Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
File:                     431ff5e4-1113-3827-ae60-a56d271454c4.roa (raw, json)
Hash identifier:          kwopmQGvl3pZMlTp1Bj/bkBxEqgPe0M5uTVKEEKIVuE=
Subject key identifier:   8C:A7:CF:EA:38:0A:8E:92:72:D3:A1:1C:7A:20:45:C3:3F:D8:5D:FC
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584B3556EC98A1151002668B7120
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     36530
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:ec:98:a1:15:10:02:66:8b:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=a04bd8f1-ecf9-457f-b0b6-4f745465241f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:f7:cc:f0:d8:ef:f4:ce:e0:ae:50:54:a6:
                    d8:ab:8d:63:09:de:73:da:c9:97:f2:a8:d9:6f:65:
                    c7:7e:4f:d0:e6:ee:9f:4a:fe:3c:6b:3d:be:fc:4d:
                    9b:62:7d:06:7b:1e:d6:78:86:5b:fd:d5:4f:1c:c9:
                    c7:8c:0c:a9:59:78:57:f0:23:44:01:05:50:ff:b2:
                    95:33:ca:c2:4d:48:28:dc:ff:e5:1e:5b:9a:c5:bb:
                    a0:29:85:ae:cb:01:9e:9c:1c:e4:8e:d5:bc:9e:a0:
                    6d:04:b1:11:80:4b:8b:df:e4:cb:2d:42:21:39:ec:
                    cb:30:7d:00:2b:b7:25:a2:0d:6b:df:53:86:1a:31:
                    b5:0a:40:26:e7:fc:9d:0a:14:c0:0f:69:d7:5a:2d:
                    14:0f:c8:ab:db:b9:45:c1:14:a9:29:70:78:d4:68:
                    82:48:d5:22:8c:a4:c9:16:16:19:51:03:6a:7a:e3:
                    ce:d1:13:e9:50:cb:fa:be:92:5e:6c:38:5f:4d:87:
                    88:ad:f5:66:d1:2d:59:3b:29:77:37:87:28:15:3e:
                    fd:fe:6a:74:35:8c:b8:4d:f1:36:9d:be:ad:5e:08:
                    24:6b:f3:b1:48:b1:0a:6c:8c:a7:48:15:bf:23:42:
                    57:96:82:ad:bb:d4:82:4f:12:de:26:4c:6f:00:bf:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A7:CF:EA:38:0A:8E:92:72:D3:A1:1C:7A:20:45:C3:3F:D8:5D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:77:97:61:47:2c:2e:8b:30:7c:f2:f5:fe:0e:49:cb:e0:
         31:ff:a8:88:e4:4e:dc:21:9c:84:5a:d1:a9:c8:34:e3:c2:26:
         e2:f7:b1:71:b5:ea:f2:51:7c:20:52:2a:a4:79:34:c1:12:47:
         c8:6b:f6:d8:79:36:fd:a5:61:8d:49:69:aa:b1:3c:bc:89:f7:
         76:12:80:81:21:2e:12:34:94:64:89:9b:f0:4a:a7:e2:e2:f7:
         88:23:32:65:d7:f8:6b:d8:df:8c:74:08:8d:4a:ae:b3:e4:38:
         a5:8a:16:27:9b:94:2c:83:ac:0e:c9:36:a3:95:c7:0d:98:f3:
         58:c0:e0:d5:8b:02:24:09:1b:6c:cb:ce:c7:8d:db:71:6e:87:
         17:65:ba:a7:32:2e:2b:c8:42:2f:97:e6:ec:34:99:3c:ca:3d:
         f6:dc:0b:6a:4c:52:58:64:b1:d8:45:18:1a:41:b1:40:52:3d:
         a5:aa:0e:66:c3:80:b6:8b:65:1b:3d:21:85:7f:cf:7d:cf:d2:
         ea:93:3d:d7:e7:13:45:16:6b:00:46:72:59:c1:25:19:4f:e8:
         02:dd:37:17:87:fe:58:55:6b:57:20:00:b1:02:ca:8f:57:5c:
         e3:55:e1:2b:1e:3f:4b:5d:1a:92:c8:45:c0:a6:0b:29:c9:1e:
         aa:cf:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:21 2025 by rpki-client