Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/65f9f050-6579-3731-8ef0-b5fa05f2ad2c.roa
File:                     65f9f050-6579-3731-8ef0-b5fa05f2ad2c.roa (raw, json)
Hash identifier:          SOvIslxk0cjuBomJWEfjv/oLFz3DWEVDfPcrUr2HfmU=
Subject key identifier:   35:57:B8:63:5D:76:E6:C7:C5:F7:66:70:C4:30:6C:9A:DE:99:CB:42
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584AE89136D0A902843D1B65C400
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/65f9f050-6579-3731-8ef0-b5fa05f2ad2c.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        23.162.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:36:d0:a9:02:84:3d:1b:65:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=308b66b1-032f-4f5d-b18b-bc3f3e8b96ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:8b:43:c9:4a:dc:60:2d:ac:e4:c7:db:84:
                    d4:c6:ba:cb:dc:24:25:59:70:42:e3:f9:6c:b2:77:
                    74:e6:65:d7:b3:74:84:50:6d:56:6e:59:4d:6b:78:
                    27:c8:b9:4a:69:e6:a1:47:f0:7b:11:76:64:8e:48:
                    55:0c:82:2b:61:58:f8:5e:2c:ca:76:d7:24:07:1b:
                    ea:59:d2:d4:eb:54:46:90:7d:ad:bb:3f:09:9b:04:
                    58:5d:27:a8:cd:63:cf:fb:db:97:2c:be:fd:a9:22:
                    a3:f5:15:5d:c5:dd:43:80:1c:5b:73:77:4d:2c:15:
                    15:96:3f:b5:7a:7e:c6:b0:08:6a:73:79:35:51:0a:
                    94:1c:ae:c3:c4:8f:7c:ff:76:08:c4:cf:33:c6:2b:
                    65:78:e4:0e:ff:d2:f4:ff:f2:24:be:1c:9d:f7:dd:
                    30:ef:62:73:d9:4c:0f:ab:61:f2:9d:2e:e0:bd:aa:
                    c9:2c:60:43:0c:2d:87:e9:04:ab:02:41:a2:91:75:
                    a6:f2:a8:bf:0c:13:1b:0b:d9:25:f9:64:46:80:cc:
                    86:18:12:0c:b5:d6:a9:e1:ae:b1:c1:f1:af:53:39:
                    15:b1:22:1a:6b:ba:bd:87:4b:e3:9d:88:35:cf:bb:
                    f6:5c:0c:06:34:7c:55:cb:41:3b:14:e4:5d:f9:38:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:57:B8:63:5D:76:E6:C7:C5:F7:66:70:C4:30:6C:9A:DE:99:CB:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/65f9f050-6579-3731-8ef0-b5fa05f2ad2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:25:ed:68:d7:0f:df:5f:eb:9a:76:96:3e:0f:65:f5:81:
         12:75:d4:63:d8:d0:c3:d0:33:3a:59:33:3a:02:fb:7d:8d:80:
         77:6b:d7:f1:fc:cb:65:1e:d2:40:fd:5a:4b:27:8e:fc:8f:48:
         2d:87:75:30:f8:9f:79:f4:d2:04:66:2d:23:9e:35:16:51:67:
         60:44:f3:2c:bf:d4:90:e1:98:11:b9:fe:ce:99:e2:3c:9c:af:
         49:7f:64:2c:fa:2b:3b:2a:b0:0e:b7:52:d7:55:6f:c6:90:10:
         5e:85:5f:d1:f9:3a:54:2b:11:55:ac:e7:c6:50:38:5a:89:86:
         b6:5d:cf:36:d3:3d:44:8b:e4:67:ac:22:87:99:e2:8d:5d:fd:
         bb:d2:f5:d4:28:79:1a:39:c2:11:67:fb:c1:df:7e:b8:d1:27:
         47:98:97:c9:52:78:e7:3a:a1:42:d5:00:59:10:7d:a7:25:bb:
         db:46:c1:b0:43:b1:ea:d1:40:9d:5c:50:e5:f5:af:5d:86:3a:
         b7:c9:70:e9:04:c0:48:73:ec:ee:ee:32:48:bc:5f:6a:58:d7:
         3c:c9:6e:c1:cf:e2:84:af:46:e3:80:d9:76:96:11:67:fb:a4:
         b9:75:21:be:17:1b:80:6b:f5:fa:0d:e7:ea:1e:84:73:8e:8f:
         6c:fe:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:26 2025 by rpki-client