Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa
File:                     a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa (raw, json)
Hash identifier:          8Ya1fyewiZsL5KPtF/b+2NeagMiHExic+lkFA9Ebp1c=
Subject key identifier:   25:90:15:90:92:D6:E7:31:AF:45:BF:48:A4:5F:7E:E0:EE:DB:B2:A2
Certificate issuer:       /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial:       010D0C9F4328584B2066D90263D19FDCBD23A880
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     30006
IP address blocks:        23.169.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d9:02:63:d1:9f:dc:bd:23:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=c1a02b52-4ec8-4f5f-8a09-cfcc2b53e0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:bc:da:00:2e:03:43:bd:a1:02:db:fd:9b:
                    60:5d:72:47:3c:3a:62:85:1b:7b:43:e5:40:95:b6:
                    69:af:a9:94:42:d1:9c:39:12:a3:d4:72:c8:4e:a9:
                    e3:a1:78:fc:5e:f7:76:bd:ad:ec:b3:b0:bd:0c:89:
                    1b:d6:3d:3a:dc:b7:90:d9:02:5c:e3:fd:7a:01:98:
                    37:15:f1:b0:bf:fc:18:a2:a2:1d:ac:d8:c7:85:50:
                    ed:e4:07:aa:c6:d9:bd:d9:55:48:7c:e8:ae:45:d7:
                    01:b7:7a:c2:0e:df:42:0e:f8:cb:10:ed:5b:4c:d4:
                    15:c5:07:9b:85:35:08:6b:89:d1:49:a0:cd:a2:fb:
                    e1:23:d8:3e:f2:e7:5f:30:fe:67:9f:9c:21:3a:78:
                    05:47:9b:90:41:1a:6a:66:ad:f0:a0:36:78:01:9f:
                    a4:d4:a8:c2:e8:9d:2a:62:0b:7e:da:5b:af:09:00:
                    c9:31:bd:09:20:4d:44:e0:db:c6:d7:1f:5c:03:d4:
                    cc:22:18:1b:b5:c5:a3:b9:a5:ee:9d:3a:fa:8d:15:
                    82:f4:dd:42:7d:f5:56:15:9e:b7:67:ae:10:a9:d5:
                    56:3d:25:6f:bc:23:d5:77:fd:7a:c2:59:88:4c:6b:
                    87:77:1a:ff:80:41:57:fa:79:67:56:09:b3:3c:b2:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:90:15:90:92:D6:E7:31:AF:45:BF:48:A4:5F:7E:E0:EE:DB:B2:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl

            X509v3 Authority Key Identifier:
                keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9d:25:c0:4f:af:91:56:9b:10:0c:1e:2c:0e:67:f1:5c:13:
         10:08:c5:bb:c0:6b:e1:c9:fb:e7:c3:d2:20:be:3c:06:47:7f:
         e2:b1:01:4a:73:5c:7f:b5:b6:f7:c8:20:9b:46:ea:a1:18:df:
         41:86:12:02:bc:4d:bc:2f:a6:a0:f8:cb:0a:4b:0c:1f:15:88:
         70:0d:f5:40:59:73:32:c6:24:78:11:f1:55:31:23:ec:29:01:
         f1:35:bf:1a:f6:a5:44:c3:7d:18:2b:00:10:3c:2b:94:55:cd:
         9d:01:1f:5e:6f:1d:21:23:b0:74:17:fa:26:ba:42:22:15:b1:
         bf:19:b2:bd:71:ce:81:ea:b9:d7:ac:86:cb:b6:28:1e:53:8f:
         b6:4a:e2:ab:be:6d:f1:66:45:63:c9:48:4d:1f:d4:c1:2c:96:
         cb:c5:24:17:71:e6:89:dc:cb:70:03:e3:06:32:a1:18:0a:4b:
         f2:e1:cf:83:45:b7:91:44:08:89:cd:44:a6:b3:46:c8:08:c4:
         f6:42:79:20:d5:90:33:63:73:ca:ca:a9:b5:c2:e6:b3:50:e8:
         39:b4:d9:60:40:fc:d8:b3:e8:e3:4a:e3:67:91:10:d7:cc:d2:
         1b:c3:d5:f2:fe:c2:c4:dc:a2:9f:6b:d0:e1:9a:59:f7:5d:2c:
         6b:d1:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:20 2025 by rpki-client