Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b36f73-bf8f-3932-8d9f-f05f933598dd.roa
File:                     38b36f73-bf8f-3932-8d9f-f05f933598dd.roa (raw, json)
Hash identifier:          F16k/Bp6N5g759zLoqqRHJShj1JmYpcgKpnktkrAAp4=
Subject key identifier:   DB:18:F2:0A:39:CD:EE:CC:75:76:8E:15:5E:03:18:B8:8A:05:B4:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2496E5864244009249DEB740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b36f73-bf8f-3932-8d9f-f05f933598dd.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.52.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:e5:86:42:44:00:92:49:de:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=d1d62da7-44ea-45d4-af38-5da1b6448df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:01:90:9b:79:67:fb:45:f9:b8:43:b7:0c:
                    2a:af:d3:3e:a6:e1:35:c2:1a:5c:c4:8a:62:f6:b4:
                    40:7a:45:d5:ae:bb:9e:d8:cd:7a:79:be:15:69:dc:
                    f3:de:89:3d:2d:13:0e:6d:a8:21:94:e1:9f:34:5b:
                    5a:e5:00:4a:9c:39:c0:77:c1:c8:9f:74:45:38:a4:
                    f9:a0:05:a6:19:32:0a:7f:2a:02:b6:76:09:55:b3:
                    ef:e1:9d:ba:8c:5c:4c:f8:5e:d5:a4:bd:66:c2:35:
                    44:18:e3:ef:0e:6e:7e:8b:5e:da:9b:a6:54:f3:c9:
                    c8:82:0a:a0:40:82:50:6c:85:96:78:1b:ad:1a:f5:
                    90:fa:c9:36:c1:0c:74:58:ac:1e:f3:d2:b6:66:48:
                    ab:f5:5f:0f:3f:af:b4:94:e8:db:35:4f:08:bd:0f:
                    99:35:65:22:6e:18:6d:e1:66:b5:fa:fa:0b:10:71:
                    cf:ad:f4:0d:d2:3a:dc:f1:5e:62:ad:17:ec:9e:84:
                    ac:71:c4:49:27:3c:be:e0:6b:f8:97:3b:4e:7c:1e:
                    51:50:cb:31:a5:7f:fc:b5:fd:36:5c:94:de:7d:01:
                    0b:65:2f:8b:eb:b0:09:69:fc:1e:9e:c1:03:84:be:
                    40:8b:e3:c1:b1:34:39:a6:4d:5c:ae:0b:f9:d8:d2:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:18:F2:0A:39:CD:EE:CC:75:76:8E:15:5E:03:18:B8:8A:05:B4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b36f73-bf8f-3932-8d9f-f05f933598dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:45:d2:38:70:42:a4:ec:b7:5d:8b:e1:2f:aa:b1:18:d8:c6:
         30:7e:e3:46:b6:fe:94:15:15:bd:a6:a5:85:08:6a:c5:bc:8f:
         bb:c6:3e:a7:0f:78:2a:74:3c:88:c0:6d:69:ca:9f:a2:49:8e:
         d9:4c:09:09:40:52:be:b8:f9:82:77:27:09:ef:73:20:47:92:
         6c:fb:85:bc:7a:cd:0c:ad:dc:1a:b4:d4:66:ef:5b:41:ba:ef:
         5d:57:5b:93:20:c3:89:01:7c:8e:df:4f:95:44:f5:e3:e0:20:
         0e:51:cf:12:f2:d0:de:be:e6:c8:59:08:a7:4c:f6:a3:27:5b:
         63:43:fb:fe:e9:52:f8:63:b1:d8:62:36:3e:b0:24:ec:21:93:
         a3:bf:b4:72:09:58:97:90:a3:5c:77:84:ae:88:1a:22:11:3b:
         5b:64:7e:50:ba:fd:5b:78:e0:73:0e:c0:5a:21:25:fa:36:ac:
         b4:d8:7f:14:ee:30:8e:26:bb:3a:f9:7f:35:f8:d1:c3:2a:91:
         3b:2e:44:9d:ff:8d:c9:3b:1c:9c:e3:b8:79:10:11:16:6a:f9:
         34:d6:ad:7e:0d:83:b9:a2:e2:46:f2:21:71:c7:33:53:ef:60:
         cc:67:8c:8d:8a:47:6f:c4:d9:d3:a2:a1:d8:07:4f:88:6a:2e:
         4a:8a:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:02 2025 by rpki-client