Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa
File:                     cf282bcc-6ac2-3810-91aa-421d66fa8561.roa (raw, json)
Hash identifier:          v4t6dVgsCS3v9mF992I3WxyetHVEQY3W0Evzwy4Ua4g=
Subject key identifier:   56:70:78:57:42:34:18:65:21:D7:4C:C4:62:CE:72:46:40:6C:22:6B
Certificate issuer:       /CN=4559e616-17ae-4214-9407-2e51c3be0fa4
Certificate serial:       010D0C9F4328584B80B76F71E386A3A622F38080
Authority key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1030
IP address blocks:        23.165.232.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6f:71:e3:86:a3:a6:22:f3:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4559e616-17ae-4214-9407-2e51c3be0fa4
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=8cc3edac-dab7-4e91-94cf-81a040d53c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:99:d6:13:07:ca:f3:17:19:ce:a9:68:6a:b5:
                    8b:9f:ec:46:88:06:14:37:63:bd:a5:0d:00:66:1c:
                    5b:04:a4:90:97:ee:a4:8e:35:c7:64:d0:59:41:db:
                    7f:da:ee:8f:65:10:18:6b:09:ea:23:55:38:f4:f8:
                    20:5a:7b:ff:5f:ab:ca:c5:4e:0a:38:77:a0:d4:35:
                    c0:d1:ed:76:24:dc:e9:d4:61:00:74:8c:a1:a9:d5:
                    c7:9e:1c:5d:7a:c8:04:0b:68:df:2e:ec:86:18:01:
                    00:b8:62:16:d7:ba:a4:41:e1:11:07:e1:be:fa:59:
                    97:a9:0f:da:02:93:0e:b9:d1:97:09:9c:f0:03:14:
                    7c:a1:67:66:a2:94:15:8b:a0:2a:fe:ee:ee:6a:3b:
                    89:81:64:29:76:8e:63:65:4b:dd:a6:dc:45:49:bc:
                    3f:31:a7:f4:e1:3d:dd:b9:64:cf:6c:26:fe:5e:79:
                    66:fa:9e:2b:b5:25:49:c8:38:0a:4c:ca:3d:49:a7:
                    2d:6e:17:bb:24:ef:8e:c5:e8:ef:fb:f0:45:ef:52:
                    c9:8a:6e:86:1f:12:fd:a5:61:27:70:88:3e:84:c1:
                    bc:ca:d1:60:ce:c7:63:a9:4e:9c:37:98:b8:8c:1b:
                    6d:a8:8e:2f:d9:73:5c:69:3e:93:6a:57:67:e5:fc:
                    13:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:70:78:57:42:34:18:65:21:D7:4C:C4:62:CE:72:46:40:6C:22:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:b3:84:e1:87:64:c8:d3:a5:08:a5:f1:f5:46:7e:c7:ba:
         fb:4f:77:d5:9a:c1:99:09:35:e7:35:dc:f8:2e:9f:09:bf:dd:
         d9:46:8c:a6:3e:fc:78:bf:51:7c:a3:0a:06:ff:43:43:44:1e:
         a0:fd:f7:d2:43:c4:da:ec:de:34:53:bb:b3:d3:f5:2d:fa:a3:
         3e:81:b0:53:28:a3:73:cf:78:fd:42:f2:46:72:6f:a9:5c:5e:
         8e:5e:03:45:9c:26:71:2a:97:b2:0a:bb:36:50:ff:28:9d:5e:
         fa:6c:04:d3:d9:cc:26:ce:04:e4:3a:3b:61:92:8f:71:9f:d4:
         f5:c7:8a:f0:42:e4:d5:9e:ae:33:50:e2:09:f3:90:a7:e4:c4:
         99:c0:3c:ef:75:f3:6a:84:9b:50:70:39:59:cf:07:00:7c:60:
         30:fd:da:a7:7c:ef:72:76:2f:ae:bb:a2:eb:6e:f0:10:66:28:
         9d:c4:cd:a9:f6:48:96:45:5a:01:a8:c2:50:d2:fe:ad:8c:79:
         b8:2b:9d:13:e1:16:d2:3e:ae:a9:a5:5f:c8:80:11:1a:be:92:
         b3:9d:32:33:0a:7b:bd:77:0e:7a:18:85:08:ad:62:a5:1d:8c:
         cc:bf:47:a0:c8:44:42:2d:b0:ce:89:98:c6:ab:f4:c6:54:e3:
         5e:12:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:59 2025 by rpki-client