Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/8395cd54-be83-3e24-8a8f-21cebbf51299.roa
File:                     8395cd54-be83-3e24-8a8f-21cebbf51299.roa (raw, json)
Hash identifier:          wBDh7uDfe5akxi1UNdMHE74hgg1NhJKsz4SGpEKGKoU=
Subject key identifier:   74:28:0C:97:80:4A:09:BD:93:5D:AB:46:2F:50:9F:6C:20:79:DB:45
Certificate issuer:       /CN=9845687b-adc5-4703-901b-ed09092a7799
Certificate serial:       010D0C9F4328584AB4EB6EC1BA4C5CB68DC19F40
Authority key identifier: FD:11:20:64:CE:1E:09:22:69:25:3C:83:DC:32:05:B5:F3:74:74:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/8395cd54-be83-3e24-8a8f-21cebbf51299.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     16509
IP address blocks:        192.84.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6e:c1:ba:4c:5c:b6:8d:c1:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9845687b-adc5-4703-901b-ed09092a7799
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=b9dc39d5-4cee-454b-9e28-6147f710db5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:3c:34:b4:e1:59:5f:21:29:91:0c:3d:a2:
                    24:87:72:15:c2:86:9e:f1:44:14:bc:85:3a:57:37:
                    1f:4f:40:d4:67:45:1f:e9:f6:dd:e4:94:6c:ba:f2:
                    63:1f:a2:1f:4c:79:78:71:8d:3a:f2:a9:65:f4:86:
                    7a:70:2f:14:c1:9f:8c:bc:d8:2b:14:33:ba:b5:b1:
                    c4:4f:7f:af:2a:bb:37:4e:2a:37:80:16:96:ec:43:
                    59:1e:58:f4:c8:fc:6b:1d:c5:ce:45:53:dc:9f:3b:
                    24:1e:32:b8:b6:ee:02:8c:29:96:99:bb:df:4f:bc:
                    49:37:e7:ea:63:24:0c:2f:74:43:1a:f8:50:5b:99:
                    2a:64:e3:28:28:c7:4c:bc:8c:bd:fe:85:c0:6a:68:
                    01:ff:49:c0:53:b8:6a:4f:9b:22:4e:a3:29:6d:46:
                    68:93:1d:78:56:ad:f0:eb:3b:90:5f:dd:17:04:02:
                    47:f4:b1:0c:fd:74:e7:3e:12:b5:44:93:b6:ef:f8:
                    48:89:0c:c2:71:51:ec:91:95:02:7b:20:dc:af:49:
                    7b:0d:cd:57:4b:37:ab:ea:7f:f6:a4:28:09:85:38:
                    13:15:e0:ad:2b:3c:c8:41:6e:c7:3e:6b:d3:6a:cc:
                    56:5e:43:c6:5d:b7:9e:07:76:48:ef:7c:5c:9e:a4:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:28:0C:97:80:4A:09:BD:93:5D:AB:46:2F:50:9F:6C:20:79:DB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/8395cd54-be83-3e24-8a8f-21cebbf51299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.crl

            X509v3 Authority Key Identifier:
                keyid:FD:11:20:64:CE:1E:09:22:69:25:3C:83:DC:32:05:B5:F3:74:74:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:6f:1b:26:32:6f:ae:f3:91:50:4c:03:40:2d:3c:c2:ad:
         8f:f8:33:ab:fd:ff:b1:ce:47:80:dd:dc:5e:97:eb:47:93:79:
         6b:86:5d:55:e6:24:4c:90:3a:db:31:e6:91:c5:bf:85:ec:5b:
         b9:4b:72:c2:93:db:ce:9c:69:16:7d:6a:68:41:a4:a8:51:d5:
         31:e4:c5:f7:13:98:d5:d2:4a:0f:1f:e0:dd:aa:37:0e:44:56:
         a6:63:d1:f4:8f:82:f7:c9:19:f6:2b:98:d7:1c:e4:8b:77:28:
         c0:9e:ef:be:02:38:ce:7c:b3:43:61:5c:6e:0a:8a:ba:28:d4:
         ec:c1:d4:23:b1:c8:54:d3:d2:e4:53:4e:22:79:80:64:fb:dc:
         dc:64:81:95:ea:1c:f2:1a:b0:b0:e0:62:a5:4a:7a:d4:7e:b3:
         f3:1a:08:ae:bf:09:a4:1d:29:71:2b:3a:30:80:15:d8:67:f4:
         06:96:55:64:ee:16:9d:15:26:50:19:2d:a4:67:57:a2:46:b6:
         a5:57:da:fc:8d:1a:a8:be:cd:20:cb:74:d3:11:13:55:90:19:
         9b:6a:3a:99:71:df:27:48:b7:c9:e9:ba:4c:0e:0b:40:21:15:
         4b:13:f9:71:a6:d7:ef:0d:af:6a:a3:3f:8a:9a:55:1a:4c:8e:
         3c:7b:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:44:48 2025 by rpki-client