Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/237cccfb-e7ba-3325-9636-0ddadf83067a.roa
File:                     237cccfb-e7ba-3325-9636-0ddadf83067a.roa (raw, json)
Hash identifier:          sHWgshB5gp2Y3CAaid+ExXgC0ucv56F9HT/HEkeXEdo=
Subject key identifier:   D1:63:5F:AF:69:F6:DB:E8:E0:51:16:7C:8F:D2:CC:D7:9E:F2:6B:DF
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B8917842ECC62FC02FCC95180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/237cccfb-e7ba-3325-9636-0ddadf83067a.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     62610
IP address blocks:        23.248.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:84:2e:cc:62:fc:02:fc:c9:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=dfb0f1e4-6d1a-43e4-b838-23e5355ab15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:95:e3:d8:1a:d7:d4:ca:1c:e6:d8:fc:63:
                    01:86:d0:fc:12:b1:70:09:b8:6b:e0:23:ff:80:b4:
                    91:74:d0:3b:8d:1c:8a:73:3e:40:5f:d0:37:92:70:
                    6d:77:21:61:36:e4:4d:6a:61:d4:14:a5:2f:dd:0f:
                    d5:cb:34:68:50:df:be:d5:76:f0:d0:45:16:32:59:
                    7b:23:a8:8c:50:49:40:57:06:f0:b0:d8:8b:c8:af:
                    d7:6c:ce:ca:00:d4:88:6f:c8:50:fd:78:34:65:08:
                    be:00:a6:92:4e:71:5e:4c:38:fb:27:59:a6:c7:f8:
                    84:7b:b6:a1:d5:b0:70:9f:98:a3:6c:ba:84:1e:ca:
                    fc:d1:27:a8:e9:8a:c0:f0:02:37:42:25:9a:e5:5f:
                    57:65:4d:2a:b1:15:44:da:27:48:27:30:0a:39:70:
                    cf:1e:18:79:8d:2e:17:07:c6:6c:94:ed:7a:d2:e1:
                    ec:08:5e:8c:7d:5a:43:83:14:d3:f3:9a:6c:69:40:
                    1f:16:ed:92:77:c7:a6:e2:c8:1d:0a:3a:32:6c:13:
                    c1:dc:f0:28:c5:2e:93:f3:7b:d7:e7:d8:a9:60:a7:
                    b7:6a:03:7b:19:d0:0d:88:85:d5:68:09:11:44:f5:
                    92:2a:4c:a6:3a:53:a8:45:a3:da:a4:03:0b:a1:95:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:5F:AF:69:F6:DB:E8:E0:51:16:7C:8F:D2:CC:D7:9E:F2:6B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/237cccfb-e7ba-3325-9636-0ddadf83067a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.248.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:60:bd:c9:05:be:3c:9e:6a:90:ed:67:16:09:c2:97:41:
         dc:a0:98:9a:98:4a:d8:2e:1e:26:88:f6:77:9b:52:b9:b7:ba:
         b9:94:af:c8:01:8a:8a:e3:ef:7f:a4:95:c3:88:6a:ee:95:d0:
         83:f3:a0:37:9e:3f:c3:45:c4:9a:b2:16:7b:2f:63:1b:26:5b:
         d1:ce:af:83:33:e2:a8:df:c1:98:20:9d:35:71:02:96:86:e0:
         5b:07:5e:65:63:ec:e1:0e:0e:43:25:7f:71:7b:36:27:c2:dd:
         9d:bc:b7:3a:99:72:d4:bc:0f:ac:45:86:21:22:bb:fe:ea:75:
         53:df:c6:f3:84:88:65:9e:d4:c5:58:b9:3b:39:a7:70:48:3a:
         80:5e:56:c8:26:5b:92:d8:58:90:30:85:3e:f3:50:b0:21:ee:
         10:26:23:f6:1b:1d:44:1d:b2:e8:be:d0:df:1d:7b:61:89:85:
         f1:0b:ba:c1:71:70:28:46:b2:9b:d5:0b:26:ab:84:0b:1f:12:
         79:b1:8c:11:11:93:29:59:b6:0e:22:26:8e:c8:99:26:42:f4:
         33:b6:e4:c1:53:ef:4b:ba:67:f2:c5:c2:25:8b:75:ae:bc:82:
         6a:ff:56:c7:a6:16:1d:d8:81:9a:28:69:68:46:ab:e3:81:49:
         c5:fa:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:58 2025 by rpki-client