Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a090ae-a1b4-3e01-abf1-bc1ac77fc8de.roa
File:                     c0a090ae-a1b4-3e01-abf1-bc1ac77fc8de.roa (raw, json)
Hash identifier:          F05ZyK8t1GtrRsL1HOToZsqLVIdQ725rtnwl/lIMziM=
Subject key identifier:   78:F7:99:A0:5D:A4:8C:EA:71:CD:E9:3A:52:3A:B8:67:92:02:CC:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E2022AB7EE8C064A17B7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a090ae-a1b4-3e01-abf1-bc1ac77fc8de.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.202.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:02:2a:b7:ee:8c:06:4a:17:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=41647fcf-ed25-4888-948e-ab06bbc68623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:d9:7f:b4:57:5e:e6:cf:80:f8:8f:cc:09:
                    cd:28:b3:60:b3:32:82:b7:12:9a:70:72:16:b0:20:
                    43:76:87:82:6c:6d:e3:f8:61:09:6e:ce:89:c0:5c:
                    8e:27:d1:4a:d6:87:a0:4d:dd:d0:ae:cc:95:97:1c:
                    f2:e6:2a:cc:c3:e4:6f:e8:47:a5:0f:c0:74:86:7a:
                    26:e8:be:f9:1c:f4:79:04:0b:e3:5a:32:b8:1a:0b:
                    bd:e7:cb:34:85:3f:cc:de:e1:33:57:0e:33:76:9d:
                    d8:fa:51:29:3c:9c:12:d2:66:22:74:d0:32:50:3c:
                    30:4f:b0:e8:16:2a:cd:26:05:c1:41:f0:be:0e:2a:
                    1a:2c:e3:1b:98:f9:8a:63:96:52:25:cd:7d:0e:0e:
                    0f:78:7e:87:5f:91:47:f3:df:97:8c:1b:b7:6e:d5:
                    4e:d8:ad:61:1b:8f:ad:27:5e:9f:56:d2:9e:80:08:
                    6c:83:3f:ef:ca:42:27:15:c2:1e:c4:82:87:c5:90:
                    5c:5e:0b:53:90:64:01:6c:39:a9:94:83:07:1a:22:
                    8f:f1:8c:aa:a0:cd:a0:ed:ac:36:5c:98:4c:7e:78:
                    c4:e9:a5:73:2d:6b:2a:9f:6b:5c:8e:61:a0:e0:db:
                    03:7b:f1:86:dd:0f:b3:d5:78:7d:09:93:24:d1:61:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:99:A0:5D:A4:8C:EA:71:CD:E9:3A:52:3A:B8:67:92:02:CC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a090ae-a1b4-3e01-abf1-bc1ac77fc8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:2e:4c:7e:50:9b:e5:8b:19:10:71:49:95:46:0f:59:c5:
         dd:3b:b2:e6:4c:da:74:a2:74:f6:c1:e3:f9:a8:41:c2:de:86:
         e8:da:a4:16:83:69:0e:a9:50:a9:ce:78:10:84:73:11:09:a1:
         bf:88:37:e8:b6:6c:71:27:3f:5e:d8:6f:ce:d7:b5:a2:e9:e2:
         b4:cc:30:e6:8e:f4:69:90:06:79:46:25:2d:14:d5:27:58:9b:
         e1:72:b8:df:24:40:84:a1:88:6b:0e:e7:55:a4:0e:09:eb:c2:
         1f:f7:1e:c7:07:37:43:35:3d:e2:d0:38:94:00:ee:f8:d5:3e:
         04:3f:01:a6:bc:3a:62:11:86:ec:62:81:fa:92:dc:8c:38:8f:
         c1:6f:01:bf:17:61:6b:7e:27:1e:42:81:84:a3:18:bf:dc:c2:
         e1:69:53:f9:14:62:cd:a1:9e:f1:dc:9c:e3:3f:23:6f:89:81:
         24:84:d1:01:d0:a7:e7:7e:74:25:f2:a8:51:4d:94:5a:05:93:
         1c:83:84:35:8e:93:bb:f5:c5:e9:a9:0e:ee:af:d0:70:45:12:
         62:5b:32:7d:0f:ac:aa:80:4a:66:22:4b:44:78:1d:b2:32:60:
         e5:bb:b3:57:17:94:9d:a8:d6:f7:85:54:38:78:fd:94:24:64:
         a5:4a:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:26:48 2025 by rpki-client