Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faf0e116-9148-3695-870d-af044667e59c.roa
File:                     faf0e116-9148-3695-870d-af044667e59c.roa (raw, json)
Hash identifier:          +UH05kKh7MErIEn3M0ntk75gXbD3BPzyf0AZaM6UUMY=
Subject key identifier:   C6:FE:90:5E:7B:80:9F:89:23:52:49:FC:98:BA:3C:DC:E2:5C:7E:D3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B87C6B50ACD46B918C58AC980
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faf0e116-9148-3695-870d-af044667e59c.roa
Signing time:             Wed 15 Oct 2025 13:42:12 +0000
ROA not before:           Wed 15 Oct 2025 13:42:12 +0000
ROA not after:            Tue 13 Jan 2026 14:42:12 +0000
asID:                     23473
IP address blocks:        173.230.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:c6:b5:0a:cd:46:b9:18:c5:8a:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 15 13:42:12 2025 GMT
            Not After : Jan 13 14:42:12 2026 GMT
        Subject: CN=f8df828d-c4dc-4618-a07d-70aebc5e8532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:fd:85:07:8c:db:13:b0:6d:dd:1a:3e:92:
                    e1:2d:5a:bc:9e:30:cf:98:9c:1d:d4:a9:f1:89:7d:
                    ef:ae:fe:51:5b:27:7d:5c:62:28:4d:10:76:0a:c5:
                    07:1d:3b:27:83:92:7e:7a:74:39:47:4d:76:a0:73:
                    ef:2d:62:59:df:86:c7:47:4d:55:43:29:8c:48:c8:
                    68:f7:29:62:b0:c3:3f:ca:33:75:96:dc:b9:26:49:
                    1a:f4:5a:c7:25:81:a8:59:c6:5c:67:5c:a1:b4:ad:
                    e5:75:d2:28:aa:9b:08:08:19:58:f2:7d:1d:ec:38:
                    fc:c3:26:58:5a:23:ba:0b:9f:37:53:99:8e:2d:c9:
                    32:95:cb:b3:56:cc:a3:55:93:85:7c:2a:2f:62:09:
                    ce:98:c6:81:b9:42:c0:8f:9b:7a:6a:aa:c6:d1:0d:
                    c4:17:88:fa:fb:19:8f:bf:ab:fb:1b:36:a7:82:2c:
                    2e:1f:ad:55:94:0d:df:1d:39:dd:1e:e3:73:ec:59:
                    32:76:d0:d9:bf:7e:2b:c4:dc:14:51:b8:b2:b7:3a:
                    56:11:47:c2:46:1c:f6:60:c6:cd:ce:d1:c6:18:62:
                    bf:75:c8:31:64:ee:27:e3:45:36:a7:c4:83:68:55:
                    07:53:15:36:83:52:8b:33:f9:72:30:76:b8:b6:66:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FE:90:5E:7B:80:9F:89:23:52:49:FC:98:BA:3C:DC:E2:5C:7E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faf0e116-9148-3695-870d-af044667e59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:af:c8:a4:28:69:1c:9d:68:f1:7f:07:56:07:1a:9a:b4:28:
         82:45:72:b9:5b:c7:bd:1d:ae:c9:76:84:07:68:1f:1c:86:54:
         cd:6f:28:e7:c3:8f:92:0e:b7:f1:e8:ed:50:f6:4a:02:ad:6a:
         eb:6f:82:4a:3b:29:5d:0e:5f:fc:1e:83:87:c8:63:54:04:4b:
         fe:85:d8:d2:44:b9:1c:c5:63:59:1c:41:b4:5e:41:cd:82:30:
         25:22:d0:9a:ed:7f:77:f6:6d:e7:d3:c2:14:f0:e0:fa:7c:9b:
         aa:f8:70:02:c8:3b:87:3e:b5:34:47:7b:35:5e:10:f1:bf:91:
         93:18:de:99:a9:ec:54:b7:b1:ea:44:2b:10:12:dc:46:17:24:
         3a:a3:ee:37:13:c1:aa:96:6e:4a:70:20:f6:87:5c:64:cb:23:
         20:58:b1:09:07:00:33:dc:d6:cf:ee:a0:27:11:17:13:fb:bc:
         db:94:5f:5f:f2:02:85:4c:89:88:91:96:d4:02:42:14:84:a5:
         6c:72:24:18:9f:9b:a7:31:cd:b7:6d:3d:f7:6f:2d:94:61:90:
         47:90:bb:74:55:9d:8f:34:ff:d6:af:f3:5d:b7:3a:c7:af:5f:
         5b:c7:c9:1d:c5:be:16:e2:20:46:f2:7b:a2:ca:95:84:e7:70:
         22:c0:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:01 2025 by rpki-client