Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09507aa4-1f77-3730-8e84-126fe9b595bd.roa
File:                     09507aa4-1f77-3730-8e84-126fe9b595bd.roa (raw, json)
Hash identifier:          I5m1p43KOmAZ4/aky+bScMddb0y885IE9ezRDLbFi4E=
Subject key identifier:   C2:F7:C2:64:08:2E:F8:EF:86:71:3F:E8:79:C3:C9:A8:51:F9:A8:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2FC1ADAB5B9CF0C1DFD556C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09507aa4-1f77-3730-8e84-126fe9b595bd.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.202.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:ad:ab:5b:9c:f0:c1:df:d5:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=bbed4e66-fdef-4569-af72-a2e933f24196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:64:9a:14:af:20:cb:4a:8f:55:96:be:1b:
                    7b:2f:45:d3:cc:9c:a6:32:eb:d2:a3:86:c1:78:e8:
                    e4:1b:69:30:26:e7:ec:19:04:b8:01:a1:f5:9a:6d:
                    3b:d3:a4:fe:a6:cd:3c:28:7a:74:61:2a:d8:2c:64:
                    2f:50:45:5a:de:48:1c:a6:7f:96:e9:82:9b:6b:cb:
                    89:fe:10:26:6c:72:e2:6c:94:99:ed:14:d6:98:80:
                    61:11:ed:d2:58:73:d2:51:41:a8:23:34:eb:36:f3:
                    38:ac:d0:4e:f6:39:c6:05:85:78:23:df:d2:33:84:
                    8b:e3:ed:60:8e:62:61:19:d8:ad:e5:13:6c:e7:8b:
                    9c:8c:a6:1a:ee:f9:ea:61:c0:1e:45:2d:7f:00:a1:
                    19:3d:ab:2a:af:e4:f7:98:53:1f:6d:3d:81:a4:4f:
                    3f:79:ae:a4:16:4d:39:6f:31:bc:f4:23:b9:51:ed:
                    c7:f9:2b:a4:9e:09:5d:fe:88:71:29:8e:06:68:c4:
                    c3:79:bd:40:be:f6:51:1b:0b:66:f0:5b:dd:18:4e:
                    9a:c7:93:1d:a3:c9:8b:b1:4a:f5:72:18:c9:d2:da:
                    05:a5:35:85:93:36:ad:66:77:b7:42:ec:84:2c:c3:
                    90:b4:07:6c:33:65:6e:c2:cf:e2:11:cd:92:b1:c6:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:C2:64:08:2E:F8:EF:86:71:3F:E8:79:C3:C9:A8:51:F9:A8:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09507aa4-1f77-3730-8e84-126fe9b595bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:59:fa:8c:31:fb:47:62:0d:01:24:d6:3e:68:88:fd:ad:e9:
         4a:51:ec:38:ea:aa:45:fd:6e:8e:34:cb:7c:06:40:ea:d2:9f:
         c3:ef:f9:60:a1:ad:39:44:f7:eb:b5:41:6a:29:71:14:1c:d2:
         bc:d0:04:0d:7e:56:40:bf:d0:a7:32:c9:b5:2d:00:3c:3b:ce:
         0c:a3:13:28:5c:a6:35:69:f7:2f:2e:9c:ba:37:3e:2d:b8:7f:
         9b:dd:96:97:a1:39:fb:15:09:75:54:c0:79:9b:b0:f7:50:89:
         4c:2e:29:6f:80:a9:da:96:e9:8f:95:d8:e1:ef:84:4d:f5:87:
         00:cb:cc:77:fe:40:b4:28:41:6d:15:da:ef:9e:79:20:52:de:
         16:d3:de:fd:0b:34:3b:28:d9:eb:e4:58:5c:c8:3d:cf:61:76:
         e3:9b:00:24:ff:58:0c:8c:99:0a:ac:5a:49:ac:04:c2:62:dd:
         4a:69:fe:ee:a2:28:72:a4:7e:02:33:c9:aa:9f:c2:76:46:7b:
         a8:b8:05:6e:d2:fd:2e:3e:d5:c2:ab:cb:7f:27:1b:5f:0d:2c:
         7b:62:2a:78:1f:1e:a9:fe:b7:cd:76:f3:5b:57:e2:be:73:bd:
         b7:cc:a2:c7:c4:ea:20:42:df:21:c4:9a:ca:e8:1c:1f:71:05:
         2d:87:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:24 2025 by rpki-client