Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55cec0fe-b74c-33f3-b6b4-858ad84751fe.roa
File:                     55cec0fe-b74c-33f3-b6b4-858ad84751fe.roa (raw, json)
Hash identifier:          1efr/Grtke+8VBCEEOiTYQZWI+fFD6FGa3h4E7qmqe0=
Subject key identifier:   17:FF:79:CF:49:90:EC:70:E5:46:2E:6F:6B:0D:62:D4:24:D4:82:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B68FCA468067A26E892FEF580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55cec0fe-b74c-33f3-b6b4-858ad84751fe.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     16625
IP address blocks:        23.218.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:a4:68:06:7a:26:e8:92:fe:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=59570e05-5744-472e-be51-28f128a4a378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:32:23:d7:50:3b:68:9b:e1:a2:a3:c0:7c:
                    94:6c:4b:c1:1f:d8:01:fd:74:c4:ee:74:0c:40:da:
                    5a:e2:a5:60:c6:a8:2b:d5:32:6a:79:33:a8:39:16:
                    48:64:e1:0a:9e:26:40:af:de:1a:63:54:26:eb:02:
                    81:a7:f7:aa:57:4e:d5:61:6f:2e:96:a2:47:41:ac:
                    88:50:0e:dd:eb:0c:32:fc:b9:ce:8c:56:d3:ef:00:
                    a0:28:1f:40:bc:4b:43:4d:84:37:9a:00:de:9e:94:
                    27:d7:7a:ed:2c:b8:77:2f:71:cc:74:73:0c:ef:af:
                    fd:3b:cd:20:5d:47:34:24:f2:94:cd:02:aa:c4:66:
                    88:d6:24:3b:2e:d7:32:6b:fd:24:38:bd:27:65:fa:
                    b9:e8:98:13:7e:61:e9:1f:0a:38:e4:44:85:dd:4c:
                    2d:76:1f:99:4b:9f:45:37:64:6b:1b:c9:35:b4:d3:
                    53:d3:95:93:5b:a0:af:b3:4e:58:f0:0c:4a:36:24:
                    71:76:8b:47:d0:c0:c7:83:8e:09:13:54:92:d2:5c:
                    30:b7:5d:77:0c:be:76:f7:35:69:3c:9a:31:0f:71:
                    e9:9a:3d:57:c2:09:e2:ca:50:b2:7c:7c:54:2e:a0:
                    de:a6:09:09:0a:b9:19:9e:b8:d0:57:c9:09:65:b2:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:79:CF:49:90:EC:70:E5:46:2E:6F:6B:0D:62:D4:24:D4:82:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55cec0fe-b74c-33f3-b6b4-858ad84751fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:48:07:06:18:22:20:9b:13:b3:5c:39:e3:52:1b:1a:e0:
         66:07:ae:30:b5:f4:47:ef:93:b5:0a:5f:37:f7:2b:56:99:53:
         d0:30:21:46:c4:db:b2:0f:84:cf:f0:c9:e3:0b:cc:65:40:cf:
         d6:ab:3e:09:db:1a:a6:5c:71:dd:c2:76:ec:fe:b1:ca:71:96:
         e3:1b:07:eb:6a:6f:31:bb:5b:46:4d:9e:1a:5f:9f:fe:e8:8c:
         d9:db:3a:6e:21:66:fd:e0:10:fa:6d:c0:14:6d:8d:e0:e0:96:
         31:a5:67:80:c4:ef:55:7e:35:de:12:d6:94:8f:64:80:8c:5e:
         99:69:97:5e:8a:3d:b5:7f:bd:9f:bd:8a:5f:eb:e7:e8:09:83:
         8c:42:07:ea:e9:3b:6b:94:b3:89:ed:9c:c4:1d:94:3b:76:73:
         48:d5:dc:43:91:14:2f:46:06:76:96:1b:ac:1b:1f:15:cb:0d:
         5d:5d:af:71:66:70:a7:ca:d4:56:be:05:8c:c9:02:0e:31:e1:
         8a:08:6f:c5:80:ac:f4:d0:d1:b5:4a:f3:fc:55:4f:d1:11:a5:
         72:6f:33:4f:fd:4a:5d:8d:85:eb:c3:2d:51:c4:59:08:7f:ad:
         19:11:98:72:ef:96:4c:da:b9:93:7b:5d:ea:1c:14:5a:72:6a:
         dd:fb:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:55:09 2025 by rpki-client