Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58/6f43d4c4-0607-3cdc-94f8-4578cfb8d258.roa
File:                     6f43d4c4-0607-3cdc-94f8-4578cfb8d258.roa (raw, json)
Hash identifier:          7X9AgByqNfN5x8lMbrYcMxnjCnecSxjQbByYrIGnHag=
Subject key identifier:   5B:D0:21:2A:2B:39:AF:3A:E2:D8:E2:0C:16:96:E4:4D:C2:D4:29:3D
Certificate issuer:       /CN=85f064c1-873a-4d82-aa9e-f428cda85b58
Certificate serial:       010D0C9F4328584B2FC183810AE4FEDCFF624300
Authority key identifier: BF:B7:71:2D:3D:2E:67:88:F0:AD:9A:A9:F3:48:6A:C4:AB:EB:D4:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58/6f43d4c4-0607-3cdc-94f8-4578cfb8d258.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     8095
IP address blocks:        23.178.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58/85f064c1-873a-4d82-aa9e-f428cda85b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58/85f064c1-873a-4d82-aa9e-f428cda85b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:83:81:0a:e4:fe:dc:ff:62:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f064c1-873a-4d82-aa9e-f428cda85b58
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=ade96b45-551b-446b-9ac0-cdf4c304013a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:68:05:5b:1e:8f:f6:3d:91:5f:77:87:e0:
                    0f:6d:78:2f:9b:cc:c9:43:ef:05:78:95:d3:8f:2f:
                    31:ce:cb:53:eb:c3:53:ca:5a:94:c9:5f:f4:b5:29:
                    4b:21:60:ab:d0:a2:4f:dd:da:a2:cd:be:7c:66:7c:
                    4c:65:cd:1e:10:f0:1b:08:2e:60:e9:a5:7b:da:fa:
                    76:e1:d7:76:6e:a8:51:03:e0:a2:46:5c:2b:d0:ee:
                    59:86:e0:e9:2e:af:51:70:ac:cf:2a:23:35:52:41:
                    2a:fa:64:10:ca:1e:5e:8c:e7:fd:b1:d7:e7:02:72:
                    e8:e0:73:79:e1:db:98:10:7e:79:ac:c4:62:de:d3:
                    c3:f3:c8:d6:df:96:8e:93:4a:0a:14:ff:ae:48:e1:
                    b3:0d:58:8a:c3:0a:1e:cf:b0:b5:6f:6c:f8:fb:32:
                    6f:49:56:bc:34:4c:7a:e2:5e:4e:bb:ab:f6:a0:a5:
                    a4:d4:7b:b9:14:ba:56:a9:0d:1b:a0:ec:88:85:79:
                    a0:6e:b5:b7:c5:45:38:bd:57:45:ae:b4:8c:3d:c5:
                    7f:7a:96:be:e4:c4:ea:c2:5c:09:47:2b:02:ca:52:
                    c9:44:b8:c4:77:d9:08:1a:d1:73:af:40:2a:28:c2:
                    03:38:a1:4d:24:b2:4a:96:ca:2a:8f:b7:52:5f:6b:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:21:2A:2B:39:AF:3A:E2:D8:E2:0C:16:96:E4:4D:C2:D4:29:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58/6f43d4c4-0607-3cdc-94f8-4578cfb8d258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58/85f064c1-873a-4d82-aa9e-f428cda85b58.crl

            X509v3 Authority Key Identifier:
                keyid:BF:B7:71:2D:3D:2E:67:88:F0:AD:9A:A9:F3:48:6A:C4:AB:EB:D4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/85f064c1-873a-4d82-aa9e-f428cda85b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:55:a7:87:08:a8:dd:74:52:5e:e0:46:05:13:b3:5f:3d:bd:
         f7:22:63:89:6f:d0:a8:37:93:a5:b3:e6:12:f4:b8:ab:a1:84:
         72:26:a5:38:33:2c:ff:54:7e:c3:cc:69:10:66:92:76:b5:a9:
         51:72:b5:07:c5:ef:35:7e:34:5e:a0:e9:3a:44:34:86:9d:18:
         88:20:bd:4a:04:74:4f:32:29:79:23:a1:5b:0c:04:04:39:4a:
         c2:56:f6:96:d0:3f:6b:db:95:3b:bd:ff:30:18:0e:d5:a0:81:
         f0:de:22:25:bd:e9:d8:af:a4:b0:f7:0f:a1:0e:45:d2:61:75:
         03:26:4a:c2:8e:7e:9a:01:36:40:93:37:96:17:57:21:59:b0:
         d6:8c:60:ac:0a:e2:d7:ce:75:57:42:c3:a7:8e:84:25:a0:36:
         79:27:d5:c9:2d:bc:7f:27:53:6a:b5:9e:ac:4a:02:79:c1:97:
         fc:62:53:7e:e7:1e:78:00:63:5e:39:71:0f:5f:2e:29:c6:47:
         22:24:25:b1:96:a7:b7:f8:c6:a9:99:07:88:89:dc:22:cb:2b:
         b9:4a:61:08:ee:d8:f5:74:43:fe:45:3a:95:df:83:3d:05:29:
         3b:af:7d:5f:6a:ff:36:37:26:37:3a:df:91:94:4f:10:31:f5:
         84:35:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:52 2025 by rpki-client