Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa
File:                     cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa (raw, json)
Hash identifier:          poJqsZ9xgxpeLemrGozB2VisP01N3i9cLs+z4j/tp2A=
Subject key identifier:   83:77:9F:29:AB:C0:48:B4:8D:71:51:E4:2D:ED:59:4F:89:42:F5:84
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F4328584B398707CF3BBA8CACDB775558
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     216440
IP address blocks:        23.159.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:07:cf:3b:ba:8c:ac:db:77:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=7fab6ef5-ffa6-42a8-b7fb-7283955c9c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:d1:e9:4b:89:79:84:11:48:01:81:18:74:
                    7f:de:d0:07:4f:51:5c:18:84:2c:c1:62:a2:5c:d9:
                    31:dc:72:33:79:00:80:aa:4a:99:c2:10:9b:1d:4e:
                    5a:f9:45:a6:c3:21:15:e2:ff:f7:74:35:a0:1f:21:
                    9e:33:ff:fe:5e:2a:6a:a9:c7:a7:ca:9f:37:1b:0c:
                    53:32:c6:d2:c1:74:30:9a:b8:1a:91:8b:5a:73:66:
                    54:da:a9:fa:f2:aa:f9:f8:ab:00:0b:2b:ea:7b:e8:
                    09:aa:bc:b6:82:cb:fd:e9:4a:19:b5:e5:f8:ce:e7:
                    7a:97:96:bc:2a:6c:d4:8f:a3:01:4e:09:be:6c:5a:
                    6b:e7:b7:c3:11:30:5a:78:31:07:8e:4e:ec:91:6a:
                    7b:f5:52:42:cd:58:f4:69:f8:6c:bc:d6:6f:06:da:
                    79:b7:35:dd:6c:09:b3:2e:6d:4a:81:a2:f5:c2:95:
                    1e:93:35:b2:a9:ca:06:ae:56:2b:68:c7:11:15:74:
                    36:22:d8:76:c6:50:ef:51:47:33:46:3b:da:f7:78:
                    d3:05:e0:6e:22:c8:96:ca:ca:bd:cb:63:db:a4:fc:
                    7a:af:99:8d:21:40:eb:24:98:c2:b9:e7:fb:c2:19:
                    39:04:77:ab:14:80:aa:13:5f:0e:09:54:72:cd:35:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:9F:29:AB:C0:48:B4:8D:71:51:E4:2D:ED:59:4F:89:42:F5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:db:57:76:71:3f:04:65:67:2b:a8:1a:54:d4:f7:d6:32:d7:
         b8:b5:48:c6:c5:49:1d:6a:bc:7b:cf:f3:a1:0f:76:3a:63:b9:
         79:f8:e3:ae:61:d7:0e:58:e7:17:2b:80:12:bc:47:ba:f5:e1:
         21:0d:1e:9c:80:dc:9b:e8:45:84:b5:2d:a9:0a:3e:b9:d8:a8:
         c4:b7:b4:21:eb:61:0f:84:a1:af:d2:c2:7b:20:16:58:e3:ae:
         c3:29:99:68:5b:8e:1e:f6:56:ae:f0:37:c7:e6:c0:6b:5b:26:
         31:f3:d8:d6:12:24:17:49:12:0b:f2:2f:e7:f7:34:ed:9a:88:
         2d:75:c9:93:f3:b7:ac:e5:f2:43:85:bf:c1:25:8d:42:24:33:
         28:59:89:dc:1a:7f:64:0f:d2:57:c8:e9:e3:93:d9:9c:47:07:
         56:02:2e:5a:e2:7d:f3:9b:84:68:d7:88:a8:23:f7:6e:07:bf:
         6c:d1:8f:8a:a4:8b:b2:72:1b:68:ff:d0:44:eb:5d:df:d4:60:
         bd:10:af:ec:07:c2:09:9a:f3:10:01:a0:0e:0a:a6:ff:65:e5:
         f1:5b:80:59:c5:c1:a0:51:df:d3:aa:4f:87:55:70:7e:08:37:
         5d:58:a4:ec:3b:4c:0b:8f:cc:ab:94:55:7d:89:2f:11:63:ce:
         e1:d2:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:56:20 2025 by rpki-client