Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa
File:                     ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa (raw, json)
Hash identifier:          lS3xoD+KMNN/VeE4bY8KbCpfgmUQ09gZVckQq7NL41k=
Subject key identifier:   1C:C0:E8:9B:DF:E9:99:9C:6A:E3:71:83:FA:E9:FC:24:D8:AF:D1:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B355705E9FFE44B53CB8610C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.216.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:05:e9:ff:e4:4b:53:cb:86:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=e2a6a405-efc4-4173-a25c-c751df741c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:c5:dc:73:d5:0e:b5:09:e8:c9:bc:8c:f6:
                    6b:8c:43:b0:8a:f1:2d:49:e4:9e:98:3f:da:05:b9:
                    46:64:2d:25:ea:12:d2:c2:47:6a:67:fe:db:19:32:
                    aa:86:65:4d:0a:82:e5:f1:c5:a8:61:99:b5:7e:81:
                    6c:f8:95:02:c4:e7:93:ea:51:49:55:d8:fc:3e:75:
                    67:58:4d:eb:98:24:e9:3c:f8:c7:7b:d6:29:a4:6d:
                    17:c7:ee:bb:ed:98:38:9f:dc:62:cc:27:26:07:59:
                    e4:90:f1:99:b3:5d:28:e4:a1:37:8f:92:c9:f7:3c:
                    ba:dc:c7:3d:f0:00:cf:6c:e8:8d:e7:36:9b:3f:e9:
                    86:a3:3d:53:c9:00:5c:14:5f:64:3d:35:95:19:76:
                    0e:35:d9:6e:15:b0:7a:63:c7:1b:93:31:f1:6c:0e:
                    56:38:ae:a5:1f:bd:61:be:14:07:04:fd:17:f8:69:
                    e2:5c:44:75:90:32:51:1e:b9:2f:53:9b:76:61:52:
                    df:80:8c:be:6e:23:d9:b6:44:bb:d5:78:79:65:c8:
                    7a:37:25:fc:25:cc:c0:f5:77:f3:e3:f1:e9:ec:49:
                    7a:79:95:18:d5:3b:6e:d9:3a:4e:04:2c:58:8d:67:
                    ba:ae:77:3e:04:95:ae:50:41:13:f1:b1:16:44:82:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:E8:9B:DF:E9:99:9C:6A:E3:71:83:FA:E9:FC:24:D8:AF:D1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad0a181e-91c5-3c28-b10d-92bd446c7aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:63:b7:b2:0e:24:51:b4:62:7d:d6:3b:aa:d2:a0:33:e2:
         27:8b:f3:0c:42:83:26:f2:9d:5c:ef:1e:82:a9:ae:50:06:38:
         6a:09:d4:c8:5b:2f:4c:2a:eb:25:0a:66:04:3f:d0:9c:1e:e6:
         db:0e:2f:c9:b9:62:fc:41:84:9f:15:4b:e8:88:15:30:c2:8f:
         92:71:24:86:92:92:1d:13:f0:19:03:26:f1:61:5b:95:30:5f:
         d4:7f:9e:a1:5a:59:9d:0e:6b:61:a9:f8:4f:0d:02:38:b8:25:
         93:39:83:f1:e5:5d:9a:99:ea:57:b4:25:4e:3c:bc:32:c8:af:
         08:2d:c2:f2:56:ad:de:50:64:9f:9d:ca:55:be:10:5b:cb:45:
         78:a1:01:6c:49:32:7f:00:df:f6:1e:72:ca:98:6c:90:7e:74:
         7b:76:ac:1a:08:83:63:f1:73:1b:91:c4:00:8c:80:70:5a:ba:
         d8:ec:ee:9c:c8:9e:8d:ad:99:21:30:11:0d:b4:74:32:85:cd:
         01:93:ef:71:44:00:eb:76:1b:2d:e6:68:a8:1c:a0:7f:28:ad:
         0c:7b:5e:27:76:1f:69:e5:ab:f7:1a:f3:d8:9d:f0:8d:db:79:
         0b:d1:cb:a4:25:d1:90:44:cb:7e:25:bc:d1:a1:15:c2:5a:fd:
         d1:62:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:20 2025 by rpki-client