Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/e5e6eab2-1b03-3194-95d5-6a3d56235eac.roa
File:                     e5e6eab2-1b03-3194-95d5-6a3d56235eac.roa (raw, json)
Hash identifier:          81Twyj5Musv7who+XKhRztI3Mf+zL+qMH9lUQtKhR5Q=
Subject key identifier:   89:63:A0:26:8A:D7:6F:58:E1:25:1C:5D:96:BE:7B:3B:04:20:13:9F
Certificate issuer:       /CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
Certificate serial:       010D0C9F4328584B87B21B86F2956E6A811B74C0
Authority key identifier: 01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/e5e6eab2-1b03-3194-95d5-6a3d56235eac.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     57844
IP address blocks:        23.247.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1b:86:f2:95:6e:6a:81:1b:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=63c295ed-c1b8-4528-b8f5-e55c320efa1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:7e:28:6b:a3:22:26:99:b8:d6:16:fe:f4:
                    8a:db:64:3d:9c:fb:0a:65:47:0f:76:83:8b:73:1d:
                    47:ac:89:f6:80:69:dc:58:eb:d3:0c:11:d9:52:8f:
                    cc:44:56:53:87:85:aa:f4:20:09:3e:e8:4d:a8:21:
                    73:0a:64:26:0e:b9:e5:6d:cc:85:a6:19:0b:06:79:
                    e7:36:a3:96:e1:e3:2a:e4:57:45:7c:19:47:20:85:
                    12:5b:24:ba:0a:b1:f1:1a:5b:81:6d:3f:41:ad:20:
                    a6:bf:fa:54:cb:6b:dc:0f:5c:67:f2:e0:6e:b9:0d:
                    f1:ac:4b:0b:0e:e5:ee:dd:cf:ac:e5:c3:d9:e2:69:
                    7a:6e:7d:18:e5:54:c5:34:ce:39:78:19:5d:2f:75:
                    9d:76:e0:f6:2f:99:db:82:21:28:a6:83:61:81:a8:
                    9b:3f:af:98:0f:7c:95:a4:5c:c9:f2:02:72:a9:3f:
                    b3:82:5a:d1:c4:28:c2:c5:61:48:69:04:93:3a:cd:
                    49:2b:42:b0:15:0b:cf:00:64:13:5f:cc:bc:cd:5a:
                    ad:a6:19:f8:52:83:22:9d:98:40:3b:9a:ce:61:b1:
                    26:51:b4:a4:b0:29:40:07:82:fc:c5:0f:9a:18:25:
                    17:79:bc:f5:cb:66:e9:00:3c:d4:65:f0:3c:02:d5:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:A0:26:8A:D7:6F:58:E1:25:1C:5D:96:BE:7B:3B:04:20:13:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/e5e6eab2-1b03-3194-95d5-6a3d56235eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl

            X509v3 Authority Key Identifier:
                keyid:01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:52:22:a8:b9:94:79:2e:46:05:66:fb:e5:9c:87:6b:a3:94:
         a1:85:a3:23:d7:e6:6d:5a:b5:32:dd:00:4a:fc:e1:a3:16:90:
         a9:1c:67:08:d3:4e:91:41:77:b3:ed:c9:6c:c8:f0:da:71:17:
         69:a7:9a:af:3d:66:8a:af:95:0a:fc:98:f8:8c:cd:fb:74:29:
         f2:b6:e1:bc:14:5f:fe:02:b8:ef:de:70:64:70:c5:43:13:38:
         ac:1a:d4:60:04:45:e1:dd:38:2e:b2:0a:4e:98:b1:1e:42:bf:
         8a:80:f3:d0:fa:f8:a2:16:17:eb:37:4a:80:dd:bd:71:bf:80:
         8b:aa:9c:4e:35:bb:b8:47:6c:ab:65:0e:26:3b:09:5a:ba:c9:
         49:24:a8:65:47:62:13:80:9c:59:b1:14:41:d4:12:5e:36:2f:
         1e:94:13:67:63:40:2c:09:31:95:5d:81:a0:a5:9f:25:08:0a:
         94:79:91:08:12:f0:78:b6:93:6d:65:48:01:fe:42:9d:30:70:
         62:02:95:78:81:0e:eb:8a:65:25:a7:42:03:62:6e:92:a5:3e:
         42:c6:af:39:cb:33:82:bb:a2:9e:5f:c0:34:04:5d:e5:c5:b7:
         91:25:82:68:35:16:7d:c4:9b:88:11:94:ee:29:c5:3e:9a:b9:
         95:60:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:59:11 2025 by rpki-client