Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7b6487b-04b2-3e81-9a4b-ead88f15032e.roa
File:                     e7b6487b-04b2-3e81-9a4b-ead88f15032e.roa (raw, json)
Hash identifier:          nLgHqISyhlSlbN6+qQmaWb7bfl3EjpBciNMIDf4g56k=
Subject key identifier:   9D:41:86:54:BD:BF:45:2A:7F:9A:B9:A1:4D:C3:B1:6A:96:00:72:F8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF703C993E23FCB08C9E240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7b6487b-04b2-3e81-9a4b-ead88f15032e.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.54.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:03:c9:93:e2:3f:cb:08:c9:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=0afdf741-dc1d-42de-a144-8776ba6ad148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:04:b7:75:7d:da:a3:15:fa:bb:ab:de:ba:
                    ac:80:3e:be:95:4f:ac:54:a0:8d:78:af:0a:9e:c8:
                    75:e1:e3:a5:28:d5:94:a2:38:0d:0a:58:68:06:ae:
                    1d:62:19:ae:f1:03:13:28:ea:fb:31:c9:f3:75:3f:
                    26:ea:e5:28:31:79:18:7b:9c:24:bb:59:34:de:06:
                    a2:5f:94:50:82:8e:27:cf:bf:40:54:3d:e2:10:98:
                    69:32:f5:31:7f:d8:2c:48:3e:b2:47:d0:57:a4:75:
                    64:e1:09:0a:41:b2:f5:d0:93:57:e2:78:2e:15:26:
                    9b:b6:22:9f:6c:9f:48:6b:11:cb:27:52:93:fc:4f:
                    a5:f3:1d:98:5b:dc:2c:78:cd:00:e4:ee:5c:91:c2:
                    80:58:7a:b1:7c:8d:1f:7b:e3:e3:2b:9a:4d:80:b1:
                    40:04:d4:87:3e:e9:ab:d2:4a:92:05:42:e8:21:f4:
                    6c:7a:67:36:25:a1:18:da:84:17:60:b5:35:c5:10:
                    97:c5:3b:03:8f:fe:94:03:9e:36:c9:8f:99:eb:a4:
                    9a:d7:a7:1a:8d:ff:12:2e:32:d7:cc:de:53:2b:69:
                    45:7c:e8:85:07:be:41:48:15:53:d9:19:6e:d8:d6:
                    a2:92:c4:77:07:f2:06:94:40:f1:4c:1a:df:d2:42:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:41:86:54:BD:BF:45:2A:7F:9A:B9:A1:4D:C3:B1:6A:96:00:72:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7b6487b-04b2-3e81-9a4b-ead88f15032e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:9f:83:92:3c:78:5c:00:50:ee:2e:94:77:7e:23:f8:53:
         5b:26:2e:3b:48:ce:da:67:be:42:b6:6a:99:e2:62:ad:6b:17:
         7e:6a:e6:e9:25:43:07:2f:9f:e1:bd:3b:f5:52:4b:a9:b2:ea:
         e1:93:d5:a8:0e:ed:8a:98:23:e3:e6:52:af:77:21:c6:1e:a4:
         2d:59:46:66:2c:63:2f:b5:48:fc:a0:ae:ed:a6:ee:7d:39:f2:
         1c:4c:2e:74:e6:6b:29:d0:89:a5:e1:a0:b5:63:15:9f:42:25:
         87:52:c3:36:64:17:39:fe:03:ef:cf:7a:62:ad:64:c4:14:48:
         c6:43:76:fe:cb:58:06:70:8d:5b:38:45:7c:e5:f8:40:db:84:
         65:d7:0a:7f:ca:4e:f8:29:6b:e4:dc:1a:36:5d:1a:9b:a7:e6:
         8e:4c:a5:2d:5f:a8:b1:9a:22:bc:b3:16:44:37:50:55:59:a1:
         e9:80:eb:54:ee:e4:4a:e5:19:5d:d2:be:dd:13:ad:0e:9b:6b:
         ad:71:f7:da:1c:4f:98:a4:bb:18:93:7d:fd:ea:b2:d7:9d:3d:
         6e:d6:3b:b6:9a:b0:f9:af:47:65:8f:38:d2:d2:62:d9:7e:c5:
         45:2d:0c:14:ee:17:b2:13:04:fa:8e:65:40:15:61:b4:b9:c0:
         4f:f1:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:08:57 2025 by rpki-client