Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
File:                     16ea430d-5377-3810-a412-dca5c4682907.roa (raw, json)
Hash identifier:          fwBCgklbDsoSa4YGSXY9Ng7SZx+BpFe7+1VpqDfAAdo=
Subject key identifier:   EE:7D:84:AC:A9:E6:26:58:8C:71:20:88:16:C3:61:02:DB:72:7C:DD
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584B891771758D83AFBB61B7A900
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     46539
IP address blocks:        23.159.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:71:75:8d:83:af:bb:61:b7:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=24e190f0-9b64-46f7-bbb3-307a34c0b0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:2e:a7:a6:00:2f:ef:53:ea:7c:6f:59:a3:
                    0b:8d:e8:ad:36:1a:f6:f2:d4:d7:6e:27:ba:04:70:
                    85:ad:44:c7:0b:30:c2:cd:76:5a:df:24:ac:bd:4d:
                    1b:dc:b3:ff:02:b9:38:82:80:62:54:3f:88:39:d8:
                    13:24:24:bf:52:94:10:97:36:11:5e:ba:be:fa:3c:
                    c0:e1:b7:cb:d4:e4:7e:22:2f:85:71:e8:ef:36:c4:
                    fa:70:af:42:90:ba:af:c5:92:91:fe:a8:98:eb:1d:
                    26:4b:d0:34:3a:a8:6d:2e:51:8c:e8:7a:96:c1:c2:
                    b5:36:32:d3:fe:13:d7:02:1c:91:c2:04:a8:49:5c:
                    da:dc:37:72:20:58:74:3d:5a:52:df:d5:be:3c:78:
                    76:3f:7e:7b:01:21:23:6c:26:79:ea:d7:39:7c:bb:
                    15:49:d9:2f:c0:05:5d:7b:7c:d5:32:1f:84:90:3e:
                    a5:c8:93:38:68:24:9d:1a:1a:b7:b8:4a:99:e5:bd:
                    d8:68:b9:10:35:f6:07:a9:ae:04:43:15:fe:76:b3:
                    cf:00:02:bf:15:3a:5e:99:48:d8:1d:f9:b2:4c:ad:
                    f7:bb:bc:92:ff:7b:df:c1:e4:4e:b2:3b:66:ae:ea:
                    0b:3a:7a:54:fe:bf:19:86:ad:b5:f9:2a:80:fe:02:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7D:84:AC:A9:E6:26:58:8C:71:20:88:16:C3:61:02:DB:72:7C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:61:67:b0:9a:c3:48:3f:c5:0f:94:f6:8f:73:b5:03:5d:
         b3:3f:97:b4:b6:8c:0d:2d:e0:4a:7a:5a:65:63:08:1f:56:3b:
         5e:13:d6:b7:88:87:d0:0d:49:f1:65:c5:1b:c6:cd:6d:5c:25:
         5d:93:b5:8c:35:a4:1c:1b:de:44:ca:e3:91:da:2e:1b:0c:2c:
         68:9c:ef:32:2f:66:ab:65:51:49:b4:e7:6b:1b:73:c0:4c:9d:
         56:24:05:b6:e6:af:6b:0d:01:31:a5:e2:02:2b:14:46:4e:7c:
         a1:5c:0b:ae:67:f5:14:c2:02:3f:da:30:71:17:9b:8d:b4:48:
         69:76:49:02:35:5b:c9:ba:ed:41:b9:79:02:ba:b6:ff:c9:40:
         fc:d7:2a:3d:9c:a4:cb:2d:7d:92:20:45:6b:b4:f4:59:b7:9a:
         08:29:3b:74:d3:55:a2:27:49:c1:04:ae:9d:ff:4c:90:04:6e:
         a3:35:39:f7:92:39:4c:cc:64:c5:ae:9d:4d:87:a1:2d:2d:76:
         fe:d5:25:26:2f:eb:94:b8:30:eb:01:d4:4d:e4:a6:99:bc:71:
         86:ec:a7:6b:7b:97:d7:af:48:fa:58:cb:5d:6b:45:57:18:61:
         2d:0c:20:10:d9:70:a4:50:c7:16:7f:e9:84:da:9e:4e:8d:c6:
         99:a9:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:02:56 2025 by rpki-client