Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa
File:                     250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa (raw, json)
Hash identifier:          BmzeO/hatEMWhB0LpU5/JMmUF7h+jGIXWQ2R0kjoFUQ=
Subject key identifier:   AD:B3:E8:75:67:FB:06:7C:8F:C8:20:7A:BF:C3:77:64:7E:DE:E6:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF70A70DABEFBBF5D193B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.58.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:0a:70:da:be:fb:bf:5d:19:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=2b336284-1c04-4b40-96ee-18ac89e4e68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:b4:09:d2:8b:86:76:4a:0f:e5:87:9c:65:
                    8a:69:ed:db:bf:84:2d:58:25:7a:8e:dd:b4:7c:13:
                    0f:ad:55:8d:59:1e:5f:54:d1:ee:ae:03:17:56:3a:
                    8b:f6:b0:34:07:6a:ad:f0:4c:b8:65:36:d4:d5:79:
                    4d:7a:f9:98:26:7b:7c:67:54:73:76:ad:f4:1c:74:
                    1d:e0:ce:fb:73:27:5a:99:4f:dc:70:0a:d4:8d:d4:
                    3c:e3:67:4f:d1:a2:de:40:75:8e:4b:1f:20:86:23:
                    b7:7d:03:d0:f5:d7:d3:0b:12:0e:ae:8c:37:a7:04:
                    71:f5:bb:4a:90:b6:9a:34:ce:bf:82:b6:26:c6:95:
                    cb:fb:1e:3a:35:23:b1:be:3b:95:42:d8:75:30:eb:
                    83:f1:cc:68:a8:a1:1c:62:f1:0d:3a:1e:b4:26:ed:
                    33:be:66:49:0c:c6:6c:12:12:ed:dd:21:08:6e:a6:
                    07:15:2d:c4:a3:ab:61:e7:ce:8a:23:f9:ea:4b:36:
                    35:57:01:2e:a1:51:20:1a:60:97:04:81:5a:bc:5f:
                    23:a3:c9:b2:7e:33:60:4e:95:de:7b:68:07:fb:b7:
                    09:3f:fe:94:b4:90:98:2a:0d:f6:34:55:46:f0:81:
                    d5:bd:ae:96:35:22:a1:fa:05:99:ef:60:69:30:a1:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:E8:75:67:FB:06:7C:8F:C8:20:7A:BF:C3:77:64:7E:DE:E6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:cb:02:99:95:af:36:ef:07:ef:8b:da:bd:a0:a7:27:5c:
         3b:eb:bb:de:2c:07:b0:4c:be:ec:53:98:e9:bf:20:73:38:e2:
         45:b2:e0:ae:fd:74:ab:fb:22:b1:23:b0:fe:6d:e5:1b:75:ab:
         72:16:ef:fe:a1:8e:62:8e:08:c1:7b:42:fd:26:03:95:ee:48:
         66:16:7c:3d:68:29:4c:66:19:32:34:1e:8f:42:5e:d8:db:2a:
         84:67:46:5c:37:79:58:d9:7d:57:e8:c3:1e:23:12:ca:b2:89:
         1a:10:87:50:8e:7e:ba:de:1f:91:4c:1e:45:c8:3d:e7:b0:3d:
         57:b8:b6:94:77:02:80:1c:72:8f:92:bb:75:c4:10:29:c3:ca:
         8d:23:2b:5c:aa:d0:c7:45:d6:7a:f7:27:36:b6:9a:27:4f:d6:
         7e:5e:d9:75:99:d0:e6:47:b9:ce:49:79:4d:15:7a:6e:d0:84:
         2e:fa:e4:df:59:f6:76:3e:ba:b4:12:d4:63:09:f8:f8:08:0c:
         e6:8d:70:04:7c:d3:be:ba:9a:8b:4e:8c:99:f2:0d:ec:a3:f3:
         60:f2:75:2e:c5:40:3c:c8:04:2a:64:df:fe:da:97:1c:04:b7:
         18:91:27:44:3a:2b:44:2e:e0:0f:72:15:02:70:ce:d1:96:1d:
         da:d9:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:37 2025 by rpki-client