Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa
File:                     cea2ec17-5d07-3b0a-8477-302a4c9631df.roa (raw, json)
Hash identifier:          3Al2b1WvIYid7jZTXqjFDIX5zhVTkum5lipNB5f7hRI=
Subject key identifier:   59:8E:E8:CD:D6:5F:8D:67:C6:B0:29:1D:99:DE:17:87:6B:30:88:D3
Certificate issuer:       /CN=16b561b0-e462-4e18-a6cf-e910426a13d0
Certificate serial:       010D0C9F4328584B8BE23CCB6F9A00E6647B4C80
Authority key identifier: E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     394590
IP address blocks:        23.144.104.0/24 maxlen: 24
                          2607:ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3c:cb:6f:9a:00:e6:64:7b:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b561b0-e462-4e18-a6cf-e910426a13d0
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=11ec09cd-6a6a-48fb-be84-5f71dd92114c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:ec:f1:99:df:2b:89:45:fb:60:d4:47:3e:
                    b9:ab:54:7a:ac:51:1a:7e:2e:c0:fc:f9:5b:d7:e2:
                    db:2d:c2:11:88:a4:0c:ad:6e:e2:da:38:49:4a:e5:
                    e3:2e:59:f0:88:23:22:16:72:a7:1a:48:29:91:89:
                    49:49:25:59:36:90:3a:b0:e4:9f:da:a9:54:b3:c5:
                    a0:82:22:78:bc:b5:b5:20:7c:9b:19:24:b6:55:c7:
                    d4:b0:a3:47:4f:e1:4d:86:1a:4e:3b:16:2a:cf:53:
                    cd:04:52:d8:27:24:01:a3:14:fa:24:68:be:10:d9:
                    21:92:8d:4d:80:7b:7b:fb:e8:85:64:7e:b2:37:5c:
                    22:1f:a9:b7:cf:25:14:b7:fa:c5:5b:91:c4:a6:be:
                    f9:fe:13:b3:42:35:cf:71:35:67:3d:15:3c:e3:93:
                    12:30:0d:60:ae:05:79:4b:d0:23:e5:4b:49:01:4d:
                    10:06:10:a1:f9:56:19:03:cd:6a:6f:6b:8d:82:c7:
                    5e:fd:15:18:9a:8d:84:f9:5e:66:7e:73:52:85:ee:
                    e6:0d:dc:5b:ff:a5:58:90:0f:ab:14:fa:19:9c:b8:
                    63:92:19:d8:6b:cf:bc:c4:f0:50:0d:3e:e3:fb:3d:
                    47:7d:9d:53:8a:77:db:72:1f:84:13:48:cd:e4:fc:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:E8:CD:D6:5F:8D:67:C6:B0:29:1D:99:DE:17:87:6B:30:88:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.104.0/24
                IPv6:
                  2607:ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:30:6a:c4:75:a5:cb:00:42:8f:9f:4f:8f:5e:eb:e7:c7:
         93:46:6f:ab:ed:86:71:f4:46:e3:9b:6b:2c:f8:f0:c4:cb:07:
         6a:d7:67:20:da:de:ea:78:45:b1:b0:20:75:c9:18:b8:6b:51:
         14:2b:32:bc:cb:58:c1:75:f6:0b:07:b4:4d:83:bc:96:48:a9:
         12:08:2e:0c:3e:da:9f:ea:4c:0a:46:0d:6c:a1:44:62:ee:21:
         20:ff:19:60:df:7f:37:e7:7a:c5:9c:6e:f1:71:fa:a7:a7:a4:
         a2:e5:89:aa:d5:c0:09:57:8c:c4:4e:e4:6a:e2:84:1c:e4:7a:
         3d:a9:3d:52:c3:52:6d:be:2d:bc:79:7c:6a:f3:e8:cd:73:0b:
         65:7e:c8:b8:c4:ed:15:c8:9b:67:69:9e:3f:af:27:68:ac:49:
         8f:a6:7a:6e:38:19:f0:f7:1d:93:8e:83:9d:ab:57:31:d9:ea:
         e5:2b:da:ce:0f:7b:ff:85:21:bb:2d:1e:fa:2e:bd:74:6d:3e:
         33:f8:34:0c:17:c3:be:42:7d:d9:f1:92:6e:32:89:15:a2:d1:
         be:99:77:20:f6:54:40:de:84:0d:0b:d7:7c:58:4c:3b:2c:de:
         04:bc:53:bd:55:6d:f0:56:34:e5:e4:d2:dc:91:5a:2d:f6:69:
         47:fe:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:07 2025 by rpki-client