Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ea13a54-ba7f-34a2-828f-6ae9dcbd9cb5.roa
File:                     6ea13a54-ba7f-34a2-828f-6ae9dcbd9cb5.roa (raw, json)
Hash identifier:          K0sX3me/UuNc+Ei3g57zd2Lmb7MjJ+HPhceJfce2Ee8=
Subject key identifier:   FA:1E:0F:28:54:2F:86:9A:5C:BA:1B:83:0B:34:D4:F8:9B:66:8D:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B5B075B1B627D303BB6261560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ea13a54-ba7f-34a2-828f-6ae9dcbd9cb5.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.210.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:5b:1b:62:7d:30:3b:b6:26:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=7d10df67-80a1-4ba7-892f-41b9e0911e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:5c:b4:fd:dc:e2:76:32:3b:3d:4e:a5:a4:
                    de:80:fb:ac:b8:ce:32:d7:37:f2:d6:aa:ef:0a:7c:
                    8c:a4:45:c7:8b:3f:ad:85:29:e9:9f:90:1d:af:b6:
                    30:10:64:a6:fd:7d:96:cb:1f:31:7a:9d:a2:d1:bf:
                    cd:af:0d:12:e0:ec:9f:ba:e8:89:0c:8b:46:d0:5f:
                    6f:a0:93:95:40:55:53:0e:64:38:9c:64:f4:9b:12:
                    7f:e4:33:e0:46:67:e9:d1:57:24:9b:5c:49:ea:91:
                    7a:f0:46:9d:36:13:c3:e6:30:50:28:80:36:15:43:
                    58:78:68:1c:10:33:45:1f:95:9b:38:6f:dc:89:b3:
                    03:c0:7c:c2:83:9e:2f:18:4f:5d:cd:33:01:80:0b:
                    1f:34:e1:1c:a0:00:a5:ca:2b:d7:b3:33:a7:1e:d6:
                    ef:80:f4:e9:1c:aa:6b:9c:90:fe:03:b8:d9:2b:d4:
                    01:9e:d7:b4:89:7b:94:ce:3e:04:09:21:4a:88:a0:
                    4c:04:ac:a0:57:23:5b:ab:b6:1d:56:bc:8a:c7:95:
                    3c:2f:ca:4f:9b:61:77:8b:49:0b:41:c6:93:e3:b8:
                    cd:a9:93:11:7a:43:6e:13:6d:3f:de:dd:a8:d5:40:
                    2b:9e:61:68:91:95:b8:25:47:ca:a5:97:32:46:3a:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1E:0F:28:54:2F:86:9A:5C:BA:1B:83:0B:34:D4:F8:9B:66:8D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ea13a54-ba7f-34a2-828f-6ae9dcbd9cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:56:5e:b3:b5:6a:8b:07:ff:50:49:87:c3:58:30:d1:f6:ce:
         50:ba:10:cd:e5:b0:59:cd:42:b7:ab:70:b8:c9:2f:9e:aa:4b:
         f7:9e:56:60:f8:bf:1a:bd:a1:35:c3:8e:58:d4:18:fb:8b:3b:
         bc:e5:13:78:82:c2:c7:ca:eb:1f:3c:9d:23:6d:ba:d3:d9:59:
         1d:b7:f9:5c:d2:e9:b4:56:c0:f9:60:d9:d0:e1:08:0c:cb:81:
         f7:df:f2:05:60:6b:45:76:f0:e5:f8:c5:3a:c9:37:33:35:3a:
         52:8b:fc:e9:a0:16:c7:c6:e2:ee:6e:b6:b3:36:2b:00:6b:e9:
         cd:14:0a:23:df:62:41:5c:08:04:ad:fa:1e:98:a8:8a:5b:2a:
         3c:92:ce:d7:76:c8:c0:00:4d:57:30:bf:e8:69:1f:08:ac:49:
         29:df:80:01:de:4c:0e:4f:0e:46:6f:07:27:c2:77:26:87:28:
         23:42:96:74:e8:d8:ed:66:e3:94:38:fd:7d:60:8c:5c:c0:c8:
         3a:bb:f0:24:95:d5:ea:da:ed:cc:54:ea:ed:8f:66:80:cc:4e:
         a1:f2:69:25:f2:83:34:fe:cf:99:61:36:04:8b:ee:04:ae:04:
         b0:52:e9:c5:09:a6:77:c7:54:91:81:50:e9:a8:0d:64:01:28:
         b6:2a:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:28:07 2025 by rpki-client