Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa
File:                     527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa (raw, json)
Hash identifier:          7ur3CC8DURNIqxkCOE79e/26CjhlGGbqoynGIn9Bf88=
Subject key identifier:   D6:07:56:E7:B1:DC:67:E0:39:E5:CC:EE:88:19:D5:B6:26:5B:CC:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B461700462672CBCAF4871400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.199.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:17:00:46:26:72:cb:ca:f4:87:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=9e631a69-f098-4f71-b634-cc3439ef15a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:6d:03:1f:bf:92:6d:97:c1:c5:b7:45:5a:
                    43:88:27:53:66:54:48:86:a0:65:5d:1c:c3:0a:fe:
                    e2:62:31:2c:8c:7c:fe:3a:d6:d8:02:15:10:7c:c9:
                    d5:62:3a:bb:d8:4c:94:1f:02:9e:5b:39:35:22:2f:
                    e3:51:77:c3:04:f3:f5:fa:d7:44:ee:e6:87:48:e0:
                    00:7e:1c:fc:fc:b4:28:cb:eb:a2:d6:1b:ac:b6:d4:
                    95:52:47:b3:d0:48:a9:52:1b:fc:19:b6:71:8e:e7:
                    7b:c6:5b:80:54:13:48:d7:e3:34:40:0d:a7:a7:7d:
                    02:7c:d8:75:39:be:7f:58:69:62:ac:85:ed:3d:f8:
                    fb:9f:84:c2:7e:dd:98:5a:21:7f:b8:34:3b:cd:31:
                    55:ba:a6:1b:ed:e5:f6:f2:61:97:c3:a4:e8:f2:da:
                    88:57:34:25:c3:b2:16:f5:4c:4f:77:c0:91:90:65:
                    27:45:44:61:e8:28:b5:2c:2a:74:48:a9:27:8e:6b:
                    75:dd:f8:ce:a6:8e:f3:27:7e:bf:23:11:78:6f:dd:
                    e1:3f:5a:2c:ea:d9:33:35:4f:1c:54:9d:95:b4:d6:
                    0d:de:24:51:65:b8:b8:5e:b6:ce:3a:d8:7f:8e:6d:
                    f4:11:f9:dd:fa:bd:8d:28:ef:3a:6d:46:f4:35:5e:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:07:56:E7:B1:DC:67:E0:39:E5:CC:EE:88:19:D5:B6:26:5B:CC:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527793f6-7f0a-3e4a-8d30-adcc72233bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:07:2c:93:45:f8:d3:8b:9f:c0:f8:ef:fa:83:94:7a:7f:92:
         8c:00:3a:61:4a:fb:6b:1c:fd:62:8f:eb:d0:5f:45:83:6f:a6:
         7f:8c:b2:9e:ea:9f:90:50:89:8a:fa:71:88:1a:51:74:cf:77:
         92:2f:ab:20:87:f2:57:5c:1b:66:0a:26:c6:5f:2b:ef:f3:89:
         29:f1:66:43:6d:7a:9b:54:c7:2e:b5:63:03:8f:38:59:09:37:
         b8:0d:ee:d1:29:31:4c:e5:82:4a:b3:c1:1b:0e:1a:90:32:e1:
         93:97:fc:72:75:aa:6c:8b:f9:35:59:23:8f:b9:1b:8d:57:4e:
         ef:12:0b:c0:68:d3:f3:c1:da:5e:10:f2:a2:78:27:de:e4:86:
         10:9c:79:73:d4:47:6b:70:23:c8:87:a3:d4:14:26:27:09:77:
         d4:e5:84:3d:78:25:2d:69:fa:24:e6:3d:37:4b:60:a8:ec:27:
         b8:45:6f:41:d7:18:bf:07:29:45:9f:c0:b6:ad:f1:cf:58:63:
         3e:1f:f9:e0:50:ba:9c:fe:10:14:45:b1:74:71:2f:92:a5:f8:
         81:0d:b0:28:21:99:e3:b4:47:6e:28:86:70:aa:65:c8:14:b6:
         06:1d:f1:af:c2:98:a8:78:e2:a8:63:ed:1f:d4:18:46:d8:5c:
         8e:1d:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:26 2025 by rpki-client