Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/54f5c19d-ad85-35b6-828a-d516d7462809.roa
File:                     54f5c19d-ad85-35b6-828a-d516d7462809.roa (raw, json)
Hash identifier:          gEBL5HYTcVQW9G+CnTLWjWeqxW25tQ0joMf7+DIjTL4=
Subject key identifier:   21:6E:72:29:9B:FD:7E:8B:9B:D8:FC:55:82:16:E4:FB:D1:73:86:21
Certificate issuer:       /CN=fc3a6068-95db-4d68-86b3-bb81053e8875
Certificate serial:       010D0C9F4328584B27617EE3A1D5F7CDD7848D69
Authority key identifier: 14:37:69:0F:9B:E6:27:2E:B1:FC:3C:BE:03:E1:CD:68:47:6C:BB:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/54f5c19d-ad85-35b6-828a-d516d7462809.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     401541
IP address blocks:        23.131.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/fc3a6068-95db-4d68-86b3-bb81053e8875.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/fc3a6068-95db-4d68-86b3-bb81053e8875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:7e:e3:a1:d5:f7:cd:d7:84:8d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3a6068-95db-4d68-86b3-bb81053e8875
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=162e7378-7cd9-4a30-b10f-f36158cc2ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:9b:f5:20:a0:23:59:06:37:60:6b:5f:82:
                    04:d2:b0:22:20:8c:a5:f1:7e:57:82:4e:87:b3:9d:
                    d0:d3:43:32:36:03:2b:8e:35:cd:2d:b8:d3:e5:84:
                    a8:75:25:1c:af:c6:92:f7:01:60:fb:d4:15:53:a9:
                    f0:73:3d:2c:ff:fa:a2:6d:89:d2:bd:41:7d:d5:7c:
                    d4:6a:a8:68:1d:80:43:b6:f8:c9:32:44:47:32:df:
                    67:42:b0:e0:15:ce:59:fd:a1:ac:e7:c3:65:fb:21:
                    e9:7f:72:7c:9d:e4:92:68:a2:0a:07:fc:15:e8:0f:
                    9a:73:c2:a0:c5:c7:66:a4:1b:ae:01:cb:78:fb:28:
                    12:ce:d9:3f:47:1f:97:e0:bc:65:9f:8d:15:23:73:
                    50:a9:05:7d:36:c4:66:15:fe:cf:dc:85:6b:20:a6:
                    d3:2c:52:5c:f6:25:d3:d9:af:12:df:2e:c1:34:6d:
                    1e:b8:0a:46:73:17:c2:96:7b:7c:79:35:da:17:69:
                    9b:87:64:7c:f4:93:9d:04:7e:33:67:1e:48:77:c7:
                    90:6e:b7:85:a7:b2:00:96:ff:05:73:1d:57:60:ff:
                    8b:b7:2c:f2:03:ec:d7:bd:1a:bc:93:56:18:ed:78:
                    a5:7d:77:f4:34:47:e0:64:63:2e:88:12:f4:2c:00:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6E:72:29:9B:FD:7E:8B:9B:D8:FC:55:82:16:E4:FB:D1:73:86:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/54f5c19d-ad85-35b6-828a-d516d7462809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/fc3a6068-95db-4d68-86b3-bb81053e8875.crl

            X509v3 Authority Key Identifier:
                keyid:14:37:69:0F:9B:E6:27:2E:B1:FC:3C:BE:03:E1:CD:68:47:6C:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:12:17:a6:dd:58:5a:e9:34:97:1c:61:53:2e:e1:d6:98:c2:
         f1:f4:ee:df:d0:07:4e:34:b3:21:0b:65:47:53:a6:d3:80:9e:
         ae:d7:d5:2e:be:e4:81:e7:65:26:93:0b:e2:4a:4d:13:44:31:
         b4:7e:c8:97:34:dc:c2:99:d1:6e:66:90:82:51:2c:98:45:49:
         71:3c:54:7d:52:bc:b2:4a:85:6d:d7:2c:fa:8f:80:17:e2:ef:
         8a:cd:02:25:0f:95:c8:04:d3:72:cf:5f:c7:79:3a:74:43:93:
         eb:0a:08:70:eb:2e:aa:3e:08:71:67:e7:79:a5:34:87:a9:1b:
         8c:b2:4d:f3:f7:5e:52:b1:75:8b:e1:f3:62:63:92:b0:af:a8:
         81:0b:7a:62:24:03:22:22:ac:bc:4e:94:60:25:f5:80:d5:e6:
         a0:38:5c:6f:74:a8:95:5e:8c:33:d7:70:b6:ce:71:3c:56:31:
         a0:da:09:bc:25:e5:fb:61:cb:1d:83:a5:46:52:65:71:15:f2:
         a8:21:6d:9e:5b:5b:78:f0:08:40:17:c7:ad:b0:be:73:86:0a:
         8e:53:0e:30:b5:6c:2d:b2:7b:38:8a:05:93:7a:8f:ca:07:31:
         d0:4f:d9:96:19:52:e3:93:8f:09:45:fa:87:66:c9:60:ec:ba:
         b9:0c:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:37:02 2025 by rpki-client