Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99109b9c-8713-3f83-9ee4-f7d1e2d636ce.roa
File:                     99109b9c-8713-3f83-9ee4-f7d1e2d636ce.roa (raw, json)
Hash identifier:          sitxN4/3LIywLGLVsR361KZrw8SdEJZMSqEy3sxu5Lk=
Subject key identifier:   1B:B1:A7:2B:3B:00:CC:80:A4:F0:0C:0B:F0:80:11:03:F6:4E:02:C8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1F0185889C43237805D49F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99109b9c-8713-3f83-9ee4-f7d1e2d636ce.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.48.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:85:88:9c:43:23:78:05:d4:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c591ff75-51a6-4043-aede-7acb45d7c161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:32:f3:2d:3f:37:21:e4:10:c5:67:28:67:
                    5a:bf:fa:b7:c2:e3:c8:8b:34:1d:72:f3:72:a0:c0:
                    8d:f6:ca:86:3f:a0:7c:ff:5b:00:9d:eb:bb:29:30:
                    8a:c7:69:71:89:7c:99:81:19:db:aa:71:d2:eb:0e:
                    65:96:2c:94:9d:8a:9b:45:f4:bc:b0:eb:44:aa:a9:
                    3e:54:be:23:26:c4:70:cd:2c:f8:fd:0f:23:f0:31:
                    34:7f:78:df:bd:07:a4:7d:0a:0c:7b:6d:0a:ff:e8:
                    3b:41:7f:ac:cd:85:76:4a:ea:45:f3:a3:88:10:ca:
                    eb:86:5c:56:cd:cc:9e:91:f3:46:28:37:bb:85:06:
                    4d:51:49:20:23:7b:57:19:b1:e1:51:27:e0:2b:91:
                    64:73:5e:92:9d:d2:9e:c9:39:b4:52:85:fb:93:ec:
                    0b:d1:92:3f:62:91:c8:95:f6:d9:73:7a:c9:1d:d3:
                    aa:5a:11:61:5d:ff:86:b5:6a:9c:fa:22:75:85:1e:
                    a5:d4:f4:be:17:12:34:cd:34:75:a8:61:23:14:8f:
                    af:a4:62:32:47:17:f4:28:2d:fe:f8:4f:9d:e1:cd:
                    b3:70:c0:0f:31:9a:05:15:84:85:b8:d8:f0:3d:6d:
                    15:47:7d:e7:91:73:11:ca:08:f5:bf:6f:93:3c:00:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B1:A7:2B:3B:00:CC:80:A4:F0:0C:0B:F0:80:11:03:F6:4E:02:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99109b9c-8713-3f83-9ee4-f7d1e2d636ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d2:07:d0:d8:25:ae:d6:78:cc:2a:45:97:44:55:fd:b2:2a:
         99:15:48:35:3a:7d:ab:83:f6:c3:b1:9e:f4:bd:88:a2:37:a8:
         5b:81:32:f2:f4:dc:84:54:bd:53:b8:26:b3:0c:f2:ae:07:56:
         9d:3f:49:4d:61:a6:00:de:84:c0:3e:ba:d4:1f:74:81:76:f9:
         e1:8f:b1:c7:98:63:cf:b1:9c:db:b8:5e:c9:f2:42:0b:eb:2b:
         35:f9:e8:55:66:ad:81:00:b9:7f:5e:45:cd:0b:ed:c3:74:ba:
         82:c8:13:cc:17:16:ae:17:95:c0:35:e7:f3:3b:6f:ec:28:14:
         5c:7c:ff:5b:8f:41:02:6d:91:e1:e0:44:ab:29:4e:98:a1:3b:
         0e:a6:9a:93:c0:bd:24:f6:c3:dd:77:74:02:1b:1c:73:cf:6e:
         be:9d:02:95:ef:4f:b3:36:8f:a8:5a:a7:a5:0b:bb:6f:98:02:
         76:1c:39:51:4a:36:04:16:d1:9a:4f:ff:07:19:40:f8:3a:4b:
         d0:46:e9:3e:b4:2a:c1:3e:10:bd:62:b5:dd:f9:c2:a6:4a:55:
         0c:d9:34:29:a2:5f:97:8d:95:bb:be:ce:03:35:ed:b2:e4:f8:
         28:c2:e7:5b:88:d5:9e:d9:00:f7:7e:1f:96:8b:02:fe:be:3d:
         89:eb:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:12 2025 by rpki-client