Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa
File:                     14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa (raw, json)
Hash identifier:          ta8N3XYoIrPauNX3rm6BECXEKhSwxq873HHvfOj1um0=
Subject key identifier:   92:AC:2B:BE:A2:89:A8:9F:EB:B7:73:5B:B9:12:01:ED:00:0D:8C:88
Certificate issuer:       /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
Certificate serial:       010D0C9F4328584B56D7300E67ED2EE488212100
Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     399870
IP address blocks:        23.189.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:30:0e:67:ed:2e:e4:88:21:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=ab0ba8ec-ca30-4c06-9ea4-c40ce7db83ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:7c:57:ce:51:17:f6:ae:42:34:63:36:ed:
                    6b:43:87:87:0b:33:11:e2:61:6e:1c:ee:d3:03:a4:
                    0d:15:aa:68:7b:eb:b7:7a:91:8f:a4:a9:ee:65:08:
                    9d:42:28:3b:42:a1:97:a8:f1:11:97:d3:21:50:6b:
                    51:ee:26:07:76:44:17:08:39:2c:ac:d2:f9:b7:ca:
                    76:b5:79:22:ac:b2:70:4e:88:d8:78:be:bc:e3:88:
                    04:98:de:1d:c2:84:ce:56:9b:ef:26:9e:5e:fe:01:
                    bd:0f:bf:95:0b:22:f9:fe:b2:06:57:0d:61:59:34:
                    52:d7:16:ca:00:81:12:b7:c7:9c:84:c8:7c:d5:d2:
                    cf:01:ec:6d:88:9e:7d:f0:2f:02:51:c1:38:7d:f5:
                    49:0e:7f:26:90:18:82:25:ec:a0:02:0e:e5:de:42:
                    cc:d3:3e:57:58:bc:32:e7:e0:ba:a4:cf:4b:4d:9c:
                    94:c6:30:fc:c7:cd:92:f5:e0:3b:dd:2d:31:29:18:
                    50:bf:11:74:5c:9c:dc:6d:72:64:a2:8e:cb:b5:af:
                    89:1b:e3:30:12:ba:13:f9:a8:ac:71:1b:c8:75:94:
                    d4:34:4a:09:c8:16:df:fc:36:e8:33:24:cf:e6:37:
                    13:50:93:12:35:73:66:46:c7:90:81:13:1c:df:b1:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AC:2B:BE:A2:89:A8:9F:EB:B7:73:5B:B9:12:01:ED:00:0D:8C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/14a7187e-7e8a-393c-bece-c2c0bc6bad47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl

            X509v3 Authority Key Identifier:
                keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d6:b7:05:1a:63:a4:ad:3d:8c:4f:6c:51:a8:ba:1c:7a:ee:
         ee:ed:39:2c:9e:a6:07:b2:e6:6c:71:0f:8c:7f:a0:e0:9f:b6:
         18:ad:ee:bc:91:01:6d:ad:da:a7:04:e1:92:c6:1a:40:0b:31:
         09:25:d7:52:5c:eb:c7:d6:9b:8a:3a:83:42:5e:12:45:e7:ca:
         f4:ad:7c:4d:a2:08:0f:14:70:4c:47:b0:c2:05:96:44:1d:9d:
         32:d6:ff:33:a5:06:2d:bf:68:41:3a:bd:97:36:b2:29:63:2f:
         20:68:80:c1:46:fc:2f:af:e9:2b:d1:89:12:ba:61:68:44:87:
         ac:81:df:83:e4:ab:1e:2c:c6:4c:4b:08:fc:cc:58:00:3b:be:
         5d:06:1a:34:77:31:c7:c3:56:da:03:47:8d:9c:7e:2b:fc:b0:
         d3:10:91:84:ff:43:4b:bf:1b:f0:2f:8e:b0:9a:54:4e:75:a6:
         d0:af:9b:cb:90:dd:92:56:d8:7a:37:6a:6d:8f:ea:c4:c5:00:
         16:31:03:db:43:a6:e6:65:9a:8c:d9:30:3f:75:50:4a:20:29:
         95:84:09:a0:cf:c6:d4:7c:a5:b3:2c:3c:e7:b5:92:ea:65:d3:
         f2:7c:d9:5e:1d:d5:98:fe:6e:10:f1:50:f0:25:28:54:37:1d:
         04:3a:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:15 2025 by rpki-client