Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0a6245b-4fe7-327c-b2d3-4dc315315e45.roa
File:                     f0a6245b-4fe7-327c-b2d3-4dc315315e45.roa (raw, json)
Hash identifier:          jSAzZNLP9t6uMnLiKQ5zR/4fjDXjIcZpYJpNdDDLx80=
Subject key identifier:   76:2E:AE:84:44:AC:40:60:C4:DB:86:89:09:E1:2C:54:B0:EE:76:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF70C1DA80AE309A1A59460
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0a6245b-4fe7-327c-b2d3-4dc315315e45.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.59.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:0c:1d:a8:0a:e3:09:a1:a5:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=0f79da28-cfbb-483f-adef-56f67652398f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:49:02:54:ab:de:c1:84:76:57:c5:e1:f7:
                    44:eb:26:c2:b0:80:83:2a:44:9d:e4:2c:d2:87:23:
                    52:4f:e3:10:47:43:62:8d:61:4a:ce:6f:1a:79:da:
                    8f:af:17:3d:a7:01:21:96:d9:c6:b7:91:1e:7f:2a:
                    96:36:56:7d:e5:bc:0e:9a:61:3b:ff:6f:7c:ae:b9:
                    a5:54:5e:81:40:11:de:5c:36:9f:a6:b7:fe:de:df:
                    47:87:9e:bd:72:1e:1f:52:2a:2b:60:ae:01:e1:92:
                    e4:e8:db:9c:86:a3:2f:7d:9d:81:33:43:08:fc:cf:
                    f6:9a:53:db:0a:b9:f4:7a:ec:af:f2:8c:ee:d7:8d:
                    23:97:0e:a5:8e:4b:95:5f:e1:27:01:85:14:0b:d4:
                    c8:53:e7:70:15:64:61:1c:6a:5a:f7:0d:d0:6d:d8:
                    6d:1d:1e:8d:5f:33:8a:b0:7b:b8:49:52:c3:76:8a:
                    fd:ff:f8:8b:41:5e:98:68:78:b2:b1:3f:d5:60:ce:
                    8b:38:4b:31:c2:e9:2b:54:de:98:d7:f2:48:8e:d0:
                    82:c5:5b:36:e1:71:60:8a:42:bc:15:4d:4e:1b:de:
                    05:10:b4:a1:c3:e6:ff:63:8f:ed:36:1a:e3:82:8a:
                    01:79:20:97:37:89:6c:73:e0:58:49:59:c7:15:e2:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:AE:84:44:AC:40:60:C4:DB:86:89:09:E1:2C:54:B0:EE:76:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0a6245b-4fe7-327c-b2d3-4dc315315e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:b1:77:56:8e:a3:d0:ff:f7:c4:ab:00:ea:40:31:85:56:
         09:bd:55:38:c9:f1:77:8e:bd:ae:2d:7b:e0:a5:53:03:af:43:
         d1:05:10:83:28:da:88:52:c7:ff:9e:04:05:74:2e:d3:93:ed:
         cb:0b:13:96:7d:05:6e:e2:46:e1:f7:c2:38:54:d4:53:c0:54:
         d3:1b:54:13:c7:f6:71:73:2d:df:76:de:40:bc:27:88:0a:ff:
         70:a6:50:5b:51:cd:b0:78:2e:47:a4:e8:b8:40:d7:a4:20:7f:
         cb:14:78:10:9c:ac:c4:8d:24:49:18:43:74:98:8d:4d:0a:4c:
         0f:30:9c:93:ce:df:b4:ab:03:a4:96:13:ab:a5:21:d9:58:3a:
         6a:48:2e:2b:2e:2f:ab:5e:2f:aa:d2:f9:66:30:81:0a:f7:d7:
         74:e4:07:f9:2a:da:9c:27:79:79:c9:56:36:d4:e3:c5:ea:d7:
         d8:8e:5a:7d:6d:fe:9b:68:3a:ad:17:b4:dc:7e:72:09:43:27:
         8a:d3:59:68:d1:1d:4e:10:ec:d3:d7:db:12:63:19:07:39:5e:
         a5:ed:7a:66:07:ef:de:8a:ee:37:43:1d:b3:d2:3a:ab:42:0e:
         e8:3c:15:9b:83:67:b7:8c:c5:d0:c5:89:1b:11:ab:44:01:17:
         8e:27:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:28:25 2025 by rpki-client