Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa
File:                     6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa (raw, json)
Hash identifier:          7X8Ev4DVMqld01QpV818O1dyaqVxXIv4hLYaNWHxxl4=
Subject key identifier:   C7:89:F5:2D:6B:2C:E8:CF:00:BA:75:76:B0:58:AF:0F:41:7E:F5:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B715D08CA79441CC098565400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     20940
IP address blocks:        23.213.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:08:ca:79:44:1c:c0:98:56:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=30f39557-b0d2-46cf-837a-a9ee4f94b8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:66:8d:b8:04:d8:d5:05:11:94:97:27:ad:
                    77:ee:c7:17:40:ae:aa:71:94:56:a8:a3:5b:00:3c:
                    ba:06:02:f6:06:30:67:65:46:bb:32:58:15:79:5a:
                    3d:01:3c:d1:a7:2c:02:30:12:4c:04:6a:9d:cc:2e:
                    f3:85:7a:cf:c1:7c:1f:bb:f2:ed:a4:39:a5:3f:80:
                    45:b7:57:17:7f:13:70:b2:74:99:55:ec:c2:24:38:
                    28:0c:c8:85:10:47:21:36:da:01:c0:73:ed:f1:30:
                    01:4a:ee:bc:25:e0:eb:39:6a:f6:14:96:27:57:b4:
                    d7:4d:22:98:58:91:78:87:8c:de:4e:69:67:1f:b5:
                    a7:5f:62:48:fd:d3:c5:2f:73:52:77:1d:bd:95:e4:
                    43:7f:49:c0:4e:e6:16:39:f9:26:f7:c5:3b:76:f0:
                    cc:94:61:20:6d:e1:a0:de:91:22:aa:88:32:9a:59:
                    49:97:ea:56:fd:4d:82:6d:f3:c0:8a:dc:13:05:8e:
                    82:78:2a:7a:30:64:47:1b:20:02:68:43:18:ad:16:
                    3d:b2:68:34:a2:1e:48:04:83:27:79:74:6f:b3:28:
                    65:c2:6e:90:b9:17:5b:59:48:4b:91:65:07:f2:5c:
                    04:be:d8:d1:f2:86:81:be:b8:e8:83:be:10:12:3d:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:89:F5:2D:6B:2C:E8:CF:00:BA:75:76:B0:58:AF:0F:41:7E:F5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e7:5f:57:0a:1f:b1:f2:82:4e:79:a5:2f:f3:66:49:d9:39:
         17:ea:35:f0:94:35:2b:66:fe:36:95:3d:24:69:3f:61:d6:a6:
         ec:37:9a:7d:f9:d7:44:64:4a:79:02:c9:38:de:e3:f9:88:34:
         80:09:e9:da:de:32:6a:4b:68:e4:ca:a2:ce:20:65:6b:1a:f6:
         c9:b7:f4:86:e8:1e:4d:a5:09:a9:ab:6d:b3:7c:d8:1b:b1:24:
         8d:0b:59:29:b9:63:e7:72:52:62:f8:0d:67:05:7f:00:f4:fa:
         a1:4d:3f:e3:77:a2:8d:9e:da:1e:ed:23:6a:c4:9a:4b:10:d8:
         77:95:32:a2:c7:ae:98:1d:c5:7e:d1:e5:82:35:3b:50:94:dd:
         08:6d:d0:c3:5d:77:92:c4:d4:89:60:6d:b9:26:98:96:c1:c1:
         ec:8a:97:e8:a6:fb:07:e6:66:82:6b:72:96:0c:11:67:56:79:
         3d:00:a5:bb:9c:49:91:cb:dd:83:e9:88:7c:3f:bc:09:52:c8:
         89:22:dd:89:33:b7:57:1f:1d:f5:8a:14:b6:ef:58:1b:29:cb:
         43:28:a6:7f:02:59:51:a6:88:3e:07:04:aa:44:b0:7c:18:60:
         da:4d:ec:c8:ad:ff:d8:49:e0:76:a1:10:0f:26:4f:7b:d3:b5:
         bf:df:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:18 2025 by rpki-client