Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
File:                     b662fd99-1a23-3aaa-9da3-01d3658ac226.roa (raw, json)
Hash identifier:          jt9Oj46SDKzuXqYW4PKXvY7lJJqWVRJeOYmMxgs3bac=
Subject key identifier:   73:79:89:53:5B:22:DC:53:C3:81:CB:AF:3B:A9:91:9C:70:A1:2E:61
Certificate issuer:       /CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
Certificate serial:       010D0C9F4328584B1F0175E8704D56577AD685B0
Authority key identifier: CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     53301
IP address blocks:        23.167.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:75:e8:70:4d:56:57:7a:d6:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c0fd0af4-616d-4171-8fa4-03638a34d34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:8b:34:f5:c3:57:ad:57:82:90:5b:21:2b:
                    e8:5b:b2:5f:bc:d5:42:d9:6a:ea:d3:f3:e8:19:86:
                    0b:c2:c2:72:06:34:c0:ea:b6:e9:0c:96:88:c8:0d:
                    38:7b:bf:d0:77:59:39:1e:b4:35:ff:36:0c:f1:04:
                    57:7b:a0:9a:68:d4:51:fe:d4:d0:ca:df:17:1b:00:
                    54:23:8f:f5:44:ec:ab:23:46:13:d3:b0:89:b8:d1:
                    a3:92:56:6a:f7:33:8a:fb:3a:5a:6d:cd:0b:51:d4:
                    0a:83:a9:44:45:f4:16:45:59:22:e5:07:32:cd:54:
                    7f:93:99:83:25:c2:b1:bb:2d:1e:59:7a:9a:86:0d:
                    94:8f:5a:1c:b3:ca:0b:f7:77:ef:b5:c3:fa:03:41:
                    bf:07:4f:58:07:32:49:77:ef:34:51:1e:5d:a6:1e:
                    bd:bf:ac:6c:69:fe:f1:4b:1b:fc:50:b9:3a:e7:01:
                    e9:c9:1c:77:7f:5c:1e:a1:6a:7d:9c:5f:fc:51:10:
                    5d:bb:e1:20:e9:4e:de:d8:86:b9:ed:ee:fd:ee:6d:
                    14:48:52:09:06:ab:b6:f8:67:f6:90:f4:fe:c1:e6:
                    00:0a:e6:8d:b8:c0:77:26:54:d9:1a:97:19:cd:19:
                    6a:16:ee:ff:d0:b0:72:9b:cf:8a:09:a7:6e:03:a1:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:89:53:5B:22:DC:53:C3:81:CB:AF:3B:A9:91:9C:70:A1:2E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:91:f4:f5:e4:e6:46:c6:a4:46:aa:1a:51:56:ee:11:d3:48:
         8c:84:1b:03:24:ec:4f:5a:90:e2:d4:4c:f4:cf:b4:ec:27:c8:
         0e:90:b2:69:03:00:79:d9:6b:c1:32:43:6c:81:8c:2d:a7:d6:
         2b:bb:60:fc:97:1d:f5:d9:b7:82:1b:e2:de:17:6d:cf:ee:4d:
         e0:31:a2:b0:64:6d:4c:d2:cf:9d:58:d3:ae:9a:c1:6b:34:7a:
         11:79:11:4e:ff:46:dc:05:3d:eb:2e:55:14:9e:6f:46:86:26:
         b8:72:f9:fb:e6:d7:4b:b8:80:bf:01:8a:48:3e:35:90:c5:be:
         59:9f:48:fc:b8:34:5a:9f:5a:58:8a:c1:65:a0:df:31:4a:62:
         cd:ce:8b:de:02:77:07:ca:4c:53:70:e3:93:3a:31:05:53:9c:
         92:e0:b6:80:a3:f5:02:6c:67:94:8c:38:ee:28:80:da:77:36:
         cb:95:0b:76:6a:08:64:6a:9a:9f:90:ed:85:57:1f:d7:a8:2d:
         48:bd:25:e2:5f:b3:c5:bb:ea:50:1f:67:e9:05:ff:c2:54:68:
         56:0e:d0:18:44:cd:70:f6:b4:19:73:1e:2f:89:6b:d8:dc:e8:
         58:22:49:4c:25:a9:b7:8b:d1:8b:fb:47:20:42:bf:3e:8c:e3:
         f8:bb:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:32 2025 by rpki-client