Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24bf00a3-264a-3354-bfc1-ee80c35951c7.roa
File:                     24bf00a3-264a-3354-bfc1-ee80c35951c7.roa (raw, json)
Hash identifier:          EYF6Je9QC6V3Og+cgnQU7jlCMse/YvUiwMMGY5YhU/0=
Subject key identifier:   1A:8D:D6:41:F1:0C:F8:A9:87:14:B9:63:39:01:FF:6A:DD:F6:E1:37
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF7068680338AACA85457B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24bf00a3-264a-3354-bfc1-ee80c35951c7.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.55.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:06:86:80:33:8a:ac:a8:54:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=3d41b349-4a95-4953-aeed-c596669d09f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:f1:ea:95:02:84:3e:bd:0f:84:59:0e:1a:
                    48:f5:fd:a5:49:f5:c9:a9:d5:ea:53:a4:7e:72:f9:
                    4b:f7:8e:8b:82:40:f7:d9:d2:b3:52:7c:56:5a:e5:
                    e6:45:f5:5e:a8:5b:85:ed:ef:2d:1d:d5:c7:d2:8b:
                    47:95:e0:5d:14:3d:f3:ed:8c:3e:49:a0:ee:d6:ec:
                    0f:9c:ff:21:f3:72:d9:a3:5d:3e:b9:51:af:1b:60:
                    64:b5:e3:56:ae:51:64:64:71:72:24:30:5f:ad:c8:
                    90:d0:1d:ed:de:d7:69:5e:e8:e5:b9:32:eb:5c:5b:
                    f3:2b:00:c6:9b:9d:e9:b3:4d:ab:34:d0:65:25:70:
                    99:00:ef:b3:85:f0:3a:7f:d8:01:e6:19:db:e8:f4:
                    5a:10:38:7f:a5:f1:f6:06:4a:3d:67:e3:22:fc:e4:
                    60:8c:b8:5e:07:15:a3:30:17:61:a0:85:45:70:f1:
                    90:79:b0:cf:22:20:c1:2c:b4:96:f3:e1:3c:48:7b:
                    98:9e:a5:03:8b:cf:82:14:aa:e9:99:a0:8f:4d:62:
                    55:37:fa:3c:7c:5c:a7:34:0a:50:b8:27:ca:37:33:
                    f6:35:03:ad:ae:73:2e:e4:cc:38:e3:b4:3c:4f:8b:
                    01:ee:a2:1a:7e:22:c8:f7:ce:70:1c:68:5a:fe:b0:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8D:D6:41:F1:0C:F8:A9:87:14:B9:63:39:01:FF:6A:DD:F6:E1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24bf00a3-264a-3354-bfc1-ee80c35951c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:d4:f2:74:aa:6a:c0:f8:e6:42:a4:71:6b:08:0b:7d:0c:
         27:97:29:ee:af:84:63:f9:91:16:6a:0d:7f:39:8a:c8:8d:bc:
         f9:72:75:4f:be:e6:23:d5:b7:01:9c:64:e9:61:86:21:23:be:
         f7:6e:99:e8:a2:99:c6:05:1f:24:67:0c:fa:54:98:36:e5:68:
         56:be:25:3d:72:14:bf:c2:f8:17:5b:47:ce:f3:6a:62:94:fc:
         2f:2d:43:1b:c1:2d:a8:45:81:b0:fe:be:9b:76:85:2f:c6:f7:
         3d:32:e6:cf:5d:0b:e3:b7:05:98:1f:2d:75:4d:66:15:c9:56:
         58:eb:fb:1f:3d:6e:61:90:25:45:e8:9b:b4:fb:20:bc:f6:d5:
         c4:a1:70:16:ac:03:29:82:7d:e6:42:f1:31:d2:0c:2f:6d:ea:
         aa:5d:c3:65:e7:3b:c7:6d:66:94:b4:8b:d2:22:e4:ad:4a:ff:
         34:70:a4:6e:5e:74:12:c6:c9:ed:c3:33:bf:9e:e8:29:c2:e5:
         d3:65:fb:82:4b:7e:7c:d4:7f:97:e2:ed:d2:63:a0:30:09:47:
         6e:a2:a0:55:ae:60:f6:70:73:23:86:1b:4e:83:51:7f:43:48:
         5c:eb:5f:5d:16:87:5f:f4:3b:a5:84:3b:24:43:0b:c2:87:c2:
         02:83:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:06 2025 by rpki-client