Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd9f5e3d-e9a0-3e9c-bcd5-96a6ce9dd04d.roa
File:                     fd9f5e3d-e9a0-3e9c-bcd5-96a6ce9dd04d.roa (raw, json)
Hash identifier:          Q3X8iUAJ7+y6IQ2A212mdr+rBe8qwPkqAhu86FTzu9c=
Subject key identifier:   76:88:03:5D:08:0C:19:10:93:5D:4E:FE:19:C7:1B:8C:14:F5:0B:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B398715BE46F47D24FB6DB180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd9f5e3d-e9a0-3e9c-bcd5-96a6ce9dd04d.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.13.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:15:be:46:f4:7d:24:fb:6d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=f5c137b9-8c81-4b98-82cd-a4d8cf911a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:3a:ad:d9:20:52:b4:05:4b:1e:69:0d:bd:
                    04:07:7c:cd:87:2a:58:98:98:31:9d:04:0c:e8:68:
                    69:f1:81:75:17:06:02:4a:1e:4d:1c:99:c8:51:70:
                    03:a1:86:ed:63:cc:3e:2f:6b:db:bf:2a:77:f3:63:
                    98:0b:73:3a:9c:47:74:27:ef:70:a0:75:b5:e5:cb:
                    71:b9:ec:de:3d:5a:16:fc:6e:df:28:40:7d:f4:35:
                    63:be:a3:8b:9f:56:29:8d:14:4b:63:f3:d5:58:fe:
                    a1:62:81:47:1b:f1:a7:fe:1e:e5:fd:2c:12:a2:2f:
                    f0:76:8d:9f:4a:67:f6:74:27:e9:88:59:8c:71:21:
                    85:f9:3f:c9:43:33:dc:23:c5:f5:bf:ba:62:16:7f:
                    07:48:c9:18:63:3b:28:8d:76:58:23:98:85:ff:7c:
                    a1:b5:3e:06:65:e8:eb:d3:82:e4:83:38:aa:56:77:
                    7d:17:ac:5e:ea:9c:ff:da:02:03:15:ae:71:e7:c5:
                    08:fe:1f:ba:9f:42:61:3e:f7:56:75:26:26:f0:d5:
                    cc:51:6f:3a:46:f6:f3:0c:7e:5c:d9:d7:2e:fd:6d:
                    22:ab:b2:c4:e4:e0:be:33:a5:55:52:ae:42:ae:57:
                    b3:00:67:ea:36:f7:21:43:3b:28:e9:73:68:d8:35:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:03:5D:08:0C:19:10:93:5D:4E:FE:19:C7:1B:8C:14:F5:0B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd9f5e3d-e9a0-3e9c-bcd5-96a6ce9dd04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.13.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:d1:9f:45:c1:f2:89:57:ed:63:d4:dc:c7:bb:b8:d5:09:
         9a:41:7a:7b:b3:3d:69:77:84:6c:ae:65:9f:e2:04:d1:5c:93:
         ba:2e:6b:94:9e:d2:2a:7c:6f:1b:32:53:31:64:32:20:5a:b9:
         dd:59:6b:09:19:03:e6:f0:76:b8:e1:04:40:ae:92:c5:00:41:
         23:14:bf:c4:2c:c2:44:97:26:c6:0f:33:40:19:ed:ad:49:12:
         1b:7b:99:52:32:15:a2:3b:62:53:f4:42:b7:b7:3e:dc:69:d1:
         7b:82:e1:b5:b4:5c:70:62:86:64:43:22:81:91:ca:7f:b6:50:
         bf:84:b6:14:f8:80:4a:d7:74:92:3f:97:71:22:ed:22:1a:ff:
         14:23:db:b2:09:26:86:d1:ea:c4:1c:50:53:a9:23:aa:61:c5:
         f6:8b:97:e3:cb:cf:d0:df:b5:27:c8:ff:92:51:0c:e6:fb:18:
         12:a6:b5:26:44:e5:57:fb:6b:c8:10:ff:8a:8d:aa:39:0e:3c:
         66:04:82:a9:45:b7:70:5b:01:a2:6b:25:8c:0d:69:5d:90:4c:
         f8:cf:46:52:c7:22:ce:4c:77:20:c5:fd:80:31:14:47:50:68:
         66:6e:22:b3:10:25:58:40:67:0e:50:46:95:15:07:08:f4:5a:
         87:1f:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:28:38 2025 by rpki-client