Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f826fdd5-156d-3a1c-bf4c-75be10c4ad06.roa
File:                     f826fdd5-156d-3a1c-bf4c-75be10c4ad06.roa (raw, json)
Hash identifier:          pbWxB4cECpsOdE750sYcxatzBrndhNSFEj4+p9uPQOQ=
Subject key identifier:   E7:F8:1B:F6:97:22:C2:5F:0B:E5:14:93:9A:C7:A5:79:4D:B7:31:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B715D089561AB1335082A2E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f826fdd5-156d-3a1c-bf4c-75be10c4ad06.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     16625
IP address blocks:        23.209.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:08:95:61:ab:13:35:08:2a:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=fe201092-22f1-468b-a612-cb0808e1606d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:df:e7:e1:a8:2f:3d:a9:e7:aa:e5:2e:38:
                    fc:97:c6:0b:ba:16:d7:42:e4:f6:93:eb:cd:df:9c:
                    d9:28:18:fd:24:92:51:10:fa:ba:b8:cc:aa:cb:42:
                    e9:1a:06:0c:9a:25:b5:1e:ae:19:98:c4:43:63:be:
                    1e:81:78:6e:33:05:e4:01:2f:10:ae:62:a9:dc:81:
                    02:1b:94:21:61:72:37:fa:bb:08:8e:d6:2f:9c:a2:
                    05:9f:ff:b8:ef:64:50:b1:01:2a:8e:b6:ad:52:ab:
                    eb:2c:05:a7:50:f9:24:ca:5e:14:ac:a1:10:c7:55:
                    d0:82:f4:31:75:07:2a:8f:8f:41:6a:6c:02:37:83:
                    a1:1e:86:bd:08:90:2b:6f:f7:29:b5:29:c0:72:1a:
                    52:fc:e2:77:05:3b:b3:84:d0:3f:17:a1:9b:f8:1a:
                    62:68:d6:5d:7d:82:48:27:e4:39:18:29:e2:a2:ba:
                    a4:66:d4:d6:30:55:0f:64:4a:28:46:02:5d:2c:10:
                    11:c8:95:45:0c:25:3e:f4:e9:45:d5:34:e0:cb:ba:
                    c8:50:86:3e:58:d6:17:83:03:f3:eb:6c:cb:29:eb:
                    d5:7f:91:d4:08:1a:ea:11:7a:50:52:25:5b:0b:a4:
                    12:37:03:76:a6:04:c2:6f:24:c9:29:11:6b:44:2f:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F8:1B:F6:97:22:C2:5F:0B:E5:14:93:9A:C7:A5:79:4D:B7:31:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f826fdd5-156d-3a1c-bf4c-75be10c4ad06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:9e:da:0c:1c:9b:f8:71:6f:02:43:27:0c:dd:e8:69:94:
         2c:58:b4:0f:38:b2:61:3b:a5:8a:b6:7b:56:15:d6:cd:c7:fc:
         8f:58:f4:f7:a9:87:18:4c:f9:9f:fe:31:ab:6c:28:96:ce:5e:
         ab:90:4b:b3:26:19:cb:51:64:ca:b0:0b:b3:90:8f:8d:ac:6b:
         ac:f6:3a:1a:12:ab:22:23:37:54:7b:30:92:0b:ee:2c:e1:3d:
         d3:ae:63:0e:3a:a8:30:81:29:6d:8c:f6:c7:c7:ad:b5:56:fb:
         b0:18:7a:d9:f9:2e:4d:7c:70:de:ef:8f:69:ae:f0:1f:bf:c0:
         68:21:e0:24:55:bc:db:37:8b:26:c7:c1:aa:68:0b:23:38:31:
         e7:67:6a:ac:7b:20:e8:01:38:78:59:9b:eb:c8:08:53:9e:2f:
         77:90:ea:68:42:6c:c2:11:31:72:8e:cb:c2:26:02:ca:a9:7b:
         5a:e6:a1:6e:b5:23:17:96:55:26:2f:c0:6a:6f:2f:19:63:26:
         d7:80:44:1c:31:85:d8:5c:6c:53:ac:55:51:db:75:16:a9:c8:
         e8:e5:3f:76:a9:0b:07:3e:a5:6a:67:24:29:c0:74:cc:a0:be:
         de:79:56:ae:ad:af:e6:82:a3:cf:3f:9a:b9:25:52:58:a5:26:
         5e:fa:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:51:57 2025 by rpki-client