Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa
File:                     942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa (raw, json)
Hash identifier:          XUQ9ht9dZMdpRX2HOJBSN4qazWCDoFeXPxLVZfpg5Wc=
Subject key identifier:   E6:8F:56:EC:8E:78:A8:03:9F:F9:56:02:B7:96:8A:EB:9D:81:58:68
Certificate issuer:       /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial:       010D0C9F4328584B28C6E4A5E3EA820CF63F3F40
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     20119
IP address blocks:        23.151.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e4:a5:e3:ea:82:0c:f6:3f:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=a9cdb239-895d-40b1-bacb-7afe9a36751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:b9:3f:d0:62:23:ec:fb:d9:d4:dc:35:7f:
                    1f:e1:87:92:ec:70:40:12:95:c0:b4:2b:17:39:bb:
                    7d:14:59:98:d2:1e:19:42:09:93:45:33:aa:89:3c:
                    74:9e:ac:98:19:42:44:80:bd:58:7e:f2:d6:fd:9b:
                    de:6c:28:e4:77:22:03:bf:fd:e3:72:e9:dd:4f:3c:
                    37:a7:41:1c:fe:8b:49:a4:4f:fb:ea:ee:fd:ae:47:
                    a6:a2:b8:16:ae:ed:e7:42:7b:c3:45:e7:ef:bc:cf:
                    6f:40:c5:37:2c:3e:14:da:bb:af:15:b5:72:f7:ee:
                    6c:97:44:94:a7:73:d8:bc:bf:0d:45:e6:de:d1:08:
                    24:8f:6e:9d:38:36:fd:af:93:fc:a0:f1:89:0a:0b:
                    68:74:92:80:26:ef:04:ac:34:b5:ac:40:ee:bc:f2:
                    0a:b5:54:a1:a5:68:a6:d4:88:a4:b4:03:f7:c5:0d:
                    7c:a0:22:44:c2:13:2c:4b:74:d8:c5:2c:ec:37:79:
                    05:64:9a:8c:5e:1c:54:b8:15:91:25:ff:c0:77:d1:
                    1c:19:4f:f3:a1:47:0d:8a:70:b8:7a:17:5a:27:28:
                    25:71:92:74:e0:e6:ce:de:19:2c:45:2b:08:6a:de:
                    e6:09:7e:88:46:18:1f:93:3a:9f:82:21:40:36:98:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:56:EC:8E:78:A8:03:9F:F9:56:02:B7:96:8A:EB:9D:81:58:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl

            X509v3 Authority Key Identifier:
                keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:28:c0:e0:ed:0a:eb:61:00:00:53:5d:7a:af:56:c0:8d:
         7a:32:b6:d8:7e:53:f3:c3:f2:2d:ee:7e:1b:93:fe:7c:dd:da:
         d3:97:ef:4d:30:dc:7f:b5:6a:0c:ab:b9:55:d8:64:23:06:39:
         e9:f4:54:a3:c0:9a:8a:7e:5f:27:11:40:6a:96:c6:54:98:9e:
         ef:c9:b6:0d:55:2e:67:7f:cd:e0:be:2e:38:0d:e9:77:c8:3f:
         75:b8:1d:bf:89:ea:11:47:8c:ce:1d:f3:87:f7:08:5a:d3:34:
         cd:4a:a9:12:16:d9:4e:74:eb:39:8f:67:29:be:b4:0d:15:6d:
         9b:e1:13:4e:50:d0:05:68:36:21:61:1f:89:5d:e2:07:0f:eb:
         bf:12:f7:6d:15:38:72:52:05:a1:2b:21:b2:81:ab:9f:b3:e7:
         3c:f2:26:dd:a3:50:35:89:32:ee:0e:87:8f:d7:db:35:62:5f:
         c8:59:b7:ac:60:1c:35:57:2c:be:f3:ff:81:e5:b1:f0:cf:38:
         1b:8c:30:0c:6d:fa:ce:78:63:9b:44:91:ac:e9:d4:28:3a:4e:
         f5:15:1a:cb:1d:fa:c9:4a:c8:93:d8:22:d0:b9:25:38:24:3f:
         f4:57:93:66:5c:9d:6c:4d:03:c1:c3:62:5f:12:6d:e0:58:55:
         f2:67:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:59:56 2025 by rpki-client