Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa
File:                     72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa (raw, json)
Hash identifier:          v0rNmvFTXCoJY3vE+89JkhFLP/3xCmUpr1Y9vyR3e38=
Subject key identifier:   C7:D0:AB:59:94:88:0B:AC:CE:56:6E:04:07:AB:FB:E0:B7:78:CB:A5
Certificate issuer:       /CN=25cf742f-4f64-4e51-b004-d972a8dd5948
Certificate serial:       010D0C9F4328584B864CB2486B6774A9F7C97780
Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        23.129.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:b2:48:6b:67:74:a9:f7:c9:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=83fce1f1-7578-4afa-b33e-30a587c9a767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:0f:8e:da:84:24:db:3f:11:a6:90:42:f1:
                    6b:d9:92:20:76:5c:65:a9:bb:a8:38:0d:bb:f8:54:
                    8e:13:9f:10:8a:cc:5f:e1:e9:a6:3d:78:9f:06:3b:
                    8c:4f:6c:87:e7:3a:b8:c1:8a:50:d4:c9:fe:02:42:
                    b5:36:65:72:63:6e:44:31:5e:10:8a:73:5c:f1:d1:
                    0f:19:08:fd:88:eb:2f:f1:27:ab:95:ef:f3:f5:68:
                    d8:6e:2c:d5:81:16:b0:52:cb:2f:d4:8e:56:37:97:
                    7a:da:fc:c5:bb:92:51:cd:c1:a8:20:b3:aa:49:c7:
                    21:06:37:e3:06:95:98:7c:6d:18:03:6b:9c:c2:f9:
                    7a:3d:a4:97:58:cf:6c:7c:3a:12:3b:a2:75:46:12:
                    26:f6:27:ec:6f:94:f1:2a:cb:3c:4a:91:8b:7a:41:
                    9a:47:d0:54:cf:fc:48:c5:35:e5:d2:83:4a:30:04:
                    50:dc:73:22:39:cd:04:f5:0f:2d:c4:aa:84:77:b1:
                    23:59:aa:63:0e:d0:2a:c7:82:67:fa:4f:d3:f3:62:
                    74:a0:25:f6:92:18:9d:66:47:01:2a:67:ac:35:0b:
                    e4:d1:fc:0a:41:54:d0:7e:45:4e:e9:ed:2b:ca:a5:
                    8e:48:96:9b:da:a7:11:1f:e5:7d:32:67:0b:89:68:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:AB:59:94:88:0B:AC:CE:56:6E:04:07:AB:FB:E0:B7:78:CB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl

            X509v3 Authority Key Identifier:
                keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:9c:7d:c3:ac:a3:80:6e:65:81:68:20:b8:a1:1e:1c:43:
         3a:dd:e0:53:48:0f:77:e8:bb:70:c1:da:0d:e0:13:04:cc:32:
         20:93:b5:b0:67:d1:ce:34:df:9d:6d:78:39:1f:f9:d2:1e:64:
         0f:28:8c:e6:84:75:16:51:26:1b:20:e1:5b:ee:2c:db:03:21:
         9e:a9:a6:eb:38:8a:14:b1:a3:7c:27:04:3c:21:de:71:b1:bc:
         19:a2:7b:8c:9d:b4:c5:01:ba:9a:4d:2d:6e:f5:f3:b8:5f:39:
         c3:c9:75:8a:09:c3:df:a3:85:73:55:a4:79:97:87:ca:db:3e:
         ac:09:e8:40:c7:45:20:dc:98:e6:26:12:cb:ca:92:b2:56:87:
         97:63:92:a1:fd:93:67:93:4c:eb:1a:b6:2e:2f:4b:f0:aa:3e:
         03:38:5f:93:72:98:e8:dc:1a:ab:04:ea:86:a8:2f:1c:e4:34:
         51:95:e0:f7:17:82:ff:ee:d5:29:c8:e6:96:e7:e7:f1:b3:89:
         03:53:53:3a:45:36:40:d0:43:25:17:bc:aa:07:96:06:b4:c6:
         36:f9:20:f1:ce:b7:33:04:72:f3:9b:dc:ae:a9:9e:ce:05:0b:
         31:14:b6:78:8e:7e:9f:8a:d9:b1:b4:1b:fc:cb:05:b4:48:63:
         f4:35:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:12 2025 by rpki-client