Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/e8ff7f02-07ce-3cd0-b824-de8d9c42e79f.roa
File:                     e8ff7f02-07ce-3cd0-b824-de8d9c42e79f.roa (raw, json)
Hash identifier:          3G3flBLWR+zHfVcbyq7QReJ7qvpdJfQ+wJU6PfsKrBo=
Subject key identifier:   E1:87:E3:65:DE:C6:B7:FB:F2:60:AB:7C:B4:A9:8D:05:26:42:9A:68
Certificate issuer:       /CN=7ac70716-c89d-41e2-931b-d16e22a87ce6
Certificate serial:       010D0C9F4328584B3126E96A5AC09E6038976500
Authority key identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/e8ff7f02-07ce-3cd0-b824-de8d9c42e79f.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     8095
IP address blocks:        23.177.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:e9:6a:5a:c0:9e:60:38:97:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac70716-c89d-41e2-931b-d16e22a87ce6
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=5fd418b5-4547-44b2-b424-57fa165f740f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:33:97:51:a5:7c:c9:60:55:c6:a9:4f:54:
                    9f:36:ce:66:bc:22:98:f1:68:10:3a:35:16:cc:0c:
                    10:d7:73:2f:d9:50:03:87:cb:1f:8b:24:9f:10:56:
                    c5:47:af:0c:5d:a1:6b:53:a1:b5:95:39:b9:a2:b3:
                    70:83:5c:e4:ec:b8:4e:3b:f7:29:34:87:4b:2a:14:
                    ff:ea:ea:8a:c2:5b:0c:1d:31:8d:0a:31:34:4f:7f:
                    27:a2:34:62:e5:c5:97:16:3d:e6:c1:57:de:f1:85:
                    dd:22:c1:49:28:70:59:2d:43:ad:eb:c3:89:ec:36:
                    25:67:df:30:f9:60:c2:2d:42:97:98:9c:9a:e2:3e:
                    01:34:fb:09:3b:80:67:a4:34:58:56:3b:be:20:8e:
                    d9:69:d0:88:17:e6:3c:39:23:b3:7d:7a:7f:f5:14:
                    71:e8:d4:3c:a3:a6:92:5f:40:31:cf:b0:95:4f:05:
                    ac:4d:e9:e4:dd:9b:c9:88:b3:a8:b7:81:2d:19:0c:
                    56:a0:54:bd:86:68:c7:60:df:ad:39:5d:c3:a5:a1:
                    86:d7:ec:2f:47:c1:b2:4f:d9:df:08:46:ec:13:7c:
                    a9:4b:46:90:31:d4:22:be:34:9d:5f:42:f4:76:11:
                    87:23:48:6b:16:cc:3a:b0:28:59:15:95:33:5c:ff:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:87:E3:65:DE:C6:B7:FB:F2:60:AB:7C:B4:A9:8D:05:26:42:9A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/e8ff7f02-07ce-3cd0-b824-de8d9c42e79f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.crl

            X509v3 Authority Key Identifier:
                keyid:35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:11:2e:8d:72:17:15:ad:08:93:f3:e4:49:5e:fa:a4:45:
         53:ed:8a:75:68:34:53:bf:46:10:f5:87:bb:01:31:68:55:7d:
         39:f0:79:e9:d0:96:17:99:34:15:3c:a2:d2:4f:f1:9b:04:27:
         fe:83:0e:32:f7:ba:ae:08:cd:01:f9:90:8a:1e:f3:cf:af:66:
         fa:ae:bd:a0:eb:0a:03:a3:81:1b:08:e4:ce:c4:ac:c7:81:3b:
         1e:f9:6c:b6:f8:d3:2f:bc:98:e7:06:8c:ad:c9:57:6b:1e:ae:
         a1:e4:0b:80:16:1c:20:19:29:a9:a9:6a:58:bd:99:81:fa:31:
         36:0e:f4:8d:da:82:92:8d:ca:13:ea:85:e6:5d:51:e1:5e:b2:
         16:56:17:81:fd:18:d5:c2:f6:0e:c7:ba:29:83:6e:92:f8:13:
         7e:e9:22:1e:1c:9c:29:6a:05:01:59:81:d9:be:bb:e0:12:92:
         e1:c2:a4:4e:1b:52:c4:c9:04:df:0a:c3:b5:d3:a1:33:fc:58:
         36:39:fe:fb:83:1a:cb:f7:b8:fc:43:9d:a8:1b:43:32:bb:47:
         c3:cc:2e:e8:16:b5:0f:80:68:dd:22:95:0f:51:5b:f7:07:ee:
         37:6d:39:5b:69:04:d9:40:8d:f1:41:27:3b:6f:ea:3f:92:2d:
         41:ba:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:53 2025 by rpki-client