Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/e65aed07-4d7e-3d74-9ed9-61382f9f7736.roa
File:                     e65aed07-4d7e-3d74-9ed9-61382f9f7736.roa (raw, json)
Hash identifier:          VWzY+Ghdo/iWz+t7+RUmAvwspUz58FgmBScXk9Qwhxc=
Subject key identifier:   9F:72:C9:02:07:56:4E:C9:E1:3E:5A:17:46:9E:3C:7B:10:AB:23:70
Certificate issuer:       /CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
Certificate serial:       010D0C9F4328584B84E769AC31FDEAB64F73D000
Authority key identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/e65aed07-4d7e-3d74-9ed9-61382f9f7736.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     395886
IP address blocks:        23.138.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:69:ac:31:fd:ea:b6:4f:73:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=7eef8a19-ff7f-44fd-9133-10d4b4559cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:f4:0a:0b:e4:e8:f0:03:b1:d6:c7:87:69:
                    eb:e8:46:9d:84:a1:02:77:b5:0f:c3:4e:08:f1:21:
                    cf:ce:bf:00:d4:83:63:2f:e3:6c:55:07:4a:37:6d:
                    a6:eb:61:b5:60:52:e8:d0:56:40:18:30:9d:df:be:
                    c7:21:68:c8:81:43:34:7f:d5:a9:e4:54:54:f9:13:
                    d6:ce:ee:6c:c2:aa:02:38:ec:fe:06:ad:08:07:5e:
                    50:3f:3a:5a:b1:94:a2:ef:27:88:dc:46:5b:c0:54:
                    92:21:a3:11:a2:4e:00:be:81:e1:b4:97:1f:22:f5:
                    3b:0e:45:0b:58:d4:40:3e:b4:c4:84:56:14:14:cd:
                    91:fe:eb:c4:0c:a8:2b:c3:82:60:3c:db:05:e6:a8:
                    d6:0a:91:45:0f:1e:33:69:b4:5b:fb:c4:e5:57:07:
                    5e:55:4b:a4:f5:73:66:ee:76:4c:fa:d4:c8:03:06:
                    07:4d:af:78:23:70:50:18:59:58:55:24:5a:6c:1d:
                    c7:dc:e1:cc:3d:87:db:86:99:73:f8:b6:7f:6a:9b:
                    a9:2e:32:e8:30:4b:4e:42:32:1f:cd:15:ff:4a:70:
                    d6:a5:c4:4a:d3:9e:b2:5e:8e:fe:e5:41:28:8f:11:
                    68:25:59:02:c3:30:d4:54:a3:56:6f:50:76:6b:18:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:C9:02:07:56:4E:C9:E1:3E:5A:17:46:9E:3C:7B:10:AB:23:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/e65aed07-4d7e-3d74-9ed9-61382f9f7736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl

            X509v3 Authority Key Identifier:
                keyid:DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:4f:2c:6d:9f:1a:53:2c:60:52:d7:d1:fd:a0:52:c3:54:
         28:36:07:6a:b5:b8:7a:25:88:3a:79:78:25:07:5c:8a:26:dc:
         75:3f:8b:1a:2d:ba:64:da:40:8e:51:27:f3:66:d2:f0:2c:27:
         b7:9d:13:d5:22:e1:a8:ce:a4:db:ab:19:ff:42:99:80:19:0f:
         1b:56:21:fb:15:2f:53:3e:b3:97:81:69:51:47:b4:d0:90:3a:
         02:88:fc:6f:c4:15:e9:51:72:d9:43:c4:83:a1:61:e1:c8:ff:
         6b:6c:a6:d0:4d:56:25:10:a0:51:26:22:0d:cb:93:3f:66:09:
         f6:c1:6a:4e:01:b6:67:cc:9a:50:3a:c0:14:e4:2d:f1:9c:47:
         41:06:ce:ea:c3:42:f4:8a:a8:f9:06:ee:30:de:8f:ce:20:05:
         25:a9:74:fa:e6:e4:cc:78:18:40:16:17:d2:6c:66:47:c1:cd:
         af:57:cf:5b:63:52:32:1e:0e:38:60:27:32:c1:b5:b4:49:b4:
         53:95:2e:11:11:ef:82:12:80:f3:8d:42:34:ef:bc:f3:8b:34:
         53:87:60:0b:25:f5:05:11:5f:4e:24:b3:82:79:b0:9d:23:49:
         4a:b2:d1:9e:fa:9f:ad:77:80:5d:f8:65:21:10:e0:85:f5:ce:
         a6:aa:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:48 2025 by rpki-client