Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac86771c-e752-31c9-b585-b3648e6eedd9.roa
File:                     ac86771c-e752-31c9-b585-b3648e6eedd9.roa (raw, json)
Hash identifier:          3udnzBcz5OGU5nqnTlK8XBZFKgxpD/hQOfyFka1YEwk=
Subject key identifier:   F0:47:10:AB:34:43:95:79:2C:88:DE:28:87:FE:A9:0D:B9:A5:75:25
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584AF134A6B82DCF777CB2659E00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac86771c-e752-31c9-b585-b3648e6eedd9.roa
Signing time:             Fri 22 Aug 2025 15:16:40 +0000
ROA not before:           Fri 22 Aug 2025 15:16:40 +0000
ROA not after:            Thu 20 Nov 2025 16:16:40 +0000
asID:                     62904
IP address blocks:        23.90.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f1:34:a6:b8:2d:cf:77:7c:b2:65:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 22 15:16:40 2025 GMT
            Not After : Nov 20 16:16:40 2025 GMT
        Subject: CN=0d7ed14e-b2cc-4bff-81b0-2292de62f6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:42:c1:f8:51:12:07:70:30:cf:c5:09:9d:
                    70:af:82:18:5e:0f:d3:6f:63:b2:05:d5:85:8d:8a:
                    54:93:20:6c:18:91:2a:09:9f:31:c8:c0:43:98:f8:
                    84:e0:c1:bd:98:33:54:d6:88:9b:d3:2b:0e:1b:61:
                    fb:7f:f3:60:04:7e:37:4a:6b:99:df:b7:2b:b8:9b:
                    ee:9b:3b:a9:22:6c:53:6f:49:13:b4:2b:1f:10:3e:
                    53:0b:64:70:fc:6b:5b:77:03:37:94:01:eb:bf:5f:
                    f3:78:20:00:5d:c7:9d:e1:16:f6:6f:a3:df:22:d7:
                    37:2a:63:b9:28:20:bd:41:d5:79:4c:02:48:49:ec:
                    8a:99:fe:08:db:43:99:72:c9:e0:15:8e:0a:0c:04:
                    7f:fa:2d:32:87:c9:a0:9e:83:96:00:00:f6:60:78:
                    10:14:ae:bb:23:32:04:f9:eb:c2:82:15:50:25:10:
                    b3:3c:8e:f6:52:85:4c:41:93:a2:67:87:6b:ee:33:
                    aa:c6:08:c2:76:28:7e:56:8d:70:df:9a:e0:0b:36:
                    5b:d0:61:e3:0a:e5:41:db:65:fd:55:af:6d:2d:68:
                    e1:c2:e2:08:3c:39:6f:e8:2c:39:71:dc:80:4a:32:
                    54:9d:57:38:3f:a8:71:b8:e9:a5:3e:57:91:95:1b:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:10:AB:34:43:95:79:2C:88:DE:28:87:FE:A9:0D:B9:A5:75:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac86771c-e752-31c9-b585-b3648e6eedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:30:63:95:01:be:11:32:17:f6:b8:fd:f4:b2:e0:dc:93:77:
         74:6d:30:2b:7b:bb:6c:7b:0c:08:a5:19:e3:e2:60:bc:dd:4f:
         ed:df:a6:e9:cc:01:41:d4:45:46:e9:88:7c:06:5a:26:5e:f3:
         58:0e:3b:b0:37:99:b7:8c:4d:fc:9f:d4:99:7b:48:3c:ac:49:
         7e:70:6c:63:e4:79:1f:41:d7:ca:2a:f4:d2:f6:19:63:4a:ed:
         5f:d6:96:86:cf:13:a5:61:d6:c9:bd:66:92:42:8f:40:a3:13:
         94:39:0d:ff:9e:e2:47:37:cb:e6:bd:d2:27:0d:e3:79:d7:26:
         f1:25:8f:f7:bc:3b:59:27:c1:e8:39:91:84:b9:05:bf:04:10:
         a3:86:4e:b2:7f:f6:19:fc:0a:f4:88:4a:db:25:0d:51:52:a4:
         b4:2d:a1:5b:6c:b1:68:66:d1:2c:42:52:d9:73:d0:30:1e:09:
         ef:a8:c3:54:3d:87:1f:bf:72:cf:84:da:73:95:a5:cf:40:18:
         95:2a:d0:11:e7:49:15:1b:1b:ed:39:50:52:3d:e9:a6:f7:e7:
         6e:2e:f5:99:e7:06:bd:aa:49:ee:5c:95:61:49:98:c2:68:1a:
         d8:23:b1:cb:fd:1d:1d:a9:1c:fe:5d:32:44:e4:22:ed:f1:bd:
         52:05:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:42 2025 by rpki-client