Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1987bbd3-2141-346a-86c7-c84aff988a91.roa
File:                     1987bbd3-2141-346a-86c7-c84aff988a91.roa (raw, json)
Hash identifier:          0A/AtXvy/DzzPOIQLK8kAF0edUDs5UzSgDamw9QI4PQ=
Subject key identifier:   69:8C:2C:F0:46:02:D6:B0:47:AA:46:09:C5:77:57:DF:02:B6:80:17
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2066DD318EFAA8556DD25E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1987bbd3-2141-346a-86c7-c84aff988a91.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     3786
IP address blocks:        23.49.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:dd:31:8e:fa:a8:55:6d:d2:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=011d1e7a-419a-494f-8706-b9ecf731ad4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:84:90:f7:a4:0d:dd:26:52:36:09:fd:b6:
                    14:de:96:fe:80:ca:cc:6d:20:a8:a0:49:13:d0:e1:
                    a6:4c:0a:de:88:f4:84:d1:84:f5:b2:2f:a5:22:9c:
                    d1:ce:52:ff:0c:e0:dc:72:4f:9e:15:34:18:f9:78:
                    87:e6:b9:34:a2:f9:5f:6a:bf:19:36:85:e1:ef:88:
                    5f:bc:aa:a9:04:cc:ab:87:8c:64:db:6a:c3:08:d5:
                    4f:9a:43:dc:f3:1e:54:b4:f7:55:02:80:21:08:ab:
                    f6:34:1f:a4:03:62:a3:7e:4d:fe:a1:68:45:2b:f1:
                    06:f6:34:04:2c:93:03:18:62:89:c6:f4:67:53:a3:
                    f6:a2:23:73:cc:c4:aa:4f:48:1c:e0:56:45:74:d3:
                    67:0b:eb:56:ff:14:dd:af:27:85:cc:58:09:ee:89:
                    78:a7:da:1a:4e:b5:d5:09:c1:d2:74:e7:c9:32:50:
                    09:bc:a7:8f:b3:18:ee:51:70:58:e6:cf:d9:f1:dd:
                    91:1f:93:78:e4:85:33:12:fc:b6:6b:70:ba:2c:df:
                    ab:4b:b0:0a:7f:93:f9:62:58:35:96:a5:57:d2:20:
                    62:d8:e9:6e:42:70:a8:db:75:a8:2d:47:6b:18:33:
                    db:77:3a:b2:4c:6d:b3:6c:c7:e0:8c:27:2a:83:6a:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:2C:F0:46:02:D6:B0:47:AA:46:09:C5:77:57:DF:02:B6:80:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1987bbd3-2141-346a-86c7-c84aff988a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:c7:f0:2e:3d:ae:e1:db:5f:ee:7c:4d:d1:96:e6:b0:2a:
         07:60:ec:83:1d:11:77:6f:8e:42:db:87:43:f5:dc:02:73:76:
         5a:95:d0:95:17:fd:e7:b6:81:07:02:a7:dc:a8:e3:3a:72:44:
         d4:dc:ec:c9:5a:e6:67:d7:20:7a:d8:c0:cc:75:bc:b1:b4:ea:
         00:b1:bb:13:e3:e6:67:f5:2b:7a:1c:da:ad:61:17:dc:52:f1:
         5a:23:f6:20:4d:65:ee:06:9a:1b:c2:cc:2b:ee:cc:70:c0:ee:
         3c:8d:af:b4:88:44:92:0b:7d:6c:9f:e3:84:4a:50:00:8b:68:
         ca:59:89:4d:fc:99:30:2d:74:f0:62:74:72:da:1c:d2:93:b8:
         5a:88:33:fb:b8:d6:42:30:26:e5:b6:e4:0b:40:18:97:3a:7b:
         b8:a5:2f:7b:81:78:61:84:15:95:63:19:30:f8:19:e8:e2:78:
         9f:ff:5c:c4:d3:34:7c:a2:95:30:f7:58:6b:15:5c:70:15:5c:
         f3:fe:6f:f6:ca:94:cf:64:ee:ea:ff:76:6f:1e:ff:82:e2:bd:
         59:42:6b:e0:42:4d:82:ec:72:22:a9:40:50:14:b7:af:3d:e5:
         ee:30:36:3d:28:aa:5a:ae:e3:fd:5c:54:3f:c2:92:12:73:69:
         93:2f:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:09 2025 by rpki-client