Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa
File:                     b32930a5-1b3c-3ac9-946a-706e73d22623.roa (raw, json)
Hash identifier:          nDB6TQhOqCNuiNtr/EAxVwqfArXobNk+YEsv7PrrDPc=
Subject key identifier:   A5:D4:07:76:33:CE:BE:3A:43:74:9C:43:72:35:6C:44:B1:C3:DA:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B583C9C7CCE3D06CA68948930
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     24319
IP address blocks:        23.204.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9c:7c:ce:3d:06:ca:68:94:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=b0fbc3c4-60e5-40d2-8666-d7d5f29ebdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:b9:0f:a0:c8:62:fc:b7:6d:f4:83:af:30:
                    c6:e9:40:e1:be:2f:85:fd:6c:b6:78:94:98:f5:86:
                    86:4a:e5:1c:30:7f:41:b3:73:8e:8e:34:a7:e5:07:
                    36:a8:c3:9c:ff:d6:7d:19:90:d9:25:2d:57:6d:1a:
                    c3:d4:f8:01:bb:d1:c1:c9:85:16:85:50:72:66:c3:
                    5a:4a:9a:51:5c:eb:8a:b0:aa:02:dd:46:6c:47:46:
                    74:34:2f:c3:38:5a:14:27:4f:0b:59:a9:1c:47:4b:
                    b8:f9:82:5e:73:5b:65:c3:9c:fb:91:7b:67:5c:ef:
                    a7:e5:97:da:9d:21:a3:6b:50:fe:e9:80:53:38:42:
                    8e:af:e7:90:51:0e:56:53:ea:86:0e:31:9d:ab:50:
                    49:03:c8:e7:61:c0:02:53:9e:d5:09:1e:4b:1f:27:
                    47:99:52:3b:6f:e7:df:ab:f2:b8:04:dd:99:41:57:
                    2c:56:02:da:b8:e9:28:fd:f7:dd:d5:03:04:a3:21:
                    9d:bf:0f:82:b0:92:80:24:8f:76:43:cd:11:9d:a7:
                    8a:d2:a7:01:db:8d:de:26:65:75:b4:a5:2f:d0:eb:
                    21:f5:bb:29:d7:29:1c:73:07:63:7f:68:10:9a:8b:
                    e5:11:bb:c0:d1:f6:b1:64:0a:31:cb:b1:10:e8:43:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:07:76:33:CE:BE:3A:43:74:9C:43:72:35:6C:44:B1:C3:DA:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:06:33:d7:d7:5d:ce:cc:40:ed:e1:2d:2d:32:c8:08:d3:25:
         b1:f7:49:11:53:3c:22:bf:f0:a1:1d:02:66:a6:d0:21:5a:52:
         00:cf:35:12:99:6e:b3:21:1b:dc:e9:c3:af:e5:36:2e:89:ba:
         9e:b3:44:b8:e2:e2:8d:af:c9:82:09:4c:9b:17:55:70:7c:7c:
         fe:46:f2:19:41:4e:ad:fc:80:0a:c3:e4:77:a1:96:00:ea:05:
         a4:6d:a1:bf:ec:86:58:b8:44:36:77:21:78:90:c4:5b:46:51:
         71:4b:c1:b1:90:55:6d:63:1f:91:3a:b8:10:4d:9d:f2:d1:ac:
         10:7c:36:0d:de:e1:61:e2:29:d1:78:ca:13:32:79:03:e4:8e:
         91:90:eb:05:65:84:3e:20:f8:ec:a3:d4:1c:43:f9:c0:9f:a7:
         1c:79:4a:2f:77:22:df:05:09:d9:36:bb:86:ac:6a:4d:08:3f:
         6b:f9:4d:79:73:a4:f6:cd:94:4d:42:3f:17:7a:6f:49:46:95:
         13:6a:bb:af:a9:ea:d2:12:56:45:4c:50:4d:6a:f3:df:0f:4c:
         4f:65:d7:87:12:b1:4b:0e:b2:77:36:89:81:9e:42:c2:3f:74:
         f9:73:6c:f7:26:69:e3:2e:77:c4:d4:1a:47:e9:07:af:50:fb:
         de:75:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:38 2025 by rpki-client