Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07cf1860-3958-33a9-9bf4-78de572d5322.roa
File:                     07cf1860-3958-33a9-9bf4-78de572d5322.roa (raw, json)
Hash identifier:          7VDUFGW03QGHFjnnfMtpxcYQh1xOrHVHWWPPEPgYo5Y=
Subject key identifier:   26:C3:F4:62:97:53:D4:28:52:3B:D6:1D:DC:53:7B:B8:19:0E:E9:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1D9C302E8C5862DEF02724A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07cf1860-3958-33a9-9bf4-78de572d5322.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.46.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:30:2e:8c:58:62:de:f0:27:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=311aa247-1a5f-4727-a064-271ab5e42762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ad:11:5e:bb:bd:e5:bf:5e:47:2d:8a:72:85:
                    81:34:af:b8:99:c4:33:d6:17:76:7a:e9:09:eb:39:
                    76:fe:0d:fa:7a:b1:56:61:09:df:ee:2b:e4:95:9e:
                    44:eb:f5:41:b6:1f:33:3a:48:34:ef:9b:7e:d1:cb:
                    3d:17:3b:f8:f9:41:2b:0b:6e:d6:f6:ff:07:3e:3b:
                    1a:02:a2:a6:51:77:c4:9b:e3:28:77:20:03:50:e0:
                    60:77:c6:74:e2:da:9f:ff:1c:cf:89:66:36:45:90:
                    0a:d5:97:c0:72:84:c2:67:f5:46:9c:25:f1:77:b8:
                    1d:f4:da:92:d9:fe:85:5d:d1:bc:40:34:2b:b0:3a:
                    aa:ba:d1:7c:75:60:c2:b8:01:2a:45:9b:d1:fe:c6:
                    11:af:aa:da:c8:8d:89:e8:c7:c0:30:25:dd:8f:ae:
                    73:3b:e7:cb:6b:01:54:b7:da:5f:77:41:9e:c9:95:
                    0f:a6:5a:cf:81:ce:dd:8b:fc:d6:19:ae:36:51:0b:
                    63:31:68:a7:bf:0b:6a:b3:46:09:df:fd:96:a3:20:
                    e3:72:3c:70:f5:6d:93:73:08:91:9c:ee:a9:f1:c2:
                    f4:49:15:be:4a:b5:cb:a1:d5:e4:10:ca:17:df:c6:
                    c5:77:4e:b6:2d:ed:5b:53:35:35:3f:05:c5:b9:5d:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:F4:62:97:53:D4:28:52:3B:D6:1D:DC:53:7B:B8:19:0E:E9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07cf1860-3958-33a9-9bf4-78de572d5322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:67:1f:cf:d1:c2:b1:bd:17:48:c3:8e:e7:5e:fa:01:94:
         7f:ae:54:4c:8f:4c:c1:8a:c7:f7:f9:5d:f6:02:d4:23:43:11:
         96:6d:1f:49:87:a9:d8:0b:4d:35:8f:7b:19:17:c5:0f:84:00:
         89:69:89:a7:54:95:e8:28:fd:9b:5a:31:b6:56:73:1a:0c:d2:
         06:ea:0d:cd:5d:63:42:88:18:11:57:6f:3a:e8:c8:19:f3:61:
         2e:eb:a3:56:5e:1f:35:d7:3f:24:a2:79:f0:8e:a1:70:fc:8c:
         d9:4d:16:09:09:43:8a:ee:80:6f:bc:86:db:d1:c1:10:8e:2a:
         41:eb:e9:e6:e5:95:e1:b2:b7:31:ef:8b:6b:77:da:3c:7a:4a:
         b7:e0:26:a6:a6:fe:92:47:0a:da:94:89:0d:8c:b2:1b:b6:9a:
         c5:e5:4d:53:bf:33:b9:8b:79:f8:48:30:70:0c:14:04:aa:af:
         a2:b0:54:71:66:7d:c1:c6:aa:9f:3a:b3:d0:72:7c:87:e4:c7:
         90:d7:f4:5f:cc:c9:3e:6d:0e:d2:de:b7:50:b9:fc:9b:dc:30:
         0e:29:dc:2b:8b:95:bb:39:83:d8:fe:3d:b5:21:62:f9:32:60:
         a5:1f:a3:5c:31:36:a1:f5:f8:78:18:b1:38:23:32:48:7d:13:
         9e:67:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:30 2025 by rpki-client