Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8db4f7a3-3490-321a-9408-41d97cf2c94f.roa
File:                     8db4f7a3-3490-321a-9408-41d97cf2c94f.roa (raw, json)
Hash identifier:          vudFy521ueBlMdhc/xsAlyNQpLGf+2y5IK4F24Csm2g=
Subject key identifier:   0D:12:94:7F:5C:F1:E5:CB:E2:B9:A3:5D:E7:1F:79:CC:03:C2:35:B3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD5213477B5951FE1AE1D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8db4f7a3-3490-321a-9408-41d97cf2c94f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        23.251.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:52:13:47:7b:59:51:fe:1a:e1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=081a5387-8cff-431a-a618-510262c201e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:c9:9e:13:cd:db:93:41:a8:08:9a:dd:4a:
                    95:8b:cc:cb:11:d0:21:f1:e4:0b:c9:9d:90:4c:35:
                    ba:0d:8a:15:6b:aa:9b:b1:d7:59:ce:7f:30:17:55:
                    e1:d4:86:53:68:6f:18:3d:e4:a4:e3:73:15:fb:76:
                    3c:d7:7f:60:47:58:69:fc:54:2d:33:d8:3c:d2:c4:
                    dd:15:8f:36:b2:14:99:cf:2d:e9:cc:bd:81:34:97:
                    03:13:34:4d:e4:9d:d1:81:26:2c:ae:80:72:af:73:
                    c5:9e:53:7e:44:23:92:0d:e2:f5:e9:82:f1:d6:bf:
                    0e:ea:4c:22:23:06:18:43:fe:2e:5f:78:8a:45:00:
                    d0:ea:d7:2d:9f:33:f3:e8:fb:66:87:5c:12:4a:0f:
                    55:a2:9b:83:9a:ae:d1:8b:50:e4:2e:7d:7c:9c:05:
                    44:90:f2:1f:a2:0c:da:3e:48:f6:fd:b4:af:22:8d:
                    81:af:22:63:06:73:65:7a:18:1e:3e:4b:c2:61:8f:
                    ae:78:06:a6:45:d6:23:59:22:4d:34:92:e8:d9:ca:
                    b2:1f:91:dc:c7:21:1a:ca:41:a1:07:dc:f8:c4:0a:
                    7a:de:8f:36:54:6d:b8:d5:fb:e4:9c:23:77:9f:c8:
                    ab:ae:dd:b9:ca:7e:a8:f8:85:47:a2:90:ba:63:19:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:12:94:7F:5C:F1:E5:CB:E2:B9:A3:5D:E7:1F:79:CC:03:C2:35:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8db4f7a3-3490-321a-9408-41d97cf2c94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8d:a6:69:8c:b0:d7:79:4b:05:e8:e2:c9:1f:f5:a3:d2:9f:
         68:00:57:6b:3d:69:c8:6f:12:f9:59:84:67:12:b0:66:09:4d:
         1e:f9:c0:bb:e9:c8:f2:8d:f2:fe:d8:1a:b0:b4:29:bd:5b:ef:
         0b:cb:fc:36:92:19:8c:e4:21:68:9e:32:58:d8:fa:8c:ec:aa:
         bf:c5:51:84:10:8a:ac:00:89:01:02:80:01:ed:39:81:16:40:
         aa:40:c2:3d:ef:3b:22:70:40:66:a9:b8:0b:49:9e:4f:88:dd:
         26:2f:cc:c0:1f:f0:a2:3f:76:4e:f3:4d:0a:18:b7:86:95:76:
         77:61:a7:ee:59:75:d3:7c:8f:a3:53:13:ed:8f:65:16:2b:d0:
         93:f1:42:f3:53:33:23:31:67:f8:15:24:14:f1:c9:14:24:c9:
         9c:82:43:f0:72:1d:27:f6:1d:aa:f4:32:8b:f5:3d:50:2d:09:
         9a:e4:7c:97:7f:72:1d:9f:ec:62:48:e3:40:d4:20:70:01:9d:
         52:99:75:69:db:ba:3e:52:41:3d:73:17:b0:72:17:f2:93:8b:
         ca:ed:d0:47:15:a7:34:f4:df:46:9e:df:91:e7:df:d0:08:10:
         dc:05:e2:d0:07:98:f9:3d:0a:de:94:bf:9b:4d:67:92:12:26:
         9c:cf:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:21:30 2025 by rpki-client