Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/0e0af316-e8b7-3a18-b30a-5dce157f10bb.roa
File:                     0e0af316-e8b7-3a18-b30a-5dce157f10bb.roa (raw, json)
Hash identifier:          iDKuODk4DmLeFXEXHY5anMvP8eLcijkRfh+kiomZ9dk=
Subject key identifier:   FE:D5:C7:79:9C:CE:BA:27:EB:6A:58:F2:2B:5B:3C:4B:A3:D0:30:22
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584B7C87650C1923DAD08851EB00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/0e0af316-e8b7-3a18-b30a-5dce157f10bb.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     397041
IP address blocks:        23.160.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:65:0c:19:23:da:d0:88:51:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=fa07545b-66cf-4b08-8c42-58fd1e2e544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:36:70:7b:a5:fb:40:3e:16:f5:9f:8e:b6:8c:
                    54:bc:c8:72:99:b3:41:a3:05:3b:95:1a:d9:de:de:
                    88:e2:09:f4:0b:32:82:11:c3:2e:24:18:b1:4a:af:
                    ff:cf:6a:d9:c5:35:8d:3b:07:1d:8b:34:58:31:62:
                    c0:f6:92:cd:8c:07:f3:90:4b:7e:9c:42:83:3d:a8:
                    c4:7b:17:9f:3b:90:6c:91:68:db:c4:74:4d:06:78:
                    68:6e:50:7c:5b:b6:cb:23:7b:4f:2e:84:47:ac:dc:
                    37:b3:c0:92:c9:79:04:f8:b4:95:92:d3:48:94:a4:
                    cc:f1:27:9e:6e:ae:ce:e9:a1:8a:de:c8:a8:07:29:
                    31:b1:43:ef:c5:52:a8:8b:70:19:2c:11:63:53:a7:
                    f3:20:3a:a1:db:63:c7:b7:82:eb:f0:a5:63:b3:fa:
                    e0:21:8c:f3:7a:bd:b7:7e:fa:44:d5:b7:d1:3f:39:
                    57:d6:92:46:f4:aa:f6:0e:4f:00:f7:a7:f7:3a:18:
                    82:8f:65:1d:24:87:72:f6:22:6d:bb:90:2f:65:16:
                    7c:82:09:b2:81:0d:de:56:1d:e3:a8:d9:4d:a6:d0:
                    b7:d9:e5:e4:2a:55:f5:12:32:dc:0c:f8:18:3d:44:
                    43:0a:91:7a:18:7d:98:f1:7c:44:65:5c:c3:01:92:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:C7:79:9C:CE:BA:27:EB:6A:58:F2:2B:5B:3C:4B:A3:D0:30:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/0e0af316-e8b7-3a18-b30a-5dce157f10bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:17:59:b9:ac:13:c5:ff:db:45:c0:16:ec:e7:28:68:df:
         c9:93:50:84:fe:88:ef:b6:94:3f:69:ea:9a:df:58:1c:57:8e:
         f6:92:26:56:cb:07:27:7c:19:4d:ba:f7:70:f8:56:9a:60:ee:
         cb:36:1d:36:46:36:84:48:b0:e4:ae:b7:bc:27:f9:eb:88:3e:
         83:1d:bd:9f:1e:e6:41:3c:27:3f:23:0e:a9:02:08:b5:2b:a4:
         4a:d1:97:3c:a2:40:3e:db:a3:fa:a5:e2:ef:53:f2:a0:88:29:
         e1:79:d6:a7:28:52:d5:e5:72:0f:c8:6e:8d:47:c7:66:50:3b:
         cb:c4:68:1c:65:0a:30:6b:30:5e:1d:9e:1f:84:b5:03:5e:4e:
         b5:8c:ee:fa:51:d7:2f:b7:6e:37:9f:38:fe:a2:67:63:f4:bc:
         c6:ac:41:e7:cd:06:55:bf:d6:93:9b:c9:6f:70:9f:7f:28:63:
         b6:22:c3:eb:09:d6:61:02:04:49:41:5e:91:40:c3:69:c7:64:
         52:ea:9a:8e:6f:e0:34:2c:50:75:8c:82:2c:fc:2d:e9:76:b5:
         1f:37:c5:68:fd:17:ce:14:63:c4:b0:2d:42:5e:e6:e8:d3:82:
         9d:ea:fc:8a:55:4b:c3:1a:39:da:36:d1:da:aa:ec:63:36:f8:
         59:ec:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:18 2025 by rpki-client