Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed9bd0a5-6769-3de3-be95-3f540cf358ea.roa
File:                     ed9bd0a5-6769-3de3-be95-3f540cf358ea.roa (raw, json)
Hash identifier:          nCUhyrCCRNJBVks0wXeV8S4j1v9kaxyghOdN6Ey0aJY=
Subject key identifier:   61:11:B1:64:B0:1B:7B:AA:1E:60:F8:63:F0:BD:F9:2A:80:24:74:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B583C9781D23FDB54B2D08500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed9bd0a5-6769-3de3-be95-3f540cf358ea.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.206.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:97:81:d2:3f:db:54:b2:d0:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=9ece0a8a-2169-41fe-9bc2-da6a6008445d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:66:0f:63:8b:94:67:8b:3b:92:eb:5c:21:e9:
                    c2:bf:ec:e1:e0:2c:55:b4:20:93:5a:f4:02:82:cb:
                    9e:03:68:30:da:1d:f2:0b:97:72:35:23:05:ad:d4:
                    cd:f1:3d:ea:2d:25:d5:a6:c1:5d:6d:95:7b:f7:74:
                    3a:9a:13:a2:70:e4:2c:e0:82:ba:28:4c:ab:38:1f:
                    31:8d:a2:8d:53:15:d5:66:39:9e:c2:12:fa:15:f2:
                    c6:12:74:f7:ec:f6:ea:a2:73:f2:2e:8e:ee:d0:22:
                    3b:e5:b5:36:f3:f9:d4:5d:da:af:8c:e8:a2:a7:04:
                    e1:75:b6:ca:7b:f8:bd:31:31:5d:97:74:1d:ae:1a:
                    50:1c:c1:d1:8b:47:52:64:b6:60:80:c4:95:ce:bc:
                    e6:4d:ae:cd:0f:01:76:6a:83:00:c8:88:2b:38:7c:
                    b3:79:40:6a:a3:99:eb:7c:f8:b8:ac:11:88:d1:b5:
                    d5:ad:f1:94:bf:80:8c:c9:08:2d:d1:43:6d:0e:c0:
                    ee:e9:9e:64:1e:c5:6e:cf:bb:44:33:b4:a9:cb:ee:
                    ae:56:f6:23:8b:88:1f:d4:a4:e3:57:0f:28:88:0a:
                    e9:31:3d:11:82:34:c3:2d:74:4d:ea:a1:97:05:f0:
                    75:91:d6:f1:cb:11:ce:cf:c4:6e:eb:39:47:89:c5:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:11:B1:64:B0:1B:7B:AA:1E:60:F8:63:F0:BD:F9:2A:80:24:74:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed9bd0a5-6769-3de3-be95-3f540cf358ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:49:b3:9b:23:b7:13:db:7e:04:dc:67:38:e0:ce:12:88:
         e1:fd:b3:81:7d:63:7a:04:2b:6f:df:c5:d5:b8:f7:f1:62:bf:
         09:41:e5:c6:92:de:1d:a8:97:f3:07:d6:e0:2a:d5:51:96:2a:
         db:0a:37:44:18:5e:cb:5c:21:ee:66:60:d0:b0:fa:7b:30:6e:
         ab:86:08:87:0d:f3:db:7f:87:7a:a7:22:c2:35:31:8e:6a:2d:
         71:85:d4:b8:3e:23:1c:b4:35:ec:47:6b:55:d5:2b:2a:f0:65:
         ef:f9:b7:a3:55:7e:1a:74:0e:75:c5:b1:c8:1f:81:3f:a1:1b:
         1c:39:2b:89:35:31:7c:ea:d1:47:a9:0b:65:9d:b9:52:4a:ed:
         f6:7d:a4:f4:55:67:f3:02:fc:2c:02:2c:20:cb:42:0c:00:df:
         a2:1e:c0:15:f7:8a:e8:2b:79:f4:12:bb:57:f9:5f:c2:36:71:
         c8:38:32:33:1c:25:44:e0:e7:0f:14:54:84:63:b8:22:f1:04:
         db:f1:c2:04:f3:c6:cd:8f:2b:1a:ad:40:12:10:c9:ea:d1:e9:
         df:10:87:38:b0:0f:d9:3d:93:62:bd:f6:ae:84:94:c0:46:ee:
         36:0a:0e:65:82:ac:82:b7:e7:db:9c:86:32:e9:ae:77:0a:20:
         7f:ae:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:39 2025 by rpki-client