Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd30813f-e34c-39a7-9776-306113c3a840.roa
File:                     fd30813f-e34c-39a7-9776-306113c3a840.roa (raw, json)
Hash identifier:          3F6kNa+cZFpQ4lXfSEewfOuWsLFBy7wXXYblL6fYbPI=
Subject key identifier:   68:7F:2F:85:AD:31:7C:01:33:D4:6D:80:6F:9E:51:19:BB:35:BA:81
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF6F007C981649CEC789180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd30813f-e34c-39a7-9776-306113c3a840.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.54.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:f0:07:c9:81:64:9c:ec:78:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=e89bff5f-75d8-494e-ad88-edaa6bbd9a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:11:e1:bf:6e:2d:1d:8c:3b:5f:0c:94:85:
                    42:08:2f:bc:9a:b5:81:d6:83:a9:c0:81:92:fa:bc:
                    da:9a:db:b4:78:12:d4:51:49:3a:29:99:33:c9:8c:
                    c0:35:29:02:52:33:6c:18:3e:59:76:65:06:f6:b4:
                    d7:bf:60:f9:27:8b:1b:30:ec:bf:da:cd:ea:2e:b3:
                    a6:ce:f7:13:dc:d8:ba:86:94:30:bf:94:c2:21:73:
                    db:ed:b9:d2:9c:bf:f6:6e:73:99:c4:b5:a7:1f:63:
                    d3:57:d6:7a:d5:12:db:9c:24:98:24:54:de:be:78:
                    8b:0b:81:6c:95:79:17:35:48:63:3f:1d:26:bc:00:
                    6b:2b:75:c6:b8:ee:26:aa:cf:1a:33:1a:71:17:6b:
                    48:b2:5c:63:65:b1:7b:3c:dd:5a:41:81:81:7c:10:
                    6f:dc:b6:87:43:28:96:53:bc:b7:1a:30:b3:10:6e:
                    26:ce:e8:1a:ce:d3:62:63:47:50:3c:0c:68:2b:3d:
                    8a:24:c6:bf:e3:97:28:49:1d:5c:c8:c7:2e:1a:b2:
                    c5:2a:0d:43:15:1e:29:25:7c:d7:d7:f1:a1:e6:c6:
                    6b:b5:e7:a4:7f:e2:4a:ac:3e:28:84:9e:ba:ef:45:
                    42:5e:97:fc:53:dc:3e:b1:18:97:77:43:26:73:16:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7F:2F:85:AD:31:7C:01:33:D4:6D:80:6F:9E:51:19:BB:35:BA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd30813f-e34c-39a7-9776-306113c3a840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:57:f5:7f:b7:4e:d3:28:13:23:9f:f1:7d:eb:54:8c:9d:66:
         a4:01:68:af:58:21:0d:34:a1:ab:9f:06:4a:33:28:02:25:e3:
         6c:80:32:fe:ba:cd:ba:f9:72:01:c4:54:4b:46:70:53:7d:f7:
         94:b7:3d:c5:e5:5a:54:f3:ba:a1:25:34:93:36:1a:26:84:c1:
         fe:58:1c:2d:0e:7e:56:3b:01:d9:77:12:48:4c:f8:1c:75:bc:
         53:3b:b6:36:0f:0f:ea:d3:cd:5a:b6:e7:73:e6:f7:0e:20:11:
         ef:cb:a1:4f:68:3c:13:5b:5c:c4:dd:bb:6a:e1:f4:7a:e0:8d:
         c4:0b:5d:fc:e9:23:a2:fd:a9:17:2d:15:5d:eb:8a:b8:fc:cd:
         bd:f7:f7:31:c0:a7:82:07:bf:a8:fa:78:ee:60:ce:cf:0a:32:
         45:14:df:c1:57:68:26:58:18:16:10:87:2f:30:18:86:65:39:
         a8:08:e6:69:ee:a0:75:61:14:db:1e:45:0d:ed:94:ef:ea:f7:
         46:b5:c3:d8:29:00:61:8b:90:79:d0:ee:87:35:37:7e:f3:75:
         60:b1:0a:bd:4c:59:6b:80:2a:2d:79:a6:71:73:86:5d:0e:5e:
         90:d1:61:6c:5b:40:3d:1d:b8:d6:35:34:86:aa:d4:15:a6:2e:
         d7:c5:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:22 2025 by rpki-client