Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
File:                     06356a9a-a928-3159-af92-998e04f7da3a.roa (raw, json)
Hash identifier:          4/Azu4E0y402ds1QUr/cn6pAhr1QGsGbGB0h/MdMHg4=
Subject key identifier:   15:4C:83:0E:16:A9:0D:14:B2:CC:F1:B3:1D:EA:4C:9E:E4:73:D2:74
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584B38219EDFDCD2F4B9F9AF3A80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     19651
IP address blocks:        23.168.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9e:df:dc:d2:f4:b9:f9:af:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=e31f9636-934a-48f3-816d-2749a2b450b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:17:af:58:b8:fc:3f:8e:db:45:2c:76:9f:
                    62:e9:7d:d0:c7:da:fc:27:fe:c0:39:a5:14:d7:95:
                    ea:96:8f:63:b4:c3:53:ac:ce:33:e8:2d:e5:af:16:
                    d2:14:f1:32:b3:ef:a7:48:09:f3:39:47:a7:3d:0b:
                    e2:46:c9:41:23:d6:f2:4d:7c:1d:52:29:47:ac:d2:
                    f5:07:33:c0:a3:56:6a:ad:9e:a6:8d:c0:fa:86:e4:
                    bd:33:d8:12:c6:6f:8a:e2:47:ca:ea:62:dc:d9:6b:
                    c8:72:a8:bd:20:66:0d:f9:5c:ce:a9:7b:7a:38:6f:
                    39:e7:9d:6c:23:62:ee:64:a8:65:d4:94:95:7c:55:
                    e2:07:9a:ee:3b:ed:36:43:76:3f:f1:41:14:e1:39:
                    24:df:da:4b:96:bb:5d:86:87:82:de:8c:9c:ad:b9:
                    44:ba:e5:40:cb:44:fe:1c:ec:6b:d3:f2:09:2e:53:
                    bd:21:eb:db:68:0f:bb:a1:bb:6b:05:21:f7:4f:1c:
                    41:7e:a5:9a:0b:f1:66:fd:a6:44:28:27:24:34:bd:
                    33:54:24:3e:48:49:85:e5:72:7d:67:90:da:3d:ba:
                    f8:ae:44:d0:e5:5a:ac:06:b0:9a:72:14:5a:a4:12:
                    34:4a:b4:04:56:4f:b2:f7:1f:6f:cc:8a:36:4a:52:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:83:0E:16:A9:0D:14:B2:CC:F1:B3:1D:EA:4C:9E:E4:73:D2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:52:8a:4f:32:36:f9:6f:f7:2b:77:8c:9d:fd:a5:cf:09:e5:
         d4:d5:a3:11:89:6a:f5:83:58:78:37:85:be:66:9a:53:28:f9:
         6c:1e:04:11:82:f3:8d:4c:d7:e6:d9:ae:f2:15:00:50:5d:17:
         b8:7a:c1:e3:06:1b:62:e6:a3:7a:0e:79:30:b2:7b:7e:64:00:
         23:aa:a5:23:55:26:93:c4:27:04:19:30:13:26:84:eb:b0:5b:
         d7:4b:d9:49:42:a6:9e:3e:85:53:6d:41:ad:a6:19:96:f4:34:
         9f:16:86:16:ed:0b:a8:93:d6:c5:e9:10:1d:af:cd:06:91:20:
         3c:74:fa:0d:b7:1c:eb:1f:d3:de:48:dc:c4:17:59:ab:b4:07:
         9a:82:33:26:e4:c5:a9:bc:b7:ab:24:90:11:35:ec:c0:56:50:
         a4:e2:a3:12:ed:ca:b9:eb:72:be:31:23:1e:77:11:2e:c4:d8:
         cf:43:54:2f:a4:cf:a9:11:17:72:4b:25:0f:b0:eb:6f:46:58:
         ab:a8:a5:14:a0:9c:dc:a4:10:e9:13:f8:4b:bb:6c:89:c4:45:
         20:3c:ba:22:a8:1a:50:88:3a:4c:cb:b7:fb:7f:c9:b2:fa:7c:
         62:6c:ae:8f:51:9e:22:e0:34:82:3a:dd:4f:9a:74:11:a5:a7:
         2a:4b:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:03:08 2025 by rpki-client