Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa
File:                     85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa (raw, json)
Hash identifier:          Ga6gcsCKFs8qI4m/7uG28KU+/ecDUpZqYu/jWH8wpIo=
Subject key identifier:   21:BC:69:74:54:6A:A6:C0:62:9B:2E:C4:15:44:18:77:40:D0:EE:2D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1AD1A9531EA5B7FEAEC71360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.39.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:a9:53:1e:a5:b7:fe:ae:c7:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=9713a4e2-3dc5-4585-ba81-4edc24913330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:02:a4:8f:6a:78:b3:f9:8b:e3:3d:c3:af:
                    9f:17:26:77:cb:4b:99:70:4f:71:7b:56:c7:59:bb:
                    b3:51:31:73:a9:9f:66:53:43:92:f0:63:ba:8d:7a:
                    d1:7f:5d:1b:0f:fa:08:a4:4b:78:f1:df:e5:44:5a:
                    fc:fb:46:aa:96:be:2b:72:67:cd:ab:f5:3a:20:11:
                    66:9a:18:cf:46:e7:02:34:c7:f6:fd:27:b9:64:ec:
                    2c:cf:9e:50:db:3a:a8:f7:52:6a:b0:4c:0e:8a:56:
                    05:c0:73:23:9b:e6:ec:b2:4d:08:1f:e6:0b:09:63:
                    66:26:16:29:1b:b5:85:44:d4:22:0f:52:c6:bc:f2:
                    b3:f7:46:70:98:99:c7:cb:6f:c3:7b:e9:22:7b:cd:
                    e2:c0:b0:04:37:8a:24:8d:ee:76:09:c4:b1:c7:21:
                    e0:dd:1e:e3:0d:d2:60:18:ac:34:19:b1:59:ab:88:
                    8f:a4:b3:b3:96:32:16:43:76:29:a7:58:e5:00:8b:
                    c5:11:29:6c:b5:2e:26:3e:fc:7f:82:12:3d:96:ee:
                    c6:75:1f:f7:b8:43:21:cd:6e:d9:5e:9b:02:ba:42:
                    62:17:90:3e:08:16:4f:45:53:05:0d:fc:9c:8a:fc:
                    b3:9a:c4:4b:5b:e8:27:78:04:81:a7:45:ba:86:09:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BC:69:74:54:6A:A6:C0:62:9B:2E:C4:15:44:18:77:40:D0:EE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.39.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4f:0f:7e:51:e1:56:4f:01:73:b5:2f:9e:17:90:cf:d5:7c:
         37:62:d0:42:49:0d:5e:5a:8e:a7:55:85:02:d9:67:95:38:1e:
         ad:17:19:d4:ff:04:7f:fd:b8:03:fa:a2:df:7c:ed:4a:0d:a5:
         65:58:d8:68:5e:fd:01:79:db:b4:4f:c4:0e:6b:06:4c:6e:e7:
         01:ba:1f:3d:8e:c1:05:14:0b:19:66:e2:48:1e:92:e2:db:83:
         06:0b:5a:c2:d2:8f:7b:8e:6e:c0:6f:a7:c6:68:46:ef:ad:2e:
         fa:42:3f:34:a2:f8:c6:b9:ac:cf:97:28:32:99:12:09:32:07:
         a8:cb:57:48:95:8a:1c:3b:fe:f8:69:a7:37:13:52:c7:b9:2e:
         d1:0f:5b:3a:30:85:3b:c0:e2:48:52:7c:18:bf:e4:ba:cd:3e:
         be:30:7a:d6:81:9c:38:21:46:61:a3:d1:20:d3:08:d8:2c:b7:
         74:68:b1:51:7f:9c:32:94:8e:80:d8:a5:e9:ac:b2:58:97:b6:
         da:d6:48:e4:df:ed:41:76:90:5a:6d:a2:02:13:a8:de:c6:ba:
         52:d2:d7:42:0f:dc:a5:f5:bf:d6:02:f3:61:80:2e:a1:5e:fd:
         c9:42:93:57:1d:71:ce:b9:ce:21:28:f5:47:03:1d:4c:f4:12:
         c5:27:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:23 2025 by rpki-client