Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/8871c695-9bce-373e-b1bc-b6755c409e3a.roa
File:                     8871c695-9bce-373e-b1bc-b6755c409e3a.roa (raw, json)
Hash identifier:          QN/21psRm9Y+jSHCyixZmlwH15iu2xI1yXoOGQjFN8I=
Subject key identifier:   2A:4F:6F:D7:8A:8B:A5:F5:19:13:15:EE:58:10:E6:2C:98:3F:C9:4E
Certificate issuer:       /CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b
Certificate serial:       010D0C9F4328584B2B919C22266160D37C8DC700
Authority key identifier: 6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/8871c695-9bce-373e-b1bc-b6755c409e3a.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     399861
IP address blocks:        23.132.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:9c:22:26:61:60:d3:7c:8d:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=208f7d59-be0d-4479-bb3a-e8745d58aa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:0b:ad:d3:bb:7a:4c:be:ad:4f:be:14:fd:
                    a1:de:7b:43:78:d2:8c:8c:e5:b8:14:d1:9e:85:1d:
                    ab:9d:50:dd:f8:bc:1d:cf:81:dc:fc:0d:69:4b:a6:
                    db:fb:2f:ec:b0:c3:ac:19:a0:0f:95:b4:89:e9:0b:
                    c7:15:5d:09:c1:32:af:50:47:9e:03:21:b2:01:0f:
                    70:8c:10:b0:de:b0:7d:6b:95:9c:21:c0:c2:35:36:
                    10:f2:4e:e1:1b:71:ef:7e:e7:35:8a:6a:16:f5:aa:
                    9f:c2:c4:f7:e8:85:42:33:cd:88:ee:d6:d5:4d:f7:
                    bb:0b:30:91:fc:ae:90:eb:46:c2:b5:63:db:9f:82:
                    8f:31:16:53:d2:69:ac:a4:d3:b6:f3:48:91:8a:93:
                    7f:42:d7:5a:07:2b:ad:27:59:97:f1:49:6a:84:7b:
                    e6:65:3e:c6:87:d0:79:51:4d:f0:41:1b:b8:04:44:
                    b8:ad:3e:da:2e:71:b3:4e:7b:d1:76:2f:7f:6b:d2:
                    cc:2f:cc:c8:32:e4:b4:b1:4e:bb:f3:ab:ac:aa:c2:
                    e2:23:7f:18:f9:af:03:d5:2c:23:fb:41:02:64:4f:
                    69:9d:61:b8:ea:3a:5e:68:7b:f9:91:54:1c:f8:c4:
                    c9:39:14:41:fb:cf:65:c2:73:62:af:79:91:4b:b3:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4F:6F:D7:8A:8B:A5:F5:19:13:15:EE:58:10:E6:2C:98:3F:C9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/8871c695-9bce-373e-b1bc-b6755c409e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c8:6f:5d:c7:a0:34:d5:c9:8a:18:70:e2:94:a3:16:05:c7:
         5c:64:6f:e8:ef:a5:35:94:3d:88:a3:b0:b1:24:a5:a0:19:79:
         68:c8:ca:47:a1:84:dd:cd:37:ab:99:22:45:09:22:2d:2c:87:
         a8:34:2c:67:b1:d0:af:3b:fc:5e:67:4e:8c:6d:6d:18:96:7f:
         af:9b:7a:a5:8f:9f:0d:8c:8d:97:94:f8:fa:cc:14:4a:70:8b:
         34:d1:11:8d:f9:96:bb:ce:7b:35:91:14:b5:0a:18:db:ce:8c:
         5f:69:c9:67:c4:ad:c8:0d:bd:3a:94:f3:e8:6f:8f:d5:95:5e:
         42:84:85:5f:51:1f:a1:37:bc:7c:ab:89:20:db:7c:5d:34:45:
         22:ec:87:5a:5a:31:88:ab:25:04:42:7c:e2:1c:64:5a:28:f3:
         7c:35:fe:86:2b:91:da:4d:6c:72:b7:bf:d7:5e:d6:ff:96:fb:
         f7:26:36:13:61:f3:d6:13:6d:75:c7:39:5f:05:71:b4:52:32:
         72:89:9f:74:2d:bb:aa:1f:71:04:45:47:37:94:fb:6e:bd:3e:
         b6:3c:15:74:32:1a:a1:b2:c6:3a:16:f1:be:03:ee:db:6d:13:
         30:31:25:de:e2:00:be:ec:77:92:1e:72:4e:47:a8:5e:ee:d4:
         58:0b:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:04 2025 by rpki-client