Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
File:                     b1689224-3522-322c-b540-085659c0b310.roa (raw, json)
Hash identifier:          m29LtD+gCQ/L8cO1uaXhAIsusKvLFHS10D7qIPTKblw=
Subject key identifier:   9D:38:6B:E4:7F:B4:2B:C4:93:23:AD:6A:ED:46:3D:42:02:95:D3:23
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584B25FC3FA7D3DC5EB81B42A070
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     19740
IP address blocks:        23.173.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3f:a7:d3:dc:5e:b8:1b:42:a0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=641e4efe-5d2f-4741-a0ed-6ba73e0190dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:8c:84:e4:e8:f9:25:cf:87:7f:fa:45:d2:
                    12:5b:d7:2d:36:60:de:22:62:f4:fd:cc:56:d5:3f:
                    d6:8f:d7:02:7b:2b:d6:eb:f0:92:9a:8a:3d:91:36:
                    62:7f:55:4e:93:ca:17:25:31:64:f4:b6:d7:1a:8f:
                    45:b5:bc:3b:69:20:e2:e6:dd:d1:96:a3:fd:e9:2e:
                    e6:14:e0:3b:91:2d:94:e8:7e:dd:ef:1f:c7:de:ab:
                    29:c3:ca:d1:97:ed:3a:18:6d:da:d9:dc:29:d5:5b:
                    37:64:f6:ef:66:0d:2d:85:06:04:fb:b6:30:a4:35:
                    26:ff:64:13:1e:5f:9c:e0:0d:76:cf:65:ea:db:84:
                    6a:ec:96:87:74:fd:92:83:ef:c7:1f:9b:2a:4d:40:
                    ef:5e:89:c5:ec:43:87:5d:19:ff:2a:29:ac:1d:0d:
                    f7:ee:90:de:04:cb:8c:e5:94:3c:41:ba:79:83:a2:
                    8b:ad:46:ab:15:cf:51:36:36:a6:08:13:f4:ed:25:
                    28:a2:42:9e:91:a2:36:de:ff:44:ae:66:bb:b8:ff:
                    d4:f1:1c:b0:00:13:c3:36:db:cc:76:80:08:08:e4:
                    dc:e9:0a:f8:0a:1b:53:60:d3:b1:4e:8e:1a:fd:07:
                    e3:36:a0:d5:07:3f:50:a2:f1:41:ed:72:25:d0:c6:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:6B:E4:7F:B4:2B:C4:93:23:AD:6A:ED:46:3D:42:02:95:D3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:78:93:a1:80:9c:9b:2a:eb:b8:33:55:5d:64:90:14:ac:10:
         74:bd:65:23:54:16:a7:8d:ca:99:94:01:d6:77:ae:a3:32:13:
         a7:16:6e:7a:9c:2f:72:3b:01:92:97:fc:46:c1:33:90:b0:1b:
         cc:ae:f4:fc:0d:c7:f6:9d:3e:c1:96:32:3e:e5:07:31:05:98:
         f7:8b:59:1d:b3:24:be:70:39:c6:5d:dd:c5:31:0e:88:3a:be:
         35:23:55:bb:ee:e4:ff:aa:ef:06:8f:53:8c:49:8f:72:d7:d5:
         b6:49:a8:09:2b:95:bf:5a:f1:5d:38:6f:60:84:e0:24:7b:cb:
         6a:ec:01:79:7f:6f:d1:94:ce:93:c1:78:07:a7:6a:0f:99:f8:
         89:9a:f7:ae:0f:a2:a5:a1:0a:38:7c:ce:fa:71:63:ce:e1:7a:
         50:a5:db:92:ea:fa:9e:c7:a1:07:e2:91:44:54:c5:7e:97:e0:
         3e:da:79:90:90:b3:7e:f6:c1:dc:60:44:ea:d5:ac:51:cf:1e:
         f3:29:04:ce:55:c9:7f:26:3a:76:b2:9e:e0:33:7e:a1:63:fc:
         bf:db:38:69:6f:64:a8:35:66:25:15:67:a9:af:6e:f9:0d:6f:
         6e:af:2e:85:d5:99:45:d0:c9:48:42:4f:52:77:a0:29:c7:ea:
         68:69:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:50:49 2025 by rpki-client