Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa
File:                     ba5d2792-5be8-3b48-878e-d276c8a625d0.roa (raw, json)
Hash identifier:          1RigowIpREDEv/NKLy+6AkATuOHk4/gxBqQSuCUpBGM=
Subject key identifier:   E3:5B:AA:92:AF:0C:83:7E:F8:A3:94:5B:12:B8:FF:9A:06:B5:62:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1AD19A98D3AC4B91CE505A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.37.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:9a:98:d3:ac:4b:91:ce:50:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=2edff473-dcf3-49e4-9822-b9f1d7b164e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:2d:28:58:c3:56:b9:b7:cf:13:b2:3d:73:
                    ec:94:9b:88:ac:13:67:1d:0e:a5:33:e3:b3:d9:78:
                    99:d6:ff:7a:02:cd:3d:44:5c:a3:00:3c:b5:c1:b1:
                    a7:78:98:9f:9d:d5:36:45:71:d7:7c:0c:c5:e2:9e:
                    30:68:8f:03:17:c0:36:4f:25:8c:14:f7:0e:dc:c9:
                    65:3f:97:fe:84:c9:cc:64:6a:be:e1:ad:8d:e7:70:
                    64:eb:3d:fd:10:f2:92:e7:dd:9e:e4:a5:4b:b8:4c:
                    ee:67:64:be:72:d2:b6:83:ec:11:b8:48:23:f9:f3:
                    99:7e:fd:92:9c:86:f4:55:26:80:48:f1:da:ca:3b:
                    c5:70:60:de:58:38:f9:4b:63:0b:54:29:27:94:8e:
                    8d:ea:50:0e:a1:9a:45:4a:67:07:ea:f0:2e:8a:c6:
                    fb:3a:17:55:41:e8:12:b1:9e:7c:75:3d:d2:c0:f8:
                    0c:f9:59:d7:3e:90:c1:13:96:0f:e6:42:a0:69:70:
                    38:61:5d:7d:6f:4e:07:6d:93:23:5a:d1:12:fe:b8:
                    f7:98:6a:97:db:dc:87:c9:23:81:4d:81:ef:f5:16:
                    77:e5:73:fa:bb:9c:a4:9e:f1:74:ea:ea:1e:b4:65:
                    c3:5e:0c:33:eb:fb:47:80:2f:96:eb:3e:0c:1c:0f:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:AA:92:AF:0C:83:7E:F8:A3:94:5B:12:B8:FF:9A:06:B5:62:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.37.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:ae:90:7f:01:8f:35:1a:8f:81:4f:0c:78:c9:52:b0:df:
         36:e4:26:7e:90:c0:9f:5a:cc:bf:9b:40:41:76:0a:d1:a2:65:
         68:b3:8d:04:1c:55:89:e1:d8:d5:e8:49:29:0d:da:4e:98:cc:
         8f:64:23:0b:04:78:4f:49:48:d4:0c:59:0c:81:d0:ad:2c:2e:
         87:60:7e:47:a1:9b:37:fc:12:8b:c1:60:0c:04:21:35:be:2e:
         bb:2f:76:81:7d:47:7c:46:cd:59:39:47:96:95:90:b6:d4:40:
         94:bc:bf:74:6a:4b:0e:fe:57:75:23:e9:85:df:f7:a0:85:46:
         5a:4a:e8:71:b3:54:b1:6f:83:65:c4:0c:15:88:7f:fc:56:ed:
         b0:3e:b0:00:7e:a1:17:be:16:0b:0d:15:d9:84:8b:85:cc:d5:
         56:9b:03:b0:06:00:2e:bc:bf:68:2c:05:f6:d3:ca:60:68:72:
         2b:5e:7c:a2:8c:e1:fb:42:6a:3e:32:04:e0:ca:a1:27:92:7b:
         d9:78:cb:28:5f:05:11:46:5d:25:a4:b5:14:6d:13:e3:66:7c:
         00:bd:12:65:69:08:91:ad:20:1b:3f:d8:18:4f:53:ad:d8:db:
         27:af:03:51:57:d6:f8:b6:5a:7b:ac:d8:cf:ee:7b:49:aa:d9:
         1b:d6:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:58 2025 by rpki-client