Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04224787-fb3a-3664-90fc-7b0f852ab4cf.roa
File:                     04224787-fb3a-3664-90fc-7b0f852ab4cf.roa (raw, json)
Hash identifier:          Wu2DBtrLfM+9pmIAF9+oh+/7Uj53b9fyrq3QbwnST7k=
Subject key identifier:   28:12:F7:E9:65:83:2B:56:9B:65:B8:48:0C:88:AE:BE:A3:0D:E6:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B64CCA9B111196DC751AC8B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04224787-fb3a-3664-90fc-7b0f852ab4cf.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     16625
IP address blocks:        23.55.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a9:b1:11:19:6d:c7:51:ac:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=78bef49f-0d43-4b19-9e31-b8af68619238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:81:9c:e4:72:97:af:c5:cd:5d:17:96:d3:
                    1f:ef:98:c1:07:7a:44:57:3e:3d:d8:2c:b3:e7:47:
                    79:28:04:b7:a5:8e:20:9f:23:0b:b0:21:2f:0c:ef:
                    3b:79:ac:7a:b2:bc:d8:19:a8:0b:fb:49:5c:eb:ec:
                    f5:ef:41:46:9c:3e:d2:50:ae:86:3d:6b:d3:54:e5:
                    b3:19:a7:7e:b1:4a:b1:d9:e3:1e:a3:13:42:9b:6c:
                    dc:c8:61:59:d2:d5:4b:cd:e8:34:43:73:c8:a0:5d:
                    3d:ee:e0:06:81:58:ca:9d:fe:d0:2c:d0:a2:48:b9:
                    e5:85:1e:02:41:44:69:a7:22:24:60:fc:aa:05:d7:
                    1c:27:81:6d:7d:29:78:4e:2c:1d:27:38:c6:3a:8e:
                    3e:d6:68:a1:42:74:a0:c6:ac:70:99:6c:15:62:cd:
                    45:80:10:f5:fd:2a:4a:4a:91:f4:b4:07:0b:59:49:
                    c1:9e:22:e1:a3:7a:6f:7e:23:24:c5:7d:42:cd:51:
                    a3:56:ad:1d:e6:c6:16:08:5d:c4:a3:a5:42:15:b7:
                    ec:71:66:bf:7d:42:eb:a6:9c:35:0e:f8:bd:92:2d:
                    f5:07:b2:fa:0a:c7:56:17:20:24:8d:75:4d:84:e9:
                    40:47:27:4b:ab:c5:c8:98:69:8b:27:ab:16:86:c7:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:12:F7:E9:65:83:2B:56:9B:65:B8:48:0C:88:AE:BE:A3:0D:E6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04224787-fb3a-3664-90fc-7b0f852ab4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:bd:a3:4e:16:8e:55:1e:f8:e5:3c:db:78:dd:c2:82:30:37:
         d8:87:bf:3e:63:29:ba:86:35:9a:d2:3b:d8:c0:42:fc:9c:3b:
         ef:16:c9:9c:da:01:d0:48:58:a7:20:19:1f:ec:23:1e:f6:2c:
         86:b6:5d:f3:86:23:16:ce:0b:5d:3a:44:b9:70:47:b2:0b:c6:
         d6:9a:e3:30:a7:1c:1e:44:95:06:41:4d:99:45:25:ca:d1:19:
         19:3f:ee:35:f2:23:6d:d9:8a:65:58:ff:72:2a:c0:41:23:75:
         dd:29:36:9f:56:a4:fe:d7:cb:d0:09:2c:66:dc:00:9a:46:00:
         cb:de:4f:c4:06:7f:5a:da:31:98:d3:26:30:ca:28:5b:cb:4e:
         ce:14:9a:d3:ac:f1:0f:b8:6a:5d:02:8c:a2:89:e2:c4:0f:55:
         cb:6f:38:ab:59:d4:b3:3a:be:90:46:5c:b9:60:aa:9a:bf:d3:
         72:d2:55:10:81:83:f9:4b:71:c7:3b:7b:07:c6:69:1f:64:ae:
         ff:53:0b:90:0f:69:25:e4:5c:84:a1:6a:91:22:67:4d:0c:4c:
         3c:c2:e1:7f:7c:a7:f8:4b:f7:5f:1f:db:b0:8b:29:a8:e2:14:
         37:bf:be:d6:ea:a4:64:31:2a:3c:34:0f:af:3c:da:ad:5a:78:
         f5:17:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:21 2025 by rpki-client