Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc149f6f-1962-33b4-bddd-1b19e998d7c8.roa
File:                     bc149f6f-1962-33b4-bddd-1b19e998d7c8.roa (raw, json)
Hash identifier:          pE8jvbZXbVF/i6BlUWs4leCYPxHSf5lYv19rb5NtqV8=
Subject key identifier:   02:6A:F3:D1:61:B1:E2:6E:E6:00:FF:AD:A3:38:5C:DB:EE:11:B5:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3DB6F3E78F827C1E8213CD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc149f6f-1962-33b4-bddd-1b19e998d7c8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     63949
IP address blocks:        23.239.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:f3:e7:8f:82:7c:1e:82:13:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=fd107b51-d795-45ee-89f6-8376806a4631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:ed:41:a5:f4:87:3b:fc:a9:ae:8d:72:cf:
                    70:ff:1a:64:f6:ad:19:60:e2:e1:a4:86:a0:37:5f:
                    fa:51:fc:02:ad:78:80:ed:6f:74:d9:0c:ed:30:a5:
                    41:c8:6e:f9:ee:1a:72:43:9d:06:7d:64:3d:bb:09:
                    ff:fb:ca:41:68:06:8c:d0:72:e4:f1:65:1e:91:f6:
                    46:58:cb:9a:bc:8a:7f:da:09:e1:d2:39:1e:8d:d7:
                    0d:8a:9b:4f:c6:fd:5d:ec:62:6a:f2:00:fe:bc:e8:
                    9d:c7:29:1f:e3:0a:e9:33:f0:46:a8:a5:04:0c:5a:
                    68:59:b0:ea:08:f5:de:f4:00:e8:54:a8:77:ef:7e:
                    89:58:32:26:65:e4:ad:71:f2:0c:08:ef:e3:70:c6:
                    1b:c1:21:89:3c:74:cd:a8:11:f3:1b:87:92:c2:c1:
                    c8:25:86:e1:c4:89:d4:51:dd:32:1e:89:39:9d:08:
                    24:cf:d9:54:fd:42:fa:b6:9e:1b:0c:89:6d:84:53:
                    69:77:34:b3:d5:22:80:5b:94:78:b4:29:48:2a:eb:
                    2d:32:09:79:07:4f:8d:79:4b:4c:61:70:c5:e6:5e:
                    9e:e7:5a:30:b0:a3:2a:5a:d5:cb:14:b2:b4:9a:4a:
                    64:98:3d:ef:bc:10:f7:5c:c9:fb:61:12:fa:d2:78:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:F3:D1:61:B1:E2:6E:E6:00:FF:AD:A3:38:5C:DB:EE:11:B5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc149f6f-1962-33b4-bddd-1b19e998d7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:c2:20:92:0f:8f:dd:cf:f7:53:52:da:6a:63:5e:cc:12:
         e4:93:8e:2e:2e:f8:ca:54:af:ce:33:26:06:33:9e:6b:5f:08:
         8b:18:10:f1:c9:06:f9:37:b1:58:67:b7:3a:59:e6:b3:dc:3b:
         9c:59:b7:df:f6:08:f8:00:74:4c:03:ba:68:1b:28:0d:5f:9f:
         a3:62:9d:6f:20:f7:c6:2a:d9:d2:40:04:22:22:62:2d:ec:74:
         0c:41:83:11:0e:4f:af:8c:4e:3c:ed:38:77:4a:fd:e2:1b:48:
         97:c5:d6:25:db:cc:9d:c7:40:3b:d0:f3:57:59:2c:22:dc:51:
         02:7b:38:8d:bf:de:00:44:e6:6e:fc:e0:c5:71:e5:a3:27:7f:
         64:99:a5:f2:97:42:12:f6:b4:11:4b:31:01:79:45:61:1b:1d:
         20:c8:01:0a:a7:64:bd:32:7b:09:12:09:68:67:01:02:3c:bd:
         3e:cf:54:46:33:0e:ae:61:11:6a:91:b6:27:c7:59:1a:1b:78:
         86:0e:c3:2b:43:95:3d:5d:67:70:e6:da:8d:6a:80:91:3b:1a:
         e6:22:22:25:15:0b:9b:b2:8a:e4:bc:d4:1f:b3:f9:69:fc:22:
         f5:dd:c8:b3:d1:55:1d:12:0f:52:41:03:16:17:e1:55:2f:4c:
         fb:1a:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:01 2025 by rpki-client