Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/f5ffb011-c709-3d59-9781-024106751bdb.roa
File:                     f5ffb011-c709-3d59-9781-024106751bdb.roa (raw, json)
Hash identifier:          PTAPfar/O1a/rAemNU9gdo+nroEz4DX6L/3C/mVdlGk=
Subject key identifier:   83:01:5E:E4:39:CF:9C:1A:04:21:07:E8:A2:76:AE:D8:11:8C:EE:B4
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584B047C09E120AD6FDE3F765E80
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/f5ffb011-c709-3d59-9781-024106751bdb.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     11870
IP address blocks:        167.23.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:09:e1:20:ad:6f:de:3f:76:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=271c10e9-b57d-4321-a770-3e911758e2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:fd:3e:72:ef:38:fb:fa:31:f6:df:62:59:
                    72:9a:76:71:be:92:25:a6:59:21:37:23:19:f0:c6:
                    06:8f:eb:6e:52:c8:9b:74:ac:55:c1:83:64:2f:19:
                    f9:7e:ae:75:bd:5c:7e:41:87:97:ff:88:78:27:2e:
                    47:70:fb:a0:a5:83:32:4e:0a:ff:1b:01:b1:5c:87:
                    07:f3:a1:0f:49:63:44:b6:6d:d3:dc:19:73:5c:7d:
                    c9:a0:96:d5:3d:64:bc:39:48:f5:7f:95:de:11:8b:
                    58:cc:ff:18:a2:a2:52:32:dc:10:4a:fb:83:0f:c7:
                    8c:b3:28:5f:63:01:46:37:f7:40:5a:14:29:64:46:
                    ed:39:07:a2:05:29:b8:2f:fd:9d:2a:8c:10:4d:1e:
                    70:16:ae:c7:1f:ad:0c:14:a9:c3:a7:d7:97:06:37:
                    de:e4:f1:28:f0:b2:db:f5:d3:46:a8:5b:41:42:c7:
                    b4:ac:9d:c5:c6:b0:ec:f7:d8:b9:3d:2d:30:b9:93:
                    63:3c:9f:9f:18:81:e6:df:b0:17:5e:4e:16:10:3f:
                    7b:3d:a4:b6:70:54:54:98:10:0e:9b:38:fb:bd:3c:
                    72:a7:96:62:fe:b1:0b:5e:45:d6:53:f8:d1:57:1a:
                    5a:ec:6e:fe:33:9c:59:7d:e8:8b:f5:9c:e1:5d:e2:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:5E:E4:39:CF:9C:1A:04:21:07:E8:A2:76:AE:D8:11:8C:EE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/f5ffb011-c709-3d59-9781-024106751bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:af:5d:0c:69:c7:e4:c1:26:1c:54:95:eb:66:af:4a:7d:
         a8:03:48:2f:74:28:84:0a:41:6d:db:55:f4:40:df:bf:a5:25:
         4f:9d:10:d8:11:bd:63:ae:13:4c:f3:5a:4f:9b:34:02:00:0a:
         fd:f0:ec:37:37:7d:35:90:68:b3:81:d5:1b:8e:9b:37:21:85:
         39:ec:72:27:05:11:a0:59:c5:1f:60:57:ac:7f:f2:13:bb:3f:
         69:15:bb:7c:d2:ef:d6:9e:1a:be:b9:0a:d0:a3:e7:d4:51:a3:
         3c:9f:59:70:06:ea:cd:20:a5:c2:08:b8:bd:0c:88:46:b0:a1:
         92:1e:f9:cf:c9:d8:6c:30:1a:e6:82:4d:a4:27:95:f4:0d:25:
         70:f7:92:92:6a:74:9c:14:28:fc:44:1d:4e:10:6d:b2:62:a7:
         fb:81:33:3f:66:78:fb:7d:34:b0:99:b2:d7:57:31:b0:9e:cf:
         9f:d3:e0:53:eb:3c:cd:7f:f3:c4:77:a8:98:34:6e:15:70:c8:
         ce:9e:72:67:11:b1:e5:b6:d9:e4:76:fd:95:3e:18:bf:7a:e7:
         f3:30:cc:4b:b9:57:39:a7:1b:43:8c:e5:c3:fb:be:b2:ce:23:
         c9:d3:3a:f6:6a:c7:a4:13:f3:34:27:05:7b:c4:6b:7a:a6:e9:
         6c:8e:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:37:04 2025 by rpki-client