Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/e26f6515-6237-34e2-a8d4-e9918ee0f6e5.roa
File:                     e26f6515-6237-34e2-a8d4-e9918ee0f6e5.roa (raw, json)
Hash identifier:          O9KwZElv9MfOmEqlCZ6cuZgVwO8S0VSPzKERW08vThM=
Subject key identifier:   E2:72:EB:32:D5:01:1A:5B:8B:47:28:64:17:DC:69:03:17:FF:6B:89
Certificate issuer:       /CN=13f57bc2-46f7-4081-86db-6187bbb84dae
Certificate serial:       010D0C9F4328584B328C444BCCAC89F0610D9FA0
Authority key identifier: 96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/e26f6515-6237-34e2-a8d4-e9918ee0f6e5.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     399936
IP address blocks:        23.187.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:44:4b:cc:ac:89:f0:61:0d:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f57bc2-46f7-4081-86db-6187bbb84dae
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=eaf8247c-3806-4c7a-bc30-9383c9930d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:0c:42:58:3d:dd:6b:8e:b9:bc:22:72:e5:
                    c6:17:d9:93:18:7a:5c:a4:ea:55:bf:a0:bc:22:3c:
                    1d:be:97:32:f7:6c:b5:bc:7f:a8:93:97:e2:20:7f:
                    40:e4:39:69:1a:0d:7c:2c:58:4b:0d:ac:30:ec:cb:
                    f0:aa:83:d8:ef:f6:86:67:e7:b3:fe:bf:eb:88:a5:
                    b6:ce:c3:b7:7d:47:0e:52:8b:fc:89:74:26:c5:b0:
                    93:6c:b0:32:66:a8:22:0d:af:27:69:08:ec:54:29:
                    44:fb:80:f1:40:04:0c:31:54:20:08:55:20:ee:55:
                    4f:db:09:ac:4b:99:c4:a2:37:0c:75:cf:00:fb:86:
                    ed:05:11:11:56:7c:80:0a:45:4e:60:85:60:4d:4f:
                    b6:46:a4:2b:0a:da:af:8e:ca:fe:ea:9c:c3:0c:f3:
                    09:f3:0f:30:94:9c:75:8c:4c:df:a6:90:38:94:68:
                    27:78:d6:5d:86:6b:28:de:b0:30:48:f3:e2:3f:f4:
                    14:be:7f:ae:8b:7e:5e:d6:cc:e6:df:61:ee:f1:94:
                    e4:94:e1:8a:67:63:ba:00:9c:61:05:78:8c:6c:cb:
                    72:63:13:94:78:c2:4c:0c:73:26:b1:a0:99:fc:fc:
                    c3:47:54:af:aa:a2:0e:37:9c:bb:1d:cd:0c:fc:28:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:72:EB:32:D5:01:1A:5B:8B:47:28:64:17:DC:69:03:17:FF:6B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/e26f6515-6237-34e2-a8d4-e9918ee0f6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl

            X509v3 Authority Key Identifier:
                keyid:96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:22:e6:d9:b4:ec:c2:9a:52:ea:c0:e3:03:40:c3:76:b6:
         ff:4c:93:66:4a:58:5c:b2:1e:53:94:df:de:22:e4:f0:6b:89:
         fc:57:30:9b:6c:11:9f:ad:63:7d:b2:af:17:52:6c:6e:62:eb:
         af:38:3f:33:fb:e4:e8:08:72:c2:7d:09:84:d9:a8:84:3f:cc:
         a1:d0:bf:94:66:0a:57:e0:f1:73:02:e4:77:33:68:d4:1c:42:
         bc:ba:d6:43:87:9d:f6:0a:aa:e5:56:b5:56:1f:03:04:20:85:
         30:94:c6:62:e9:2d:ec:71:77:4b:8d:68:d8:95:8f:5a:2f:55:
         38:47:ec:16:06:df:fb:c0:b2:84:42:f9:df:19:ce:34:e0:47:
         13:a3:89:53:04:2d:45:df:59:00:fe:8d:bd:63:01:8c:5c:2e:
         8c:7e:a0:df:0d:41:48:13:ce:e3:a6:10:2e:87:95:f3:db:e1:
         55:6e:02:5e:31:90:c8:75:12:a0:9c:2e:ef:26:65:68:66:1c:
         f3:78:8a:c8:2f:47:27:03:bd:8a:36:b9:3b:eb:7d:37:b9:65:
         31:c4:ce:30:30:d6:8e:0d:08:da:78:f8:3f:87:94:db:59:28:
         86:a9:e2:26:40:2e:fc:88:83:66:dc:5d:76:09:bd:81:a9:28:
         8f:e7:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:41 2025 by rpki-client