Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82548615-3543-32f5-bf41-1a4a9144f554.roa
File:                     82548615-3543-32f5-bf41-1a4a9144f554.roa (raw, json)
Hash identifier:          IpxJfgmzsHzaNIpJSYnJZfCRU66fiSy8/kqQeV56cp0=
Subject key identifier:   0F:AC:5D:32:9B:FE:A2:51:38:8D:A0:E0:B6:AF:8C:FF:47:5D:1A:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B434C71B23952D3D89CA45000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82548615-3543-32f5-bf41-1a4a9144f554.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.195.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:71:b2:39:52:d3:d8:9c:a4:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=9d7b39fc-9fc6-4626-9b20-3420a81a6444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:53:e0:ee:a7:4f:a2:87:c5:85:59:a8:9c:
                    3c:7b:fb:b8:0c:6c:90:3a:6d:a8:f1:b2:13:2d:9f:
                    db:92:dd:4e:40:4f:dc:b4:47:ab:63:5d:18:4a:5f:
                    3c:32:96:87:71:91:d7:0c:95:a7:4a:21:9a:98:d5:
                    81:fd:f2:03:09:aa:a2:90:fc:92:28:e7:e4:19:26:
                    db:7e:92:fe:53:8e:6b:4d:ff:cf:a4:07:6f:2b:29:
                    d6:85:94:23:c0:60:b7:c6:c2:37:ed:c4:8d:63:07:
                    9b:62:aa:8b:7f:f9:a5:2f:94:f7:bc:87:82:af:79:
                    9c:19:57:fc:42:e4:90:f6:72:d5:d5:ef:a5:ba:3f:
                    e8:48:b2:65:c3:e4:48:ea:5e:93:a2:de:e1:d9:bb:
                    26:e4:75:53:c8:8a:e8:bf:3b:6a:89:3e:44:c3:c0:
                    c0:1c:f8:65:82:b5:6c:5c:e6:b7:87:bf:9e:43:25:
                    2f:e8:7c:c4:fb:6b:c0:0a:92:75:f4:10:77:57:9b:
                    d1:e1:f5:8d:ba:5b:2e:3a:33:93:e1:fe:59:e9:ad:
                    62:45:0a:d6:59:7b:36:2a:9d:f7:3c:7b:3f:c4:d7:
                    d2:e5:a2:b3:ae:84:c8:28:fc:5e:47:bc:7e:35:67:
                    13:ef:79:5a:a2:da:7d:58:02:ac:19:48:00:fb:c0:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:5D:32:9B:FE:A2:51:38:8D:A0:E0:B6:AF:8C:FF:47:5D:1A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82548615-3543-32f5-bf41-1a4a9144f554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:52:5f:28:bb:05:21:6f:d5:c3:b2:d6:f3:e4:3a:fb:38:
         58:2d:12:0d:87:7b:9c:b8:1c:2f:83:37:b4:7c:eb:57:1a:42:
         89:d9:a6:36:d5:04:9d:13:7e:91:b9:89:46:83:28:92:b2:29:
         04:68:13:68:63:87:a9:7a:1e:83:af:7d:7a:2b:53:9d:e2:57:
         bd:2b:fe:d4:30:de:3d:cf:76:7b:33:88:b1:63:ae:95:d8:38:
         fe:fd:d4:be:df:3d:5a:57:12:71:64:19:3f:9b:f0:3d:09:66:
         2b:81:4e:b8:fc:98:83:39:f4:95:ae:ee:29:ba:7c:46:52:a1:
         fb:23:2e:72:7f:68:a7:96:c3:27:27:97:02:ab:f8:54:51:53:
         58:ba:a9:d9:d1:ba:fb:80:07:aa:85:a9:c4:35:61:8f:c1:fb:
         86:e5:19:9b:c4:7d:20:e1:32:21:41:85:f1:07:58:7f:77:10:
         88:1c:11:4b:db:db:bc:6a:4f:d0:29:69:5c:ae:a6:ee:0d:f0:
         40:4b:fa:65:ff:7a:55:ad:b7:97:67:a2:29:ea:aa:f5:26:d2:
         0d:d1:1b:da:d7:5f:0f:b5:a9:f3:cf:49:b1:3e:ff:3b:e5:67:
         2d:01:2a:de:91:f5:51:85:22:ba:39:a5:69:e8:1b:41:ac:c6:
         d9:94:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:14 2025 by rpki-client