Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/115a7599-e451-391c-9ce3-dd872390f43c.roa
File:                     115a7599-e451-391c-9ce3-dd872390f43c.roa (raw, json)
Hash identifier:          YXkstYuQMhQURDVnk2Ls91YFb2jl17mJFRxBTQeZHgQ=
Subject key identifier:   D0:59:6C:56:60:E3:16:A5:45:D2:05:81:8C:11:3D:FA:D6:15:9F:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B5B075AB465962E107A56B640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/115a7599-e451-391c-9ce3-dd872390f43c.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.210.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:5a:b4:65:96:2e:10:7a:56:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=0b1382c8-568a-4783-9746-6b76af81fc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:88:49:4a:ea:94:ed:e1:85:97:0b:67:98:
                    a4:76:a9:e9:5f:ba:5e:f7:6f:77:a0:95:4b:5d:aa:
                    79:df:30:71:39:29:c5:d1:1f:dd:de:73:74:49:5b:
                    53:76:01:0d:77:c3:ac:4e:0f:af:ce:ef:80:26:33:
                    72:9d:03:2d:df:3f:f9:02:c5:ce:a5:11:77:ee:df:
                    8e:33:08:06:d1:ad:69:43:3b:c9:17:c2:b9:d2:74:
                    be:9f:63:f3:8e:99:0d:59:04:0f:2d:cd:63:97:0e:
                    8e:33:28:cb:81:23:f9:9b:ef:a4:7b:0b:61:55:96:
                    03:ed:b4:80:fe:4c:05:1b:6f:9d:53:b1:50:2a:1f:
                    7d:65:13:e9:52:72:fd:79:74:ba:de:f3:b8:51:fa:
                    03:02:65:7d:aa:63:63:72:29:a3:1f:fe:70:e2:6e:
                    8e:e5:18:fb:6e:e6:14:57:c8:ae:f9:3c:97:03:9c:
                    39:87:e1:c5:47:41:17:4c:9b:ab:15:56:6a:a7:75:
                    ad:64:a1:86:48:af:84:b9:a5:3c:a8:e0:b0:4a:3e:
                    49:b6:fd:02:3e:0e:97:e8:b3:c4:2a:07:e4:5b:16:
                    29:26:d2:19:67:2f:f2:a5:e3:c4:61:a1:dd:ca:f9:
                    07:e8:bd:3a:3e:1f:64:a8:bb:ee:bd:65:bc:eb:18:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:6C:56:60:E3:16:A5:45:D2:05:81:8C:11:3D:FA:D6:15:9F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/115a7599-e451-391c-9ce3-dd872390f43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:86:eb:ab:e1:c2:d4:87:b3:a1:2f:02:5b:42:43:21:d1:
         e7:05:46:62:eb:7a:af:75:ee:b5:a0:e6:dd:9d:62:2c:12:03:
         b1:58:4c:bc:37:2e:26:19:49:95:5a:d4:4f:22:dc:40:79:cf:
         92:39:8e:98:3f:7f:5b:17:e6:47:6a:3b:9b:e4:96:3b:21:e6:
         ae:1a:cd:c9:df:46:89:29:df:cf:6a:52:d0:a5:7a:ba:b3:c7:
         ae:90:d8:09:04:22:4a:3e:ec:b8:7b:9d:95:18:15:e4:41:80:
         58:db:3e:6f:62:4d:76:10:4c:09:2f:b6:b4:59:5d:7a:6a:dd:
         87:fe:f1:61:c4:93:03:a7:d3:3c:82:9e:64:bb:32:6c:7e:4c:
         c0:0d:c4:a1:25:d9:47:d5:ea:8e:6e:73:82:5c:6d:1c:95:9f:
         21:94:0e:e2:84:84:37:08:63:e4:66:c3:0b:1c:cb:60:97:a0:
         bc:9e:5c:6b:93:4a:b1:1f:90:67:8d:43:04:f5:13:de:5e:20:
         f4:fd:69:9c:42:e4:2b:a1:47:85:48:63:9a:f6:d7:57:81:76:
         b7:0a:ee:75:47:df:be:ac:1d:d3:a8:3a:74:d7:b6:52:4c:12:
         08:72:0d:ed:a8:03:1e:31:9a:b1:6f:85:45:29:52:c2:ea:df:
         43:63:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:23 2025 by rpki-client