Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa
File:                     7f386e46-5f55-3aef-853f-c40aca2da2f6.roa (raw, json)
Hash identifier:          iWk+YAqx4NlKqFZd0XqfEmT/FmBfw+eGD3O1IX7roDg=
Subject key identifier:   04:7C:AB:88:D8:9E:95:F2:F3:6A:34:FD:6A:E3:D8:61:60:F8:4F:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1C3715748E3D0278FA7BFF58
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.44.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:15:74:8e:3d:02:78:fa:7b:ff:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=198694e2-8cf0-4b71-94ad-1b1b1a6d62d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:a6:93:9d:2d:7c:40:60:db:6b:74:4b:4f:
                    f7:d8:52:41:4d:95:17:35:7a:27:c0:84:36:a0:81:
                    95:aa:58:f1:03:83:6b:76:7c:6d:c7:72:00:cc:74:
                    46:3e:47:d1:57:fb:73:30:26:6e:f4:a0:76:82:ce:
                    a1:c3:6d:31:9c:2e:4f:c1:3c:18:09:91:3c:c4:f2:
                    94:8d:e7:cf:77:81:fa:37:5f:38:ff:20:ff:ad:64:
                    0f:02:c2:d4:f5:67:68:70:88:45:c1:b7:75:04:1c:
                    33:c2:59:f1:43:52:7e:a6:d2:35:83:f7:06:9f:65:
                    fc:e2:16:47:1e:f3:ae:fb:76:c7:71:4d:8f:8e:6a:
                    bc:48:a1:77:85:d1:fd:76:dd:0a:2a:d5:69:9b:fd:
                    00:a5:2f:d6:44:67:a9:16:9d:db:da:13:54:cb:4b:
                    04:8a:7f:7f:50:b6:9c:da:a7:ca:e6:c3:53:76:e0:
                    50:90:cf:07:cf:34:ea:08:6c:e4:a0:49:ee:3d:fd:
                    06:89:10:c9:74:22:92:15:6a:e6:35:81:df:10:96:
                    ae:42:56:63:03:94:93:70:a0:28:f2:4a:fb:df:cf:
                    72:a6:57:0a:0f:48:30:5a:37:e0:fb:a1:45:70:90:
                    fe:a4:45:09:2b:e9:a0:35:28:07:6e:7b:e5:59:0a:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:AB:88:D8:9E:95:F2:F3:6A:34:FD:6A:E3:D8:61:60:F8:4F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:9c:b8:07:9f:85:cd:92:41:2d:fb:54:25:d1:db:af:3c:
         cf:ba:2f:89:8a:7f:bf:62:7d:63:15:f8:67:0f:ff:fa:6f:17:
         07:1a:22:b5:e5:3e:b3:49:81:ae:2f:34:cc:56:bb:c0:cc:72:
         c4:7f:b4:c9:00:25:99:d6:45:41:f5:bc:04:a3:5d:48:91:65:
         a1:f3:69:2b:7c:ef:20:4e:bb:6b:80:0a:89:e8:36:fb:b3:55:
         b0:1a:b6:a3:e7:c2:10:09:98:7a:34:f3:58:1e:b2:b0:85:cb:
         d6:65:d6:45:c3:92:30:d1:62:a5:66:3b:9f:e7:0e:e2:a5:d3:
         a0:44:f4:f1:9a:1f:f9:02:10:c9:17:e6:09:3f:a2:25:02:c0:
         b4:82:04:67:67:69:73:c7:8c:fc:2c:7f:c2:fd:cb:e9:a1:1e:
         5d:29:ff:f8:e8:af:56:73:d8:c6:af:74:94:62:86:60:61:bd:
         92:7e:3b:3f:68:4a:72:ef:43:48:d3:fe:7e:be:55:69:9a:99:
         bf:44:ce:2d:e0:b6:9e:69:d4:6e:8c:41:af:36:64:bd:91:8a:
         ea:01:74:f7:41:84:0a:2e:11:36:fd:3d:6a:f4:e4:6f:9d:58:
         3c:a1:59:3b:cb:d5:71:a3:9e:75:29:89:ce:02:25:e2:39:64:
         fc:f8:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:56:59 2025 by rpki-client