Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/caa2e843-7c82-3eec-a64e-b92c70bf4baf.roa
File:                     caa2e843-7c82-3eec-a64e-b92c70bf4baf.roa (raw, json)
Hash identifier:          t5r5jcVCOsVZZ+2H0ohkpHPB9iBODS/dL0tBg35H1Kg=
Subject key identifier:   C6:3F:9E:E1:EC:12:D5:79:FD:EB:8D:9F:1B:42:16:30:C1:B4:B0:31
Certificate issuer:       /CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674
Certificate serial:       010D0C9F4328584B8A7CC6244EF73CB78D11FFC0
Authority key identifier: D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/caa2e843-7c82-3eec-a64e-b92c70bf4baf.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     396891
IP address blocks:        23.190.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:c6:24:4e:f7:3c:b7:8d:11:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=39ca33b9-a5dc-483f-8381-3127f36aa296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:16:93:29:ad:fb:84:e8:65:1d:10:21:8e:
                    e1:2f:12:be:7c:38:70:00:88:81:90:07:dd:dd:18:
                    32:b5:7b:f8:e3:7c:56:0d:91:8e:c4:d4:22:9b:90:
                    1a:d5:94:07:a6:c4:8d:95:2a:2c:14:e8:aa:fa:63:
                    6b:a2:2a:5b:87:c1:7b:89:df:d2:c9:02:e1:a6:cd:
                    0f:d3:e1:d6:9a:4b:f2:3c:0f:84:0d:28:d0:53:76:
                    3b:5f:d0:78:0d:f1:ce:31:4c:1b:a9:67:cb:f9:5f:
                    84:44:52:48:63:5c:12:21:e4:a5:6a:7b:3c:bd:62:
                    9f:fd:0e:d4:9d:2f:5f:74:5b:01:ea:96:e7:93:81:
                    42:96:6d:08:91:11:4f:a4:ad:46:2d:f5:d9:66:7c:
                    3c:a5:c1:66:4b:4b:2a:69:0f:a7:45:11:80:1a:75:
                    5d:d0:b8:f5:ec:62:fe:8f:4c:bb:f0:41:ba:7b:9e:
                    47:84:3e:c0:da:56:1f:91:8e:7d:19:57:ed:c4:c1:
                    d4:ef:49:b0:21:b6:01:47:36:57:3c:94:3d:21:a9:
                    99:98:87:d2:e8:07:01:99:67:38:3a:88:ca:07:d9:
                    ba:ad:eb:7b:25:d8:28:22:69:34:75:4f:55:ce:e2:
                    14:07:d8:38:4f:14:90:0e:c3:dd:fd:ac:b2:36:da:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:9E:E1:EC:12:D5:79:FD:EB:8D:9F:1B:42:16:30:C1:B4:B0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/caa2e843-7c82-3eec-a64e-b92c70bf4baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.crl

            X509v3 Authority Key Identifier:
                keyid:D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:72:40:eb:71:c1:8b:1d:c2:af:e8:79:df:bf:2f:b6:e0:
         ce:10:e9:dd:57:4f:eb:a0:51:15:8a:79:ee:b3:14:47:97:d6:
         b1:1e:4e:7a:86:ea:5f:05:d4:53:d3:f1:3e:b8:a9:bc:3c:62:
         ee:a8:91:58:aa:c1:bd:59:23:af:b0:75:c4:94:4f:43:fe:58:
         58:b3:9f:a7:08:f1:88:67:21:fe:b0:c8:63:03:79:c7:c0:a6:
         22:99:18:93:c7:d9:07:6c:af:e6:0d:a4:41:df:02:e2:2a:ce:
         5e:af:20:ee:b9:1b:0b:98:78:48:29:46:ce:82:68:68:ad:5d:
         de:d4:fd:79:f4:21:7c:b4:7f:07:0d:36:56:80:36:42:bc:93:
         cc:bc:c0:ad:20:94:6f:5d:e0:32:6f:07:a2:d4:0d:0a:f4:aa:
         6a:4b:e7:28:f8:b0:f3:07:fe:68:da:c8:2d:5a:ec:a5:63:88:
         0b:7e:30:f2:e7:09:72:44:06:01:73:8d:5b:5c:0a:64:86:b1:
         5a:3c:42:b3:45:c9:b7:51:8f:27:6c:d3:f3:67:e1:25:b3:e3:
         62:fc:13:e2:66:bc:ac:89:78:62:1d:0c:24:9f:b6:81:04:d1:
         ab:f2:40:58:a4:8b:26:70:50:7c:eb:1f:92:3e:32:13:5e:46:
         7b:91:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:10 2025 by rpki-client