0e:53:07:3d:
                    5e:dc:1f:72:a2:7e:f0:e4:19:c0:86:13:3c:a1:85:
                    5f:7d:93:35:18:19:c7:90:12:5b:04:20:7c:8c:fd:
                    0e:c1:47:84:5a:1f:e8:9f:df:ef:91:70:b3:dc:3a:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:02:32:1C:F8:57:08:AB:89:87:9F:54:12:D8:30:5B:8B:83:7A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/60395450-4a74-3660-821a-3f7121c2e161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:a0:b0:54:6b:68:52:ec:31:e4:ac:7f:ed:39:2e:be:e0:
         5c:16:d7:a3:58:bd:11:90:e4:72:c3:c2:80:82:1b:de:64:0f:
         9c:01:6a:83:27:3e:b8:0b:ac:13:3b:e0:78:cb:43:38:7b:50:
         ac:a1:26:cb:83:ed:a3:f8:b6:e6:79:f7:99:24:72:6c:54:55:
         8a:dc:6d:db:e9:c8:39:27:d8:de:81:b0:04:9e:fd:27:5e:f3:
         f9:2f:e7:ae:78:5b:9b:e8:22:ef:db:1f:4d:2d:93:93:87:d5:
         91:c9:25:00:80:d6:e1:b3:cf:16:d6:dc:3f:0a:07:bd:8e:26:
         fd:f4:bb:2c:a1:a6:27:45:fd:e5:d0:0b:53:c9:5e:e2:4f:fe:
         94:bc:d8:48:30:44:4a:fa:18:e8:5b:80:7c:54:29:6a:d4:4b:
         19:b8:99:82:70:1c:27:5f:c7:24:50:f6:08:b8:ae:7e:e9:91:
         70:f6:8e:dc:6d:f6:ef:12:75:fb:f3:d0:0d:28:c6:7a:87:36:
         27:56:f6:d2:f4:97:01:cc:fb:76:27:dc:ee:b9:b7:e7:a3:bf:
         de:b2:b2:ab:d4:72:52:2b:e1:4d:96:5e:54:43:8e:e9:1f:8b:
         3f:de:f7:da:20:14:f8:c5:43:1f:5c:9e:24:f1:2f:92:d8:5c:
         50:1e:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:27 2025 by rpki-client