Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa
File:                     e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa (raw, json)
Hash identifier:          MG5CldtHorV3002/NODbbo8TyOlsEAgZtyDcsTppTbY=
Subject key identifier:   8F:B8:D6:D9:A7:B3:4F:33:AB:0D:99:3E:F0:26:7B:12:99:C9:F8:66
Certificate issuer:       /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Certificate serial:       010D0C9F4328584AFC1C1009F6267443378843C0
Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16276
IP address blocks:        23.156.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:10:09:f6:26:74:43:37:88:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=698a71f1-cedf-44a9-9dc9-f67d0cb12c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:cd:cd:47:ef:2a:cc:35:bd:d9:e5:4c:54:
                    da:ca:95:e4:e1:19:94:b5:6a:28:c8:0c:cc:bd:8a:
                    57:a8:fc:74:db:5f:48:05:b4:07:06:7c:b3:da:fd:
                    a1:20:a2:16:07:65:e1:9f:25:80:82:8b:51:75:a1:
                    ad:9a:f9:1c:6d:15:53:49:b6:76:1e:b1:bc:f7:60:
                    db:18:fe:db:67:34:27:c7:ce:55:55:aa:68:89:57:
                    c1:da:2a:4d:4c:18:12:b5:60:56:b6:e9:b3:31:d1:
                    2b:a8:9d:7d:e8:bb:d0:de:7b:19:30:af:71:2b:f9:
                    14:63:9b:2b:fe:e6:16:53:fb:4c:fc:e8:55:84:1e:
                    0a:38:95:61:5d:68:11:ee:5f:1f:15:6c:30:a4:87:
                    63:93:b8:bf:fa:d6:0f:84:02:ce:de:d6:bd:9f:2d:
                    0c:71:b9:0d:43:d1:0a:c4:95:92:e4:8e:9c:92:fd:
                    57:d8:59:34:49:b7:61:82:83:8c:fe:68:c3:ac:a6:
                    e6:86:65:ab:e8:d9:89:c9:3d:33:a7:31:1c:b5:9e:
                    8c:a8:5a:0f:9d:83:ac:5e:0f:00:70:5b:9b:8e:fa:
                    61:bf:75:50:c0:3d:ca:a4:0c:df:03:e8:a9:a8:4d:
                    83:fe:89:f3:10:13:f8:59:75:26:c7:82:d1:a4:7e:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B8:D6:D9:A7:B3:4F:33:AB:0D:99:3E:F0:26:7B:12:99:C9:F8:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl

            X509v3 Authority Key Identifier:
                keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:f3:22:de:df:5e:60:87:40:eb:81:f5:47:d7:ab:9f:ad:
         dc:af:1f:1a:4f:9d:37:be:87:e3:be:0f:3a:14:cd:a3:72:dc:
         a3:3f:9f:aa:cb:64:aa:d3:81:18:b8:4a:60:4c:95:5a:c1:44:
         62:e7:41:70:c7:53:b8:61:ac:c4:f3:b1:73:aa:d0:37:eb:64:
         fe:fe:78:fd:25:4c:92:3c:5a:67:bf:22:c9:e3:4d:77:9b:0b:
         a9:64:b2:6c:64:1b:eb:f4:ae:be:66:37:c5:75:9c:61:62:c0:
         a3:e3:48:76:16:21:f5:f5:5c:6d:70:4e:0c:d7:5f:17:14:82:
         13:ad:a4:be:03:6b:2d:ec:e4:fc:21:ca:e8:42:04:78:1a:33:
         cf:85:6c:45:51:21:85:08:d2:c9:38:e2:21:d9:4b:6c:8e:3d:
         1c:c8:a5:26:49:56:af:8f:a1:13:f3:6e:df:50:5b:a8:83:89:
         a5:bb:98:f0:64:d2:c2:63:e5:cc:2f:00:ea:9d:d9:d3:16:07:
         40:2c:ce:73:b3:64:05:79:a0:0e:ea:24:03:9e:a2:fe:6f:ac:
         e1:65:e4:78:42:d2:16:a6:31:de:56:94:31:3a:3c:fa:da:89:
         b4:5a:3b:10:07:96:e4:a0:1e:5a:a8:ca:54:c4:18:c6:2c:2e:
         af:21:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:40 2025 by rpki-client