Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f7f6bd-9ad5-360b-9673-872859776f02.roa
File:                     79f7f6bd-9ad5-360b-9673-872859776f02.roa (raw, json)
Hash identifier:          WXtDtZ5CuVfF3w/W/JYoih+UdLFslzQ5iU3HqVf+qJU=
Subject key identifier:   6E:80:B5:16:AA:85:4F:96:C3:4C:0D:40:66:EF:6D:78:52:84:97:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3821AF8E875026A00DD19800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f7f6bd-9ad5-360b-9673-872859776f02.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.192.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:af:8e:87:50:26:a0:0d:d1:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=d80d91dd-8e1c-4750-9477-485a9f6603a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c5:ba:3f:50:3c:d2:59:8f:f5:18:4d:52:4e:
                    1e:d3:d3:08:7c:56:f6:47:bc:cc:21:a0:62:f1:02:
                    83:d7:b5:6e:32:a3:88:25:95:91:19:0e:7c:43:f3:
                    5e:59:d0:90:44:37:c2:16:d6:c0:84:11:dd:8c:97:
                    95:85:16:78:f5:b1:dd:a2:85:ab:20:a1:c8:8f:9c:
                    67:6f:a3:ab:6a:08:0d:60:d2:ee:7b:b4:a9:b8:2e:
                    15:50:50:d9:9a:b9:f3:2f:e4:03:d6:e9:60:e7:00:
                    5a:b0:d7:74:90:20:f7:58:4b:26:d0:6e:ea:fd:6f:
                    24:6a:83:e1:79:7e:8b:80:16:45:cb:af:60:36:69:
                    d6:69:54:32:ce:db:96:62:7e:b2:e8:c8:6d:15:6f:
                    bf:1d:14:64:12:4b:06:dd:c0:9b:87:83:fd:f0:4a:
                    c6:89:32:45:33:f8:e0:3d:4d:aa:79:2d:43:35:c0:
                    39:9d:55:6a:b3:9b:5b:95:26:af:79:2d:f3:41:65:
                    a9:49:35:d0:31:d3:c2:9e:a9:cd:a7:03:5a:10:85:
                    86:67:bd:41:2e:c3:69:b2:f6:ca:ae:eb:7e:ab:3b:
                    12:18:6b:f1:5b:77:c2:42:35:3d:38:7f:49:ef:5e:
                    ea:86:65:5e:cc:e5:99:f2:b9:21:05:d3:45:88:7a:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:B5:16:AA:85:4F:96:C3:4C:0D:40:66:EF:6D:78:52:84:97:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f7f6bd-9ad5-360b-9673-872859776f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:11:28:1f:54:7e:30:91:a2:74:e1:e0:7d:9a:c0:33:c0:
         dd:6e:10:b9:fc:fb:0b:0d:e5:58:92:fe:df:29:01:2e:13:49:
         87:d3:95:9b:1a:2b:e3:a6:c0:7d:05:83:45:8b:c1:2a:a6:a9:
         ce:35:00:66:b0:2e:81:de:b6:87:43:46:c1:b6:ad:5f:0f:58:
         e6:de:95:62:35:37:7f:25:97:01:5c:8c:b7:53:d2:ac:45:ce:
         79:5b:6b:f8:b8:66:9e:84:30:77:54:f6:b5:93:1c:f7:d2:dc:
         d9:9c:b6:24:5c:29:66:0c:d9:a4:a5:8a:ee:d0:33:9f:e8:28:
         9c:a8:33:be:9f:8c:be:bf:a3:d5:96:53:a4:d8:e3:55:fb:9a:
         2c:c6:8f:e6:32:30:46:76:0f:a3:eb:dc:09:9f:c3:78:91:c3:
         28:d1:9a:61:aa:7c:d3:14:72:98:c3:62:e9:a8:8e:8d:ce:5d:
         45:ff:a1:37:c8:a1:e2:11:29:ee:15:ea:b5:83:0c:90:73:7b:
         18:d3:35:d7:cb:ab:07:1f:3a:f7:18:9f:ea:4b:7b:0a:e6:5b:
         5f:46:32:08:4a:88:ca:35:90:31:ba:ed:6a:ab:ca:6d:d9:43:
         d6:d4:1c:66:0c:47:1c:e0:6b:30:a5:09:4d:17:a3:9f:34:0a:
         27:81:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:01 2025 by rpki-client