Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72b76054-92ac-3600-8982-ac4e5be68899.roa
File:                     72b76054-92ac-3600-8982-ac4e5be68899.roa (raw, json)
Hash identifier:          bFYA9p3/QYl5Xi0hG4gQQSKJX/lW5KSNZ8me6X6XoGQ=
Subject key identifier:   6A:A9:6C:CA:1F:12:3F:C2:05:11:E8:49:18:28:E1:C6:64:DC:1C:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2496E599CBA2B7D01C7A1900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72b76054-92ac-3600-8982-ac4e5be68899.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.52.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:e5:99:cb:a2:b7:d0:1c:7a:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=05bf5b41-defa-4404-9b42-4f06bada19b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:61:8c:b9:7a:94:44:6e:57:6b:3a:21:55:
                    30:79:f0:c4:93:d4:70:fd:b6:8f:5d:7d:6a:93:bf:
                    e6:21:6f:05:0f:a1:ff:66:0a:91:e0:79:ad:1a:b5:
                    a8:2a:05:b4:8e:14:e9:cc:ee:e3:b9:fd:f7:f9:a7:
                    b2:e1:6c:09:82:48:48:d1:ea:c6:b2:9b:66:b6:94:
                    99:db:a7:69:26:9d:61:0c:3d:58:58:b4:99:42:91:
                    ea:7a:75:0f:40:0f:94:ed:4a:df:d3:05:85:61:a4:
                    93:a5:96:e4:e9:a8:90:e3:d4:b4:f3:fd:03:6e:4c:
                    5b:a4:ab:5d:8f:a7:10:15:c5:26:b5:95:c6:d2:d7:
                    76:dd:c6:35:b5:66:14:72:45:9d:71:c5:5b:a8:cc:
                    af:c8:d8:18:31:48:7e:a0:be:f1:06:97:d2:d5:a0:
                    70:15:cd:54:a3:b6:e9:67:d7:a3:eb:8c:de:70:de:
                    20:23:be:16:7f:78:ad:1d:48:55:68:13:31:95:1e:
                    81:e7:d1:dc:6f:59:07:00:96:eb:04:ed:40:40:c1:
                    ea:4c:7c:62:ad:ac:62:cb:e6:fc:e5:f9:a3:fd:83:
                    9c:88:02:6f:0e:90:54:03:b2:cd:59:79:9b:75:dd:
                    f1:15:ae:ba:ac:43:62:6b:17:f7:f1:3b:35:0b:13:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:6C:CA:1F:12:3F:C2:05:11:E8:49:18:28:E1:C6:64:DC:1C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72b76054-92ac-3600-8982-ac4e5be68899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:cd:c8:98:33:f0:71:50:b7:3d:26:bb:9b:44:62:28:f1:
         37:6e:94:68:44:0e:ef:34:43:5b:3c:be:9d:8b:ba:7e:70:93:
         f1:10:cd:23:f7:36:ce:b2:a6:76:60:f3:09:42:cb:a9:06:0b:
         1f:9a:f1:43:2c:55:49:35:69:ce:d1:fb:2a:c4:44:e6:71:7c:
         83:60:51:19:ae:2c:29:e7:23:d4:c6:21:40:3f:7d:2d:3b:84:
         8d:f0:db:96:d7:25:b4:9b:ce:50:22:bf:eb:71:46:4b:ca:b1:
         05:69:73:23:7c:97:34:01:aa:ac:3c:6b:dd:7c:ff:df:e5:35:
         33:53:5f:73:6e:27:5d:28:9b:3d:8f:95:08:a2:f8:bb:e4:cf:
         88:c3:4b:8f:92:7a:f3:0f:7f:5a:47:c4:fa:2c:e3:1a:3d:e9:
         a9:e0:d3:c3:5a:9e:8e:2a:17:a0:7c:5a:63:92:25:41:78:98:
         c9:fa:ab:6d:7f:8f:a8:53:f8:71:ce:fd:d7:18:e1:97:40:94:
         ea:a2:cb:b2:0d:7c:09:96:f7:cc:d4:b4:35:ce:65:4d:3d:1b:
         69:89:fa:d4:7d:8a:64:76:7c:a9:73:ff:69:05:a8:79:57:85:
         98:75:2e:e8:1b:e5:75:32:fc:0c:29:a9:d9:b7:c5:0e:34:e9:
         dd:79:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:51 2025 by rpki-client