Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce047016-7d44-344c-8c21-8e990d359cad.roa
File:                     ce047016-7d44-344c-8c21-8e990d359cad.roa (raw, json)
Hash identifier:          TYiZXSFfNxkzNTtEaTj4bTb9+vPbd7evSFWbmiHrtjg=
Subject key identifier:   2D:D4:16:33:56:EC:F0:12:2C:E0:BA:49:23:B9:F9:35:C9:64:D5:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B6BC767C3D11935EA80BEC380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce047016-7d44-344c-8c21-8e990d359cad.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     20940
IP address blocks:        23.223.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:67:c3:d1:19:35:ea:80:be:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=b3fe0008-fc19-48d0-99a3-cebbf5f73c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:16:28:56:23:c3:a0:6c:68:cc:dd:8e:24:
                    67:91:9c:c9:23:b9:30:b5:0a:39:da:85:b9:33:f0:
                    fd:98:ba:d4:49:ba:0d:80:d1:db:bd:d9:6c:d9:89:
                    13:2a:33:68:7d:18:fd:f6:cf:db:b1:19:87:7f:5b:
                    c8:84:e2:a3:63:c8:3e:5c:2b:14:b8:46:3d:92:60:
                    df:4a:a3:ae:8d:ad:e1:e8:c3:db:18:15:f4:a7:eb:
                    a9:bd:f4:bb:8e:51:53:69:fc:ca:f8:e7:58:23:1e:
                    3c:2d:f9:f8:51:0c:79:0d:c7:eb:09:ef:d8:ed:89:
                    4c:aa:e0:d6:49:81:f9:93:cc:bb:b9:65:61:25:85:
                    76:5f:7b:8a:dd:3c:df:da:73:82:b4:0e:2f:e5:23:
                    b2:7e:ce:4a:cc:7f:43:eb:b1:76:b7:df:eb:16:f1:
                    89:7a:74:68:04:a4:eb:de:d3:75:70:b1:a4:b6:ae:
                    ea:c9:e7:91:94:61:1d:50:0a:60:85:08:67:51:85:
                    ae:69:d2:64:e8:42:fa:02:ae:57:f0:76:03:ad:ed:
                    86:5d:fc:75:d0:8d:b6:06:64:37:78:da:dc:55:7e:
                    32:5b:5f:98:31:52:b2:7b:30:9e:88:20:dc:cf:ca:
                    e9:0c:bb:7f:1e:92:5e:92:c6:47:c8:ab:f0:83:60:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D4:16:33:56:EC:F0:12:2C:E0:BA:49:23:B9:F9:35:C9:64:D5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce047016-7d44-344c-8c21-8e990d359cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:20:af:66:cb:de:12:69:4e:82:cd:54:51:4e:fe:42:c6:20:
         6b:69:6c:37:bf:fb:b9:eb:bd:c4:ea:ec:6a:4c:5a:9e:95:56:
         e1:76:85:10:c5:c5:0b:a6:69:af:44:b3:de:02:01:d4:75:26:
         7e:fb:27:74:cd:1e:24:f6:d0:ed:47:bb:8a:41:b4:30:59:95:
         7c:cd:6a:0e:71:15:1d:68:45:fa:e4:65:15:d4:5c:7d:18:57:
         82:80:47:51:63:19:a0:ed:a7:4b:34:b4:61:f5:b0:58:12:76:
         96:b0:0d:7f:c4:ae:3f:16:df:5e:e9:c9:79:3b:0a:af:a1:95:
         46:1d:71:b6:ef:1d:20:d2:67:a7:9f:76:cf:12:8d:d0:f4:91:
         b0:93:f7:3a:f1:17:89:24:0a:30:bd:60:e9:81:06:21:07:3a:
         bb:2b:9d:ff:88:5f:63:b5:f8:a6:98:95:5a:0f:7c:fb:76:23:
         03:c4:5c:b9:a4:af:5d:1c:dd:54:db:bc:64:ae:91:74:56:c3:
         0a:86:2d:ac:4c:c2:e0:4e:4a:8d:08:f1:59:92:91:50:d5:c6:
         ac:a8:f6:b6:e8:41:21:c7:94:c8:ae:09:66:e0:15:4d:05:81:
         7d:18:57:a6:47:76:e8:d8:79:10:05:d0:ed:fd:0e:f7:7a:73:
         66:b0:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:16 2025 by rpki-client