Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420a27c4-318c-3000-b071-c3708cf2f96d.roa
File:                     420a27c4-318c-3000-b071-c3708cf2f96d.roa (raw, json)
Hash identifier:          NHzBsd69p0qzRDBLy/OWRYrqKsBA5eWFDD+qRYcZ750=
Subject key identifier:   80:1C:A4:89:58:25:C5:A7:A9:6D:B0:CB:5B:0E:6B:0A:9B:B3:C6:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1AD1AC6CC82606823177BE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420a27c4-318c-3000-b071-c3708cf2f96d.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.41.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:ac:6c:c8:26:06:82:31:77:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=13e16810-e56e-41fd-b94a-bf8ff30440d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:37:3b:ff:b5:41:a2:ac:7f:27:f1:3f:14:09:
                    dc:2d:1d:c3:ed:dd:af:a9:f7:d3:48:2f:a6:87:0b:
                    b6:b3:6b:07:11:ef:4e:31:e7:2d:74:e8:db:6e:4e:
                    0e:55:55:37:54:be:cf:26:5d:b9:d2:33:82:1e:96:
                    8e:5d:08:27:0c:61:e4:fa:de:ed:a1:75:4e:33:18:
                    58:0e:f6:13:1b:16:f6:2b:a9:9a:23:c6:2f:79:db:
                    92:c6:96:6b:89:33:0b:0c:14:cc:01:92:92:f1:3a:
                    dd:de:5f:f3:72:06:ea:db:4c:07:9f:5f:fe:be:ae:
                    94:58:dd:72:8c:4c:f5:61:9b:b8:e0:4c:5c:1f:f4:
                    42:4b:4a:23:dd:6b:ec:9e:f7:86:a9:76:e8:bd:e0:
                    a0:64:32:ea:21:a7:1f:b6:f1:a4:a3:0f:7e:6c:43:
                    24:8c:52:7a:f3:89:53:57:e8:c6:05:f0:5e:9b:3b:
                    05:cd:3e:4c:d0:00:68:72:c8:3c:5a:fd:ae:90:d4:
                    f3:ee:26:6f:a4:a8:7a:68:69:b0:6a:8b:5b:65:68:
                    7d:4c:7e:51:e9:c5:cf:ba:a8:1a:22:81:39:22:a7:
                    96:14:c7:3a:c1:84:e0:13:48:a0:86:50:2a:d0:73:
                    1d:8a:6b:bb:3e:b2:dc:23:06:c9:58:37:b6:a8:a4:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1C:A4:89:58:25:C5:A7:A9:6D:B0:CB:5B:0E:6B:0A:9B:B3:C6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420a27c4-318c-3000-b071-c3708cf2f96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.41.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:f1:35:26:41:87:48:d1:21:b8:25:b6:89:7b:e6:a1:8d:
         3c:7e:c0:c3:ab:63:e4:f3:66:b6:8e:a6:00:c9:f5:3f:27:d2:
         da:66:8a:96:59:5b:c7:77:59:da:bd:9f:e4:bf:47:2c:68:56:
         7a:79:d5:36:61:14:be:e4:57:6d:6a:91:e6:44:3c:42:c5:a3:
         59:6a:11:f1:82:4a:63:e4:b9:ce:ed:34:5d:df:07:a9:70:39:
         4c:08:13:05:23:d5:21:2d:cc:21:e1:18:54:39:e0:39:7c:eb:
         86:26:6a:18:4b:11:f8:8b:4c:4d:fa:84:92:65:7d:a8:19:81:
         f3:92:7e:b1:15:6d:70:b8:86:40:7b:03:05:9b:38:20:84:0a:
         3f:77:db:01:15:07:85:72:f7:8e:78:db:b3:e0:12:ca:6e:96:
         4a:bd:26:5e:57:43:0e:9a:e8:dc:e8:d3:76:be:80:cf:0a:cf:
         22:12:d5:dc:8a:ac:ce:fa:c3:9a:e5:05:e8:62:a6:13:47:b6:
         85:b7:11:0b:8b:e8:57:b5:aa:17:4b:0a:50:b1:f1:20:1a:80:
         69:da:cf:1e:e6:90:6e:c7:57:5d:6e:98:d3:d9:a8:cf:c4:30:
         0c:87:70:a3:24:29:99:cc:80:03:73:fb:9e:81:eb:f2:6a:c2:
         d1:c7:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:30 2025 by rpki-client