Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/c81cad0b-363e-34b5-b913-b95b8e349711.roa
File:                     c81cad0b-363e-34b5-b913-b95b8e349711.roa (raw, json)
Hash identifier:          Wb88PWF9QZnFlSCxlcqWFNwmC+aNywKFZaFzAvAyPTE=
Subject key identifier:   E8:BF:B5:75:BD:EA:81:81:3C:EA:B5:89:ED:C8:A0:98:4A:35:96:0B
Certificate issuer:       /CN=dd3e6032-a6af-4662-8b07-848eeecc3995
Certificate serial:       010D0C9F4328584B4E7711D44AA35AF248AF4010
Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/c81cad0b-363e-34b5-b913-b95b8e349711.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     46824
IP address blocks:        23.147.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:11:d4:4a:a3:5a:f2:48:af:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=94537976-3e15-4d3f-964d-325833ca6d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:93:d1:1b:33:c5:be:06:fe:37:fa:01:e8:
                    0f:4e:ab:c7:dc:5a:fd:90:70:2c:7e:49:e5:fc:9b:
                    9d:9b:7b:f9:3a:96:a7:0e:ba:46:4c:5d:13:63:21:
                    f2:51:bb:80:70:be:ef:ea:76:3a:bd:bf:0a:04:b1:
                    a0:f4:b7:5b:71:71:49:c3:6d:9e:73:5c:27:a2:f1:
                    98:b2:af:77:dc:23:02:eb:dd:84:81:ca:4f:36:fe:
                    79:a6:18:10:b2:09:10:e7:37:70:38:d4:b2:70:e9:
                    35:44:a3:f4:85:7a:ec:f1:aa:92:18:d6:d6:df:4a:
                    81:a6:b1:a6:92:62:89:a6:c5:3f:b2:3f:ae:2b:20:
                    f1:64:06:67:4a:2c:b7:57:95:49:2a:3c:b8:4c:0e:
                    c2:2d:08:ac:fa:49:8e:3f:fa:6e:fd:c7:e5:93:ea:
                    2f:b6:f2:81:ca:31:db:4d:06:1c:24:95:e9:3a:83:
                    e2:f4:df:60:5f:7f:6b:e1:86:57:90:64:05:27:2d:
                    f2:fb:43:44:3a:9f:8d:9d:b1:9c:c8:5e:d4:7a:7f:
                    e6:e5:f0:3f:41:ba:54:c9:37:4e:0f:9d:ba:89:40:
                    23:4d:79:1d:d7:60:cb:ac:70:50:37:bf:31:f1:4b:
                    c0:f3:ba:53:58:48:40:36:c3:f3:ee:40:90:56:78:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BF:B5:75:BD:EA:81:81:3C:EA:B5:89:ED:C8:A0:98:4A:35:96:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/c81cad0b-363e-34b5-b913-b95b8e349711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:49:e4:7d:87:97:76:db:bd:2a:35:58:17:5f:f5:ab:5c:b7:
         06:c2:dd:e4:4d:ad:b5:24:0c:75:24:4c:47:1d:bc:fe:b1:6f:
         7e:38:4a:34:8b:71:5c:ec:8f:ba:bc:da:19:f7:9f:2a:98:bd:
         25:2b:db:38:a9:2d:07:d4:59:eb:48:1c:ea:af:09:4b:2c:8a:
         3a:f1:0f:15:ec:e3:0a:3d:3d:d0:f7:1a:6f:5f:5a:bb:66:37:
         c8:cc:64:1d:12:d7:e8:3a:ac:f2:5b:6f:f0:30:d7:4d:eb:ca:
         2b:24:53:05:05:3a:29:d8:6a:58:56:82:dd:b9:2b:f3:ad:81:
         3f:ec:03:f8:fd:fe:ec:d9:8c:ff:6b:98:09:37:ce:f6:61:12:
         43:b7:48:5c:30:d9:7b:be:e2:00:cb:06:2a:ea:f8:b8:51:7b:
         ae:fb:8a:b9:74:83:ac:70:c3:e1:38:a3:f3:92:b0:ce:b3:6c:
         bd:48:3c:56:b9:41:73:b6:3d:0d:07:16:df:53:f9:2d:34:61:
         74:73:b8:93:35:67:e5:ae:d5:f3:b5:17:45:0c:00:81:7d:e3:
         4e:30:69:30:13:d8:5b:ea:c7:f3:ec:84:ed:9c:d3:95:6b:14:
         59:58:03:7c:76:27:68:72:83:b3:4e:3f:fa:6f:5e:30:5d:c7:
         fb:a2:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:55:20 2025 by rpki-client