Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa
File:                     f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa (raw, json)
Hash identifier:          Qm1Wl29nrmhdq+UQcxVreQDsJf5755xr54nHf/odO30=
Subject key identifier:   22:CF:6C:D5:B2:DB:18:DB:4F:39:28:67:9F:E8:15:91:98:19:39:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B434C6E39293A43EBA7575A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.193.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6e:39:29:3a:43:eb:a7:57:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=9d6c68a6-bca1-4ecb-a571-dc12f809fcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:4f:e9:7e:a3:2f:f3:32:70:96:4d:52:11:
                    44:4d:e1:d1:78:6e:83:1f:f8:90:f9:4e:48:0a:ef:
                    80:4e:a2:2c:94:ff:b4:4d:4e:9b:d7:9d:d2:16:07:
                    2c:a9:ce:24:47:e5:d9:5b:24:8d:e8:35:9d:56:2a:
                    0c:79:a0:61:7c:94:e4:b9:d9:ba:d2:f4:ad:21:dd:
                    05:a8:92:97:a7:78:17:92:6b:c7:19:9d:15:09:fe:
                    42:e0:b1:3c:92:0b:03:01:c8:97:54:51:59:b4:00:
                    2a:f1:ee:2d:dc:47:19:06:bd:8b:5b:ff:ce:d9:f9:
                    6d:c2:4f:c0:a5:75:a0:56:93:1f:a5:0a:cb:5c:7f:
                    47:3c:3b:35:83:db:2d:e1:03:1b:66:f2:ed:e0:9a:
                    ee:d9:8d:6f:3d:12:e3:1d:79:69:e6:a5:b4:d6:77:
                    05:64:7f:44:7d:0d:9e:4c:e4:64:9c:9b:bc:12:b4:
                    6a:72:56:fd:de:a4:d5:df:28:09:0a:d0:4d:ce:ee:
                    25:4e:60:14:86:36:4e:fb:c6:b5:6d:e9:f3:11:0e:
                    f1:7a:e8:51:cc:25:64:68:76:69:b1:85:f5:6e:a7:
                    4e:db:de:de:5f:05:80:61:c4:7e:f6:a0:90:52:9f:
                    61:bc:1a:17:eb:51:4e:3b:a4:a6:0f:dd:f3:93:e3:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:6C:D5:B2:DB:18:DB:4F:39:28:67:9F:E8:15:91:98:19:39:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:f1:04:55:9c:66:e3:4a:17:01:fb:e7:6f:59:d7:03:77:
         ca:cb:36:e8:ce:36:f0:21:36:a0:b6:71:51:3f:25:6a:8b:d2:
         e8:29:5c:1b:e4:d4:2d:6d:40:f6:84:84:17:e5:f4:85:15:80:
         1e:4f:11:cd:2c:e2:c7:9f:7c:65:28:41:f4:d5:48:4e:9f:6b:
         7d:80:f8:79:fc:97:22:d4:9d:7a:a9:80:a1:14:18:39:99:41:
         4a:47:a8:d0:2e:1e:26:5a:8d:8c:9b:dd:8e:43:f9:ae:a2:6e:
         df:3c:24:e8:60:82:20:5a:9e:03:c7:80:32:fe:cb:3e:a5:49:
         26:90:06:49:fe:29:c7:e4:89:7d:f7:b5:87:bf:26:0f:74:90:
         72:ea:5b:06:b5:28:15:76:b6:47:50:bb:fa:c4:5d:52:ca:6f:
         67:85:a2:3b:fa:6b:4e:95:aa:c0:3d:37:2c:dd:08:14:24:8f:
         fa:bd:49:53:f7:e0:e3:8c:16:e8:0d:ba:3b:b6:23:69:bb:32:
         78:fd:77:54:ca:9a:b7:4e:6e:dd:ef:67:4b:11:ae:24:7b:13:
         26:7a:56:ec:aa:06:54:3d:fb:46:68:5d:ee:cd:6c:53:4c:d4:
         d1:71:d3:45:65:6c:f0:5c:b6:26:4c:06:61:9d:30:b9:58:3d:
         ff:34:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:53 2025 by rpki-client