Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa
File:                     96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa (raw, json)
Hash identifier:          7N9C/O8UdY1USQlzDv7NUC8WPdHWBgbAhBmbdFOX4so=
Subject key identifier:   11:33:99:0A:92:C8:15:AF:5E:90:6F:FD:FF:CF:E2:D0:4C:EC:FB:8D
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F4328584B715CBCC8E2414C6BCAC9D400
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     399646
IP address blocks:        23.165.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:bc:c8:e2:41:4c:6b:ca:c9:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=3efe14e5-c2bf-4396-88c1-32a3dc26cdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:98:50:9b:63:d7:8c:dc:57:ca:62:25:fa:
                    9f:a9:a9:2b:25:5f:47:f4:89:e3:7c:d0:b9:35:52:
                    36:3c:e3:75:af:87:89:8e:d1:11:64:5a:7f:2b:fb:
                    b5:71:46:0e:3e:0b:a2:23:7b:7d:4b:f9:26:60:6e:
                    88:ad:5c:92:44:eb:30:aa:2a:3c:3c:22:2d:69:4d:
                    ec:a1:f6:e2:86:4c:d7:99:a2:45:48:1e:64:e0:86:
                    b9:0f:47:24:74:02:c7:98:bd:d8:4d:0b:f6:7e:db:
                    ba:70:b3:9a:7d:32:1e:01:29:e3:11:7f:02:44:74:
                    5d:49:38:3e:19:62:10:ef:d9:73:f0:f0:72:97:96:
                    7a:d8:f1:f4:d4:02:12:fb:d1:3c:3c:ec:77:64:a9:
                    4d:42:08:e7:32:3e:89:4b:31:ee:63:fb:35:16:12:
                    a1:aa:82:86:1a:3c:c2:3c:3d:11:3f:b2:ad:12:00:
                    53:b6:c1:ac:b7:58:74:ce:df:6e:a2:83:c4:9f:b0:
                    a5:17:6d:cb:25:b5:1d:34:14:7b:b3:72:8c:99:89:
                    9a:e8:8d:67:f0:c3:bc:c2:83:5e:38:08:51:f2:12:
                    74:73:68:95:2d:ad:9a:9b:da:50:ba:9e:08:a6:2e:
                    52:4c:48:93:07:58:8f:8b:1c:45:2a:f1:db:3b:21:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:33:99:0A:92:C8:15:AF:5E:90:6F:FD:FF:CF:E2:D0:4C:EC:FB:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:45:ac:83:ee:c0:be:2a:2b:91:09:e8:6a:25:0a:54:ea:
         85:7e:d8:44:5c:13:d4:6d:17:3a:55:63:8a:29:5c:ff:88:3a:
         77:07:19:34:8b:2b:f3:1e:70:8b:3a:ce:c6:4b:fc:a4:48:68:
         6d:22:31:ad:39:2b:03:cd:3e:a7:66:37:65:8b:c5:1e:f5:a0:
         68:78:9a:b1:7d:ca:a6:fb:bb:32:cb:19:80:fe:d1:ca:0d:5e:
         bb:6e:49:c7:19:b1:42:ca:4d:0f:d0:22:a4:4b:e4:50:0b:ed:
         92:fe:35:d4:92:03:c5:78:7e:c1:f1:b4:09:69:b7:81:fb:c5:
         3e:20:0c:63:4e:ae:19:df:da:d6:91:2a:87:6b:63:e5:ab:96:
         99:13:24:30:4b:45:ec:31:d6:bf:4d:51:d9:bf:42:8e:91:e8:
         72:84:47:82:87:88:b1:c4:66:5a:27:e3:91:70:a7:53:85:94:
         7f:09:87:4c:c4:89:1a:fa:82:a3:a5:35:00:91:3d:94:97:cc:
         b6:ea:cb:e0:81:fd:bf:9d:cb:ca:9a:dc:b8:92:75:4a:5d:1f:
         b4:4f:5d:0b:93:b8:20:69:62:26:da:c3:a1:d1:fb:7f:32:4b:
         5f:1f:65:18:3c:0a:20:5d:20:36:1f:d3:a8:5c:c5:ac:06:7a:
         76:97:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:33 2025 by rpki-client