Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49236af2-2393-386f-9ccb-0bbfae340d6e.roa
File:                     49236af2-2393-386f-9ccb-0bbfae340d6e.roa (raw, json)
Hash identifier:          4zp0wSusYl8k9B6sH2HMSVHmE8UI71FKX66oQ87QEvs=
Subject key identifier:   C7:6C:F5:B8:5C:41:9A:DA:76:58:C5:2E:77:9D:FB:21:3D:E5:DD:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B6A61EF859A754628579E4A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49236af2-2393-386f-9ccb-0bbfae340d6e.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     20940
IP address blocks:        23.45.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ef:85:9a:75:46:28:57:9e:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=0c8c48a8-4fb0-45da-a6f5-1035a02406db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:f7:72:b0:5a:8c:77:c4:d0:39:e2:32:48:
                    f5:c0:7a:63:b2:c0:af:88:6e:28:68:29:e4:10:88:
                    e1:99:dc:ff:8a:bf:b6:71:8e:15:7e:28:f3:09:16:
                    d4:8a:db:dd:71:61:ab:ae:c2:64:17:8f:bd:40:9f:
                    87:58:db:b3:36:d2:7c:d2:b7:ce:3a:08:9f:44:e2:
                    39:5b:5f:e5:38:bc:ca:55:14:39:3b:ab:27:8d:1b:
                    9f:b5:9d:8c:6e:e0:44:97:21:22:97:b8:c4:df:0c:
                    9d:9b:ca:52:fd:85:b1:28:f6:8a:75:ca:fb:00:4b:
                    7f:b4:58:f3:06:d4:ba:04:1c:a7:53:98:96:3a:53:
                    90:82:a9:6a:b6:2b:64:32:25:5d:ca:7c:a1:eb:49:
                    e5:fa:a6:5c:4a:33:f0:52:18:5f:7f:d1:59:8c:4b:
                    88:60:c2:65:b1:a0:51:cc:70:4f:b7:22:5e:70:1a:
                    c7:b3:21:b3:6e:69:bf:8b:82:4c:1e:31:6e:17:7b:
                    59:70:f6:b3:81:8d:a1:44:e9:bc:95:30:4a:a5:15:
                    b4:40:82:d0:b7:20:e6:63:72:f6:04:73:d4:b4:9a:
                    63:4c:48:7b:97:d3:80:ba:91:d5:b4:b8:04:f4:d6:
                    f5:e2:4a:19:4e:23:1e:a6:79:8f:6f:f5:6a:66:4c:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6C:F5:B8:5C:41:9A:DA:76:58:C5:2E:77:9D:FB:21:3D:E5:DD:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49236af2-2393-386f-9ccb-0bbfae340d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:27:26:e0:53:d0:c2:0a:be:ac:1f:93:19:a1:b3:ea:20:3f:
         45:78:7f:5b:e2:bb:df:2d:b0:e9:18:fe:3c:53:9a:74:99:e7:
         de:56:40:0a:29:0d:fa:47:6b:ae:a3:81:d3:4a:8b:c6:c6:3f:
         50:64:88:45:bf:f0:65:7d:71:02:fe:19:30:be:da:e8:8b:1f:
         4d:55:b9:2a:17:0d:25:c8:9e:1c:64:03:87:ce:64:0b:0d:62:
         af:26:50:24:43:19:96:a1:41:bd:51:85:d8:db:5e:24:80:1d:
         af:1f:2b:d2:3c:cf:50:99:08:59:e3:78:50:5a:45:77:40:43:
         c6:9d:7f:44:c6:ac:78:e4:a1:08:85:98:e1:ed:11:b3:3a:32:
         33:60:58:b9:39:32:42:18:83:f9:60:0c:17:91:c9:19:72:c6:
         1a:ef:82:16:33:f3:d9:a8:34:42:c7:1e:b2:33:87:f5:81:b1:
         df:73:14:76:d3:84:f7:0b:b9:95:e6:f7:cb:c8:af:c4:82:a6:
         ef:ac:75:69:81:67:80:23:c7:62:8a:c4:7e:84:56:55:d4:bf:
         31:80:78:5f:78:2a:bf:04:2f:00:73:43:b0:f8:e7:64:a4:63:
         b5:bc:c3:1f:74:3d:f4:4f:62:30:3a:dc:91:ef:09:ed:2b:a6:
         54:54:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:54 2025 by rpki-client