Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb2068e-b4f2-34d0-bc66-359c0c09e34e.roa
File:                     3bb2068e-b4f2-34d0-bc66-359c0c09e34e.roa (raw, json)
Hash identifier:          CgttyZUuIz5gVCnvaRujA/E+q6PEqs9al170gDMTSXo=
Subject key identifier:   A4:B3:35:D2:A0:B4:F9:41:95:B5:1B:12:21:0B:68:5B:1F:BA:37:4E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1AD1A55A2D1756CD1DFE1800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb2068e-b4f2-34d0-bc66-359c0c09e34e.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.36.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:a5:5a:2d:17:56:cd:1d:fe:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=c32d9630-34a5-4d94-8f44-63ecf60a2452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:68:7a:4f:ea:9e:3e:a3:0b:7c:cc:52:55:
                    48:c1:f9:6d:55:96:36:d0:17:50:4b:df:e5:51:af:
                    16:98:c2:b2:b4:79:97:3d:37:bd:98:2e:fd:6e:5e:
                    c9:7d:1d:5d:8c:c6:25:83:d6:d5:70:6f:fb:de:7a:
                    76:16:7e:2a:44:fc:aa:83:33:9c:18:1c:36:0a:ec:
                    0a:52:ae:32:4e:1e:14:c5:26:5a:d1:d6:23:ad:b6:
                    c8:b2:fb:6f:9a:86:a1:42:41:09:8a:8b:9a:18:b5:
                    32:67:ba:9e:79:8f:2f:cd:fb:9a:26:81:9d:f1:3f:
                    f4:78:07:09:e7:34:94:76:b9:a5:90:3f:1c:d4:72:
                    53:24:d6:f5:50:84:69:a7:9d:aa:28:77:f2:97:e7:
                    33:c0:16:3e:ed:28:2c:66:72:4c:4f:41:7d:a7:84:
                    b0:1d:9e:30:11:c5:ea:02:b4:ff:3c:41:d8:59:39:
                    4f:09:24:4b:38:d4:b2:b3:7e:04:36:5d:f3:8f:74:
                    6d:2d:96:eb:fb:4e:9d:31:df:69:f6:32:8b:ec:85:
                    a1:dd:38:82:0d:91:a5:6d:0d:ea:79:a2:e8:06:84:
                    8e:57:42:b3:1e:d5:9e:8b:1f:f6:fc:15:31:44:07:
                    f8:1b:dc:a1:fd:01:75:f0:cf:d2:7b:b9:7a:79:1c:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:35:D2:A0:B4:F9:41:95:B5:1B:12:21:0B:68:5B:1F:BA:37:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb2068e-b4f2-34d0-bc66-359c0c09e34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:09:54:29:57:7e:07:f2:a0:72:01:01:4b:ed:d8:88:e3:e7:
         ed:d5:c0:87:a3:ae:a7:2d:cc:ec:11:12:42:d1:eb:80:e0:46:
         88:71:b0:7b:44:64:14:63:9b:c7:24:2c:44:dd:97:be:2c:aa:
         02:7e:5e:94:ed:86:7e:8c:6c:a4:a9:c2:ad:12:c5:c6:c7:71:
         8a:21:99:1f:3d:37:0d:5e:bf:db:b8:68:d4:71:77:4c:24:c4:
         a7:64:3e:18:66:1d:73:8d:dd:db:09:3f:75:32:5f:d3:3e:97:
         80:a2:47:12:70:cb:c8:51:74:a7:8e:1c:c5:cd:85:7b:f3:14:
         52:98:9b:be:38:31:fc:07:43:e7:3c:91:7f:f7:f1:73:0d:04:
         48:e0:e8:af:47:d2:d2:ff:45:ea:53:3d:9e:51:3f:9e:f0:30:
         57:42:d4:83:82:0e:ee:d2:76:c5:4d:6f:17:96:06:a4:be:a0:
         6e:69:a2:52:79:ed:89:f8:45:67:dc:b7:b3:df:eb:84:ef:43:
         d3:75:d2:5e:43:71:9f:01:ce:ce:fa:37:ac:57:97:23:f9:c6:
         37:d1:89:91:2c:0c:53:81:be:ed:ca:8f:2a:4c:b8:05:bc:7f:
         b3:67:7c:5a:84:95:59:95:4c:7e:f3:13:69:52:21:ae:a7:ef:
         fd:56:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:40 2025 by rpki-client