Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa
File:                     c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa (raw, json)
Hash identifier:          CFiaVzPrnRpR7FU+ZvoohwYBFgyofTzWMygvYV2U8uM=
Subject key identifier:   39:D0:6E:9B:4C:19:CD:3F:D9:0F:03:BF:A5:E4:E9:45:56:EF:16:12
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B87B2404585CF038AAA539E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     19157
IP address blocks:        23.86.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:40:45:85:cf:03:8a:aa:53:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=abaf4c46-96b1-40ee-b8a4-cec5b8b626b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:70:8c:c3:02:b0:f5:bf:14:ac:1e:53:a0:
                    18:2b:29:1b:9c:7a:6b:a2:67:ab:f6:df:93:43:1e:
                    fe:a5:07:97:d0:4e:5c:4b:cd:e0:d8:06:8b:9b:25:
                    4a:75:af:12:ac:89:c2:4b:0d:46:25:7b:86:a4:5d:
                    9c:b3:65:b9:60:bb:99:7d:5d:b4:8a:3c:a4:cf:bc:
                    c3:b9:89:d9:de:39:14:05:b6:5c:69:92:c0:8a:8c:
                    8b:c5:f0:7e:ca:a1:69:25:1f:a7:a4:87:e0:d4:fe:
                    e0:1f:10:b3:a3:8b:54:d0:2d:0e:5f:13:39:a8:24:
                    b3:fd:a0:70:31:9c:f8:3a:57:30:f1:60:95:a5:fb:
                    f0:ae:6f:3a:2d:41:26:1d:bb:e5:29:59:d5:9e:a1:
                    46:c8:d7:d5:d0:77:95:81:18:15:39:b9:7f:f0:05:
                    88:d4:b4:0e:94:0b:f9:ba:5d:a6:df:98:7e:13:d6:
                    3d:dc:5e:95:69:cc:66:16:ef:9b:0c:6b:fc:a5:47:
                    d8:a2:e7:d7:93:28:e7:e5:39:8f:79:fb:95:ac:8d:
                    ec:44:e0:43:30:96:31:52:11:17:7d:00:e7:07:0a:
                    03:05:7c:13:b4:54:23:11:42:f5:aa:51:da:62:d4:
                    f5:62:fd:dc:d1:5a:46:0a:4e:28:5b:5c:53:a3:53:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:6E:9B:4C:19:CD:3F:D9:0F:03:BF:A5:E4:E9:45:56:EF:16:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f7:d2:e7:67:5f:b5:08:61:d6:18:2a:77:3f:25:3e:c8:29:
         6a:b5:b5:78:e0:ba:71:3e:d8:49:bb:9d:88:76:0f:20:19:aa:
         6d:9e:2b:0a:2a:1f:37:e0:63:67:e3:f4:9b:54:05:67:0a:e8:
         93:33:5e:c0:36:7b:22:c4:4b:1c:6e:9a:c8:9d:7e:13:a4:9f:
         d8:40:57:3b:60:86:7e:d1:f8:8a:2b:c0:f3:6c:ab:0b:04:16:
         93:2c:bc:3c:2b:09:02:72:09:1e:dd:27:1c:c8:54:e7:eb:49:
         e0:e9:62:ae:5a:9e:c3:3f:df:6f:9e:71:78:1f:b1:a5:6a:1b:
         35:46:ee:e4:46:06:9b:4b:02:8f:f3:57:d5:dc:e3:2c:4d:69:
         f5:b8:de:12:a8:71:58:cb:40:c4:6a:97:22:ac:ef:3c:c1:84:
         99:cf:d3:3e:e5:2c:07:ed:42:c9:a3:fd:9f:13:7e:af:01:5b:
         48:af:61:9e:57:e3:b1:54:3f:bd:b0:a9:79:0f:1c:78:9a:06:
         cd:38:5c:3e:9d:2a:14:27:bf:b3:7e:29:9e:f0:44:c1:6c:44:
         3b:b0:b6:9f:42:47:2b:bf:32:79:6a:4d:d9:d8:cf:f7:2d:34:
         d8:1b:28:b3:0b:78:98:56:8a:21:1f:2a:17:75:d9:7d:38:d5:
         9d:41:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:07:12 2025 by rpki-client