Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa
File:                     50295063-44b9-3f73-8e63-136553fdd8cc.roa (raw, json)
Hash identifier:          YnELkFQ3Y8Z45x7FEvVAf4Qh5521I7tZBizN9GKirWs=
Subject key identifier:   94:5F:9F:22:CE:9F:EF:BD:20:FA:D2:FD:52:77:01:3D:F8:97:15:39
Certificate issuer:       /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5
Certificate serial:       010D0C9F4328584B6A6202CC58937AA5CD107380
Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     54004
IP address blocks:        23.141.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:02:cc:58:93:7a:a5:cd:10:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=84176ae1-9ade-43cf-9e82-da82e7a82c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:3a:04:45:15:54:a6:93:29:55:cb:b9:2e:
                    34:ae:79:df:a8:8e:d9:13:2f:89:e5:83:0f:fd:82:
                    fb:9a:07:39:db:47:30:55:1e:d2:43:44:99:d4:3f:
                    ea:b9:f7:f3:d7:cf:79:21:15:c7:ee:4b:4c:b4:d3:
                    10:ca:b4:ec:eb:f4:d8:43:b1:39:10:ee:64:7f:4b:
                    be:06:a7:41:37:8f:f4:49:50:e4:60:c9:fd:d6:30:
                    1d:67:dd:f8:84:96:8d:e0:db:fd:b7:33:3d:be:a9:
                    f6:79:ac:e2:1d:b4:6d:4e:f2:9c:4e:1f:e6:f3:28:
                    eb:f2:ce:33:71:d4:b3:5d:7c:d9:f1:d1:6c:c8:f4:
                    3d:59:5e:65:0a:03:47:dc:80:f2:42:43:bd:e5:4a:
                    a5:e1:62:25:78:b6:a3:66:a6:e6:f5:39:50:2c:d0:
                    84:72:bf:88:8c:1d:d9:7d:02:e7:36:4c:e0:a3:41:
                    c3:9a:69:25:c5:cc:2c:63:af:ce:3c:9a:fb:ee:03:
                    7f:0c:69:c2:27:39:96:c0:fb:12:dd:74:da:3a:84:
                    3f:7c:1f:82:2f:88:88:56:56:58:5d:13:ce:d9:3a:
                    d4:39:ca:53:f1:04:f5:6c:30:be:26:79:b2:22:a8:
                    ef:1d:7a:3c:18:1d:25:3c:0a:52:1b:d5:46:55:51:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:9F:22:CE:9F:EF:BD:20:FA:D2:FD:52:77:01:3D:F8:97:15:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl

            X509v3 Authority Key Identifier:
                keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:ed:7d:2c:fb:8e:74:bb:2a:6e:6d:bb:ea:aa:c1:df:5b:
         e4:34:7a:11:00:ee:a3:c6:cd:17:3f:33:b4:89:c3:56:26:e9:
         c1:6e:ea:c5:15:46:e4:be:fd:4e:98:91:f4:a3:22:e1:2d:ed:
         39:b9:bd:8f:29:74:0c:12:1e:e6:16:f0:62:71:35:a5:55:d7:
         40:3b:bb:d4:4f:ac:d5:9e:e8:5d:6b:2c:2a:a8:5b:f7:b2:5d:
         b2:4b:66:ee:b5:d1:38:74:66:6a:28:36:d7:fe:84:d5:ef:14:
         c0:cc:de:58:3a:e4:23:b9:0e:c9:d7:61:bc:e6:b5:df:2f:b9:
         8f:d1:7a:07:be:c1:8f:a1:07:fc:18:60:ab:06:79:3b:0e:44:
         93:3c:ce:1f:23:8d:6e:e2:7a:71:21:14:8e:ae:33:84:db:3f:
         1c:49:9f:b4:81:60:cc:a2:0a:71:94:95:f1:ef:e9:c2:61:b3:
         04:01:ff:07:b8:16:93:ba:3b:4e:b8:59:38:71:46:ff:55:2a:
         6c:d4:9b:e3:16:39:7b:34:b4:b3:ef:6d:d4:26:3c:4b:d0:ac:
         73:57:d1:cd:64:80:3d:c6:7d:f5:87:79:a5:d2:60:a6:82:56:
         03:47:ae:a1:88:30:f3:32:ff:36:e9:14:5a:11:55:ea:f0:91:
         b4:0a:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:17 2025 by rpki-client