Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69958e29-84dc-32aa-b268-74e4c79bcfa1.roa
File:                     69958e29-84dc-32aa-b268-74e4c79bcfa1.roa (raw, json)
Hash identifier:          T7Jfe8Z1H5qP9lbosidT/qlUvNfCZBgayEBIw4pNCp0=
Subject key identifier:   82:CD:35:4C:1C:5E:2E:67:EF:20:C5:4F:31:42:C6:BE:C4:4A:9A:59
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1C36E3CF92D977F631B73780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69958e29-84dc-32aa-b268-74e4c79bcfa1.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.45.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:e3:cf:92:d9:77:f6:31:b7:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7971e2c0-f1c5-4ea3-90b1-c5b1866d96f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:a6:09:7c:15:cb:8f:cc:e2:56:f7:3f:7a:
                    62:de:2c:9e:5b:c3:e5:6d:6e:73:d3:ab:96:93:4e:
                    5c:be:48:32:a7:80:4f:0d:a4:68:a7:30:64:28:77:
                    67:20:b0:28:8d:d8:8a:84:6b:9b:9b:32:b1:39:78:
                    9e:c0:c6:9a:79:ba:87:a7:64:a9:5f:a3:e4:ae:fd:
                    dc:45:00:6a:1c:3f:30:49:be:9e:0b:d7:c8:d0:7d:
                    13:ef:83:05:48:50:a3:80:5c:9a:65:59:df:93:4f:
                    14:8a:29:7a:74:84:30:18:9c:86:69:d4:90:0f:52:
                    20:68:3d:0c:ee:e5:2f:ce:22:67:ec:3b:f5:68:5a:
                    b1:75:7d:88:e9:3c:0e:fc:03:7e:9e:bc:d6:a0:6b:
                    aa:fe:3a:a5:ae:86:1d:81:1c:77:3e:ad:e0:df:1b:
                    ab:fd:53:fb:6e:e2:9d:ca:b1:1e:59:79:38:88:50:
                    bf:2f:d7:10:c3:2c:76:5b:c7:76:16:c0:88:bd:87:
                    49:95:9b:27:a6:b5:8b:70:90:cb:aa:60:8a:f7:ac:
                    a2:b5:67:36:6b:db:b1:da:1d:f9:03:6e:52:77:e7:
                    85:5b:43:5b:e8:fd:7b:e1:03:76:1f:8f:67:08:a1:
                    5d:c9:f7:08:e4:16:fa:6c:08:c1:4d:f7:22:c2:e8:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:35:4C:1C:5E:2E:67:EF:20:C5:4F:31:42:C6:BE:C4:4A:9A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69958e29-84dc-32aa-b268-74e4c79bcfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:02:a4:e3:4a:de:38:df:28:ae:64:c3:f9:54:9a:39:e1:50:
         41:cd:ff:54:8d:62:05:2f:19:11:f8:9d:22:54:f0:cd:3a:de:
         59:96:29:ba:cb:47:ff:a5:0d:8d:f6:40:7e:f6:18:5b:e3:7f:
         86:cb:a1:0a:07:37:45:2c:85:bc:65:63:dd:85:69:7d:52:9b:
         20:be:85:1a:8e:73:d0:83:7c:e8:d1:1c:5a:1a:4b:92:45:1e:
         db:54:fd:d5:1f:fb:be:03:bf:6b:4c:e8:24:20:12:e9:5e:6d:
         ea:88:4a:12:87:1c:62:46:fd:bc:7b:16:fe:52:8c:54:1b:bf:
         c2:2d:9e:ee:ad:ad:47:6f:0b:14:06:6e:fa:0a:33:62:38:e9:
         8f:f4:00:f4:8d:a6:57:60:2c:20:3d:19:f5:b3:0d:c4:d4:0f:
         ac:14:db:9d:2a:a0:ac:97:bd:97:be:e8:24:ff:23:d2:fa:b1:
         0f:9c:a9:29:45:1d:7f:5a:e0:3d:66:6d:98:8d:5d:3d:c2:8c:
         00:b5:51:bd:fa:92:94:95:54:56:f2:a1:95:a7:19:b2:d4:ae:
         f1:0d:02:be:89:d5:7d:d1:dd:85:14:6e:8c:5c:36:d3:df:69:
         cf:69:82:2a:4c:24:f2:ea:0d:76:cc:af:54:1b:ea:85:23:24:
         ca:44:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:48 2025 by rpki-client