Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
File:                     6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa (raw, json)
Hash identifier:          Ha+lAc8xO6+j8e3dTf8azIHkS4/uqCN+M9SPt6LzgQ0=
Subject key identifier:   34:AF:3F:A8:7D:C5:53:B4:90:C4:76:D7:14:F7:23:91:BC:EC:F0:38
Certificate issuer:       /CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
Certificate serial:       010D0C9F4328584ADA9BCD822F0C531706B03000
Authority key identifier: 44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     16827
IP address blocks:        23.131.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:cd:82:2f:0c:53:17:06:b0:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=2f9953b2-ad2d-4a0a-8d3e-da4cbadf6fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:05:d9:26:69:84:81:fa:ff:7b:a9:a7:85:
                    3f:4d:ee:eb:33:0e:02:2a:49:69:26:aa:90:e4:db:
                    a8:3c:45:f9:43:37:9a:e4:62:71:50:54:b0:10:a2:
                    41:7e:1b:0c:f4:51:55:b3:9a:69:ee:bf:b2:a1:a0:
                    52:86:50:02:f2:05:a6:4e:f4:ca:9c:a9:5c:f4:58:
                    a4:42:da:8b:4d:b9:0b:f2:14:35:a1:8f:a6:20:67:
                    64:0a:d5:3f:66:87:95:56:cc:e5:a6:bf:7b:51:2b:
                    93:1e:69:0d:b8:5e:04:3d:11:4e:94:cf:fa:fc:4c:
                    bb:22:cd:83:11:19:a7:54:ff:7f:1a:7e:00:fe:6c:
                    ef:96:7d:9c:7a:11:aa:97:a9:31:04:87:34:17:32:
                    05:1b:df:47:99:e5:cb:19:38:40:c7:68:30:b4:de:
                    2a:12:94:d7:b2:0a:52:71:1a:87:a2:84:62:15:64:
                    2d:75:87:ae:c6:38:d5:9a:63:86:06:e4:3c:21:d2:
                    19:6c:9b:38:47:70:ea:97:bf:39:0f:b7:c3:ed:d9:
                    27:ca:2a:91:ae:61:99:ba:91:10:8f:b1:a0:b3:c6:
                    7c:25:0e:cb:e9:74:48:8f:1a:dc:96:62:92:54:c8:
                    34:b8:3b:47:20:23:c6:78:ed:ad:19:3b:03:9e:77:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AF:3F:A8:7D:C5:53:B4:90:C4:76:D7:14:F7:23:91:BC:EC:F0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl

            X509v3 Authority Key Identifier:
                keyid:44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:f1:61:d0:43:c6:a9:b2:25:d3:cf:f3:e0:8d:6f:df:4e:
         dc:91:f7:db:35:da:85:ca:bd:98:94:34:59:21:bd:dc:b0:39:
         6a:28:19:e2:09:57:60:77:f9:b0:ca:ac:8c:e2:f9:4a:49:4b:
         31:b3:24:78:7f:8e:7d:42:99:f1:15:bb:b4:b5:fa:72:3e:61:
         06:52:b1:f2:6c:d8:46:98:1f:d4:c5:23:75:29:ec:7c:5c:aa:
         5f:74:81:6d:d5:81:1b:ae:f1:92:f8:40:38:f2:54:d0:ff:1a:
         46:21:fb:4a:6e:53:37:86:d3:d0:c5:08:ba:e9:fa:5b:1d:a1:
         f1:71:53:e8:c4:55:3f:63:5f:01:73:ba:0b:08:a2:96:1e:d2:
         b1:e0:aa:dc:58:7c:51:18:d7:a8:4c:e5:ca:6a:b1:ab:d0:10:
         f5:36:43:9a:b3:18:2b:f6:e0:d3:5b:1e:42:e9:5e:96:f9:6b:
         6b:67:8e:10:5c:b7:9a:ad:1e:f9:6c:37:98:70:4a:90:8b:d2:
         d4:10:06:90:25:31:1c:4a:2e:8d:64:e1:eb:2a:0c:f8:40:d6:
         d1:bc:66:21:ec:53:05:9c:aa:cf:89:26:c7:a7:bc:e9:15:17:
         e9:e0:17:26:ed:bc:9b:ba:01:9b:7d:1e:be:7f:70:10:3f:03:
         4e:70:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:09 2025 by rpki-client