Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2f558dd9-8789-3733-964c-a93301be22d6.roa
File:                     2f558dd9-8789-3733-964c-a93301be22d6.roa (raw, json)
Hash identifier:          scE1bNZDo45PnL/ojOlmUGaWWKmTyZRlcUBOkwpAcgY=
Subject key identifier:   5B:A7:05:74:C1:70:1E:30:35:C1:CA:BD:4C:B4:77:E8:B7:1B:1C:EE
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584B3F1C5EF26201050C7BBE4C00
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2f558dd9-8789-3733-964c-a93301be22d6.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        23.169.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5e:f2:62:01:05:0c:7b:be:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=bc3f099d-fdcc-4d55-8039-a6a40360de23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:47:c2:9f:a0:ba:ff:bc:d1:0a:3b:c4:fd:
                    e6:32:87:15:0f:bd:f0:dc:ac:ac:5c:9e:3f:d5:12:
                    b0:1c:c5:f2:f5:b6:93:25:17:21:6a:20:b3:8f:3e:
                    3b:6c:70:c5:0b:0d:6a:cf:ef:4a:99:35:16:53:49:
                    af:86:1f:95:0f:f2:f2:48:3f:8f:95:af:e3:db:61:
                    8b:a3:84:07:f6:da:56:1f:94:d1:7a:06:47:32:4e:
                    d6:0f:48:71:0e:db:19:3a:cd:88:84:13:00:0e:58:
                    b5:24:e3:cc:2f:73:db:3a:2b:0b:4d:23:ae:aa:3a:
                    8e:82:2e:3e:c5:cf:b5:86:7e:e0:37:c5:07:a7:85:
                    8d:e6:dc:af:20:16:3b:96:48:d8:51:ca:ba:8c:9c:
                    f9:e7:8f:06:c0:f4:9d:c8:5f:5c:aa:31:65:65:00:
                    2c:3e:94:a4:15:7a:99:bf:dd:7e:7e:f3:9e:a2:32:
                    30:3e:56:ad:fe:3f:cc:59:44:ae:dd:4e:a2:8d:be:
                    ac:f0:df:b2:93:45:f1:40:a9:e9:3f:ac:06:df:42:
                    59:a6:d9:18:39:29:84:fd:2f:70:2c:39:e7:03:64:
                    71:67:3d:60:54:17:7f:d8:aa:b5:68:21:7b:26:25:
                    f8:11:6f:2f:8d:ce:3c:05:e8:4b:ce:1e:b1:11:39:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:05:74:C1:70:1E:30:35:C1:CA:BD:4C:B4:77:E8:B7:1B:1C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2f558dd9-8789-3733-964c-a93301be22d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:e7:90:9a:15:4b:de:e8:05:0e:9a:5c:73:77:97:80:1a:
         67:65:06:62:f0:48:8a:91:af:6d:15:fe:46:6a:2f:a4:5b:fc:
         56:6b:f3:50:b5:87:f7:0a:83:01:4a:26:66:82:a8:36:ea:a7:
         6b:0d:36:6e:54:3f:99:27:56:50:6d:7c:5f:41:86:5c:ff:d2:
         84:9f:8f:f6:c6:87:b2:de:90:fd:6d:d4:ab:15:cf:2d:bc:e8:
         f9:96:00:1c:77:07:6b:99:8a:48:42:38:59:6d:11:29:79:e5:
         4d:19:4c:cf:35:a2:b4:86:42:b9:81:44:d0:27:ca:e9:f9:db:
         b0:3e:8e:90:4a:16:cb:0b:90:a8:ab:6b:1a:48:5c:d6:8b:11:
         91:29:e8:c6:ba:54:d3:0a:02:67:f7:69:f9:09:04:f0:cd:4a:
         58:eb:17:ef:95:f9:24:1f:23:c1:69:8b:11:7f:68:b3:39:dd:
         a1:d8:0b:d8:97:dc:29:a0:98:17:60:3e:4c:50:cb:bf:35:10:
         a9:dd:f8:bf:fd:77:f4:eb:37:83:74:b2:ca:0c:b8:7a:9f:20:
         cd:51:68:29:26:e0:62:38:59:fc:34:c9:ec:37:d4:9a:44:a4:
         67:59:a0:0f:52:53:e6:9a:b1:f6:13:7f:e8:30:fd:7d:8c:5f:
         71:20:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:42 2025 by rpki-client