Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ed65f0b-32a8-350b-9159-3502887ba3e8.roa
File:                     8ed65f0b-32a8-350b-9159-3502887ba3e8.roa (raw, json)
Hash identifier:          pxWjuB/UdlsVak0edNgGcWl5c+FG1sjxUqc7GKK5L74=
Subject key identifier:   EB:AE:C5:67:99:78:45:06:BA:31:B5:81:ED:44:4D:04:7C:A9:7B:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B23318F5619C7043AD7D21280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ed65f0b-32a8-350b-9159-3502887ba3e8.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.50.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:8f:56:19:c7:04:3a:d7:d2:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=4df53495-a2c7-4223-8a01-f68429a7ecb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:9c:dd:a7:a6:59:02:5a:48:28:44:7a:42:
                    57:98:08:e9:4c:45:97:fe:55:4b:66:43:ca:03:66:
                    3d:87:20:b5:92:a3:7f:ef:16:6d:94:4b:20:ec:0e:
                    46:25:d6:62:37:54:e4:4a:61:c1:7a:7d:9a:61:c8:
                    32:01:e9:66:08:47:cd:c5:db:ba:35:e0:77:da:34:
                    3e:95:91:90:b8:e5:e3:c9:ab:75:44:4d:12:93:f4:
                    42:95:07:48:73:bd:ce:15:2a:d4:4f:c2:b6:8e:1f:
                    21:d1:47:91:70:53:c8:90:c1:55:fd:e0:80:2c:ab:
                    7b:47:3f:f4:73:4b:e1:e6:6b:eb:a9:e0:b4:90:52:
                    e4:58:0d:45:7c:3c:39:f6:aa:4c:ed:72:9f:0c:39:
                    88:45:84:61:5b:43:84:b7:c6:d5:22:9e:be:4a:27:
                    e9:15:29:91:2f:ae:a4:60:4b:af:b5:47:66:a7:76:
                    99:b0:35:05:39:dd:bb:f3:32:82:cf:5d:d1:8a:7d:
                    e5:28:52:7b:ab:e2:3a:dd:f8:f5:08:47:2d:61:89:
                    8d:52:83:ad:81:3d:8a:37:5f:de:73:09:9d:0c:12:
                    31:bd:85:a0:44:39:11:88:49:48:4e:bb:61:c8:a5:
                    08:f1:b4:ee:58:a5:f0:d7:0d:83:31:e0:bd:a8:68:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:C5:67:99:78:45:06:BA:31:B5:81:ED:44:4D:04:7C:A9:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ed65f0b-32a8-350b-9159-3502887ba3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:e0:9a:01:25:ae:2c:d7:9f:b8:42:74:bb:5f:fd:c7:ea:
         8a:01:23:09:a1:c4:4c:7a:b0:82:16:26:75:84:2d:a0:d7:be:
         a1:83:0e:fd:ca:44:b7:c4:21:60:20:78:3d:44:8e:04:ce:fb:
         6f:00:22:88:96:0f:3c:17:24:a8:ec:de:e6:de:6e:ea:0f:d5:
         3d:76:26:35:40:14:6d:04:39:e4:1e:b6:f8:83:fa:e1:7d:54:
         d7:c0:f2:25:cc:6f:07:cd:92:f1:7c:23:e2:50:20:4e:58:64:
         cc:ee:a6:d3:bf:a7:18:88:cb:48:ff:88:ef:99:30:09:60:c5:
         3a:75:56:ac:44:c6:27:60:2c:62:89:55:0b:48:26:b8:76:dd:
         d4:99:35:95:29:f3:d2:0b:f7:a8:93:67:f4:a4:f1:f7:6e:6c:
         dc:5e:19:88:11:5a:37:c9:a2:9e:5a:db:e8:9c:c0:c6:a3:6a:
         0a:2e:dc:e8:62:17:af:e8:84:29:36:73:f4:35:c4:56:e8:74:
         58:ca:31:f0:22:34:3d:77:15:c7:40:07:92:44:e5:3c:1d:a2:
         09:bb:07:ac:d8:17:68:cb:98:a6:0a:b0:c7:b2:ab:98:e9:39:
         c4:84:3b:50:f4:84:41:ee:c4:56:f0:4c:5a:5b:8a:a0:c1:55:
         0d:57:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:46 2025 by rpki-client