Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
File:                     f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa (raw, json)
Hash identifier:          1/Pt0OB7njLfDAerZ0bAX1TS89oiVB6BozsJ2k2UYjA=
Subject key identifier:   CA:BD:0C:FD:DB:27:F0:5D:AA:A9:9D:C7:8A:C0:D3:A6:67:51:48:7C
Certificate issuer:       /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial:       010D0C9F4328584B2FC196B10B35C908DB3C7F00
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     209242
IP address blocks:        23.145.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:96:b1:0b:35:c9:08:db:3c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=cbe70204-3167-4a32-9072-612f142bcc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:ee:8a:07:9e:e2:ab:bf:c7:3a:16:24:92:
                    98:07:59:19:c7:d1:40:b5:9e:27:dd:95:d7:2d:46:
                    64:08:54:15:c9:05:34:5b:9d:f6:ef:56:63:5a:ac:
                    d5:7e:cb:f6:e5:7f:9d:db:b3:71:5f:51:47:f6:1c:
                    a5:eb:c9:a0:dc:36:eb:63:0e:f0:2e:a1:7a:fa:88:
                    c3:de:90:14:ae:dc:59:e5:c2:9a:d0:1e:0e:39:0c:
                    15:1d:bc:bf:c9:5c:ae:08:d5:41:9e:c1:e9:a0:a0:
                    c6:be:f1:11:be:0b:af:61:b2:63:2a:c6:a2:b6:52:
                    83:43:48:87:d6:ec:cb:43:b8:95:9a:52:67:6d:b8:
                    9c:0e:96:9b:25:26:dc:8e:82:0e:a8:b8:1b:5e:3b:
                    0b:5c:f5:10:f5:b2:e1:1f:83:b3:23:da:c0:2f:dc:
                    cd:31:14:ac:40:b2:7a:d5:e3:92:5b:83:05:19:13:
                    83:79:33:ea:26:68:24:a9:dc:0f:2f:a4:f9:d3:f3:
                    94:66:91:66:9f:f8:41:2e:f9:1c:18:8a:9a:f9:06:
                    72:52:53:bb:a0:98:47:f7:cc:a1:f5:45:16:69:c6:
                    0a:14:ff:13:21:02:85:67:3d:96:16:d9:7c:f1:b7:
                    b2:5f:a7:67:ff:96:29:f8:ff:5c:ab:be:47:5d:91:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:0C:FD:DB:27:F0:5D:AA:A9:9D:C7:8A:C0:D3:A6:67:51:48:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl

            X509v3 Authority Key Identifier:
                keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:87:23:a6:df:e4:fa:a9:41:15:43:37:be:0f:38:4c:03:6f:
         e2:97:74:c6:32:4f:47:66:eb:ea:4e:fd:91:86:63:31:a9:9e:
         e9:62:dd:46:3a:bc:41:0c:89:6c:c9:89:fd:3d:02:62:7c:e4:
         4d:68:02:23:11:a8:1a:32:cb:b8:83:72:8b:96:b8:39:b5:35:
         11:1d:19:da:f9:e0:20:fd:86:40:32:61:b4:0e:26:c9:56:8a:
         10:21:bb:08:c9:a0:3e:09:be:5e:cd:2e:dd:cb:4d:56:e8:71:
         fa:24:a8:75:43:49:f1:b8:d6:cf:83:b3:6f:c5:48:a8:83:9c:
         43:ce:ff:fe:d0:19:2c:31:25:e9:9a:a6:e1:ba:b6:8a:c2:5f:
         38:eb:84:c8:21:15:03:15:5e:b5:48:5d:34:74:7b:0c:46:b2:
         83:ce:d5:97:7f:6a:ae:3b:ee:44:60:e0:53:98:cb:aa:0e:64:
         47:d7:f1:72:aa:ce:93:b5:7d:b2:d4:44:42:0c:71:bb:ef:59:
         43:cd:b8:5e:83:c6:b8:8b:34:94:8a:42:a3:3d:88:d1:08:0e:
         0d:aa:48:74:cc:bc:35:38:82:0e:c1:cb:66:a2:80:9c:0f:bd:
         52:b8:35:59:8b:4a:82:a1:ec:66:79:2d:32:51:51:77:da:6f:
         dd:99:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:59 2025 by rpki-client