Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01eba248-c690-3834-a446-811c1432daaf.roa
File:                     01eba248-c690-3834-a446-811c1432daaf.roa (raw, json)
Hash identifier:          GvP4Ziz9xXzNcY2NO2T7ri1DAlmi4+xGdrAWb5TQt4s=
Subject key identifier:   79:75:C6:C5:CD:C9:28:B8:E4:6E:43:8E:26:05:1F:FE:8A:42:A3:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B434C894454845DC1848AA060
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01eba248-c690-3834-a446-811c1432daaf.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        23.195.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:89:44:54:84:5d:c1:84:8a:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=684219c5-dce4-47ab-85b2-efcd11f5988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:bd:f4:c0:2b:29:57:e0:9c:63:cf:05:29:
                    75:6a:7e:88:44:74:9e:df:73:63:f9:5b:04:98:ac:
                    d5:b4:0c:85:b3:bf:8b:97:be:4a:c5:37:7f:13:75:
                    ef:95:a9:88:39:dd:13:00:dc:52:f6:ac:67:f3:ef:
                    68:75:65:e4:d3:23:0f:01:0f:ba:37:c5:c5:a5:3d:
                    ea:8f:46:59:ed:7c:1e:40:7c:00:7a:ab:f6:d8:5d:
                    7e:55:0a:08:80:28:e8:f0:7d:d0:5a:14:6f:45:2b:
                    7e:0d:3e:9a:13:8d:a2:f4:c0:bd:e7:7d:01:b7:12:
                    45:ad:3b:98:61:b5:00:85:b2:e4:b1:83:51:f2:31:
                    50:b3:c3:37:63:76:43:ea:a0:31:3a:3c:67:d2:38:
                    dc:39:72:dd:0b:aa:8a:fd:82:c9:67:4b:59:d3:61:
                    1b:df:cb:c7:85:d9:f6:80:18:12:bc:65:51:a9:c4:
                    8c:39:27:e1:7f:61:15:ac:82:57:d6:4b:9a:9e:9f:
                    d7:6a:8f:8d:af:e1:4f:35:9d:bd:ff:d6:bd:7c:a3:
                    93:87:c5:76:37:5e:a4:bd:05:bc:1b:ad:a5:39:c1:
                    3f:a4:58:94:8e:ea:9b:18:68:f5:61:20:84:65:36:
                    6b:ab:65:1b:1f:76:93:08:9a:ff:33:9b:7d:a4:86:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:75:C6:C5:CD:C9:28:B8:E4:6E:43:8E:26:05:1F:FE:8A:42:A3:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01eba248-c690-3834-a446-811c1432daaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:97:18:d3:a0:70:d6:43:39:7b:73:af:73:29:00:b2:b2:
         11:d7:b4:99:7d:3c:fe:73:56:1f:58:b6:c3:29:24:72:a6:3e:
         1f:cd:c7:c1:a6:26:09:c1:13:19:1d:1d:eb:1f:95:04:ef:0d:
         f7:31:36:f7:26:61:83:af:d6:aa:6d:1a:9b:8b:4c:31:be:b3:
         a4:17:cf:e8:ac:11:b8:c1:b3:72:3e:59:ac:ed:d5:3d:4d:d0:
         b5:ac:05:2a:35:d0:a5:51:ad:6b:66:5a:4f:42:f0:6e:73:4f:
         04:fa:ed:21:2a:80:bf:ec:02:6d:25:2b:d5:fe:4b:8f:f9:e4:
         f4:8c:48:6d:e4:19:b2:8b:91:c2:7a:92:be:39:6d:87:62:ae:
         38:86:e7:5b:5f:b3:cc:0a:d7:78:fe:da:61:25:82:d8:14:5c:
         05:7b:7e:d2:90:87:68:82:c2:bf:62:bc:bd:e9:0a:73:c5:b0:
         d0:00:15:0e:90:e8:b9:47:ca:2b:57:3a:23:a5:b0:5d:21:c7:
         22:8d:d9:bb:b6:ed:ed:b5:31:66:60:63:72:f6:f8:37:fc:9c:
         d4:71:6c:f6:3c:35:cf:72:53:31:d3:d2:d9:ce:cf:1b:fd:02:
         55:c3:1b:35:4e:d0:df:c6:dc:fa:54:3b:5b:6a:95:75:e6:b9:
         40:9a:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:13 2025 by rpki-client