Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
File:                     b9390863-5768-389d-9641-597ee1febed8.roa (raw, json)
Hash identifier:          /DFK5CAChrh/hXpwOuA8uqD1c2Y9yAnqoV92yMVcSgY=
Subject key identifier:   EC:DE:FA:05:8F:58:AE:13:86:66:03:7B:F3:BF:4D:0B:5A:4A:9B:65
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584B0746BAD2D35A4EBB25648A00
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     31998
IP address blocks:        23.164.80.0/24 maxlen: 32
                          104.224.60.0/22 maxlen: 32
                          206.168.176.0/22 maxlen: 32
                          208.70.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ba:d2:d3:5a:4e:bb:25:64:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=aee54e3c-7865-4104-a140-fc32a34db0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:bd:0b:96:7f:b0:92:4d:86:c4:41:3e:c0:
                    01:30:4b:d8:af:c9:1f:81:95:66:cb:61:42:ff:37:
                    e7:f4:f2:47:f3:dd:50:06:c8:da:57:d0:85:73:d6:
                    1d:f0:ff:39:cb:fa:33:40:a6:d8:10:b6:5c:1b:33:
                    35:64:a2:00:28:d9:44:7a:0e:e6:33:18:80:35:38:
                    94:a8:9c:dc:81:bf:ca:d0:8a:70:6c:85:15:3a:50:
                    6f:e8:17:0d:10:03:78:8c:19:96:f6:ba:bb:a5:b3:
                    c1:47:bb:da:b3:61:3a:4d:20:bd:6b:29:99:1d:96:
                    1e:11:06:b7:b3:b6:fb:a1:5b:8e:ee:32:00:84:aa:
                    33:24:1a:bf:7e:73:07:d7:05:f7:e9:69:26:0f:38:
                    5d:25:2d:f4:c3:28:85:1d:64:0e:a1:14:70:e6:30:
                    7b:08:7e:66:7c:99:76:55:21:1c:e3:0a:23:c9:51:
                    c0:2b:c1:dc:89:9f:72:86:27:e7:e1:80:43:80:c0:
                    67:10:ea:ce:63:f7:99:5d:39:16:29:0a:1f:ab:4a:
                    30:bd:f7:3d:a3:01:02:85:18:67:d6:c6:59:5b:fe:
                    d2:27:46:11:69:30:62:1e:f2:8d:6c:d0:d6:f6:5a:
                    9c:6e:c6:63:90:af:ab:b4:7f:34:4a:50:88:f5:3d:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DE:FA:05:8F:58:AE:13:86:66:03:7B:F3:BF:4D:0B:5A:4A:9B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.80.0/24
                  104.224.60.0/22
                  206.168.176.0/22
                  208.70.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:14:0d:35:af:ba:19:61:e2:39:8c:6c:4f:6a:1f:c4:8e:
         55:1b:b6:9e:c0:79:6b:b8:f9:5f:b9:e5:e5:cc:d9:28:a1:2d:
         9e:2e:ec:bc:34:90:20:c6:50:82:cb:80:13:2e:04:a1:d3:0a:
         46:8a:8c:58:ea:f2:89:5f:70:be:3b:53:36:f3:0e:3b:5d:6f:
         28:85:b9:80:ba:65:ad:b9:d6:fb:84:95:ef:cb:3e:17:1e:d6:
         a9:7c:f4:6e:49:d8:81:8d:82:4a:92:b2:97:a3:05:2c:a9:80:
         f8:71:3b:1d:51:40:79:13:66:3d:16:89:8e:20:00:0d:66:7f:
         dd:35:04:1c:3d:bf:6d:ac:30:2d:4e:0e:0f:ca:c7:8c:36:8b:
         f8:d2:6a:18:63:90:e5:1c:91:a3:25:e9:e2:31:35:18:46:e7:
         55:33:fc:d4:d7:91:be:6a:df:d1:61:9c:87:2b:84:9c:78:48:
         89:a6:ed:8d:4e:dd:d9:c9:3c:30:75:08:ea:31:49:4c:5c:05:
         7a:0c:d4:1a:87:06:e9:e5:4b:43:db:87:8b:23:c1:24:b2:8f:
         b4:03:db:f6:94:e2:42:d2:bd:0d:66:9d:41:ed:ef:ad:37:bb:
         91:98:55:98:2d:e5:44:a0:72:bc:d5:e3:7f:47:40:d1:c5:68:
         49:c9:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:22:05 2025 by rpki-client