Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
File:                     99e77285-3c2b-3fae-96c0-463d87b57b40.roa (raw, json)
Hash identifier:          LRbCU0IiZzEUHitTt1K3JuW/zUnbJ3HZs9QabdBDlk0=
Subject key identifier:   00:5F:10:DC:6C:83:00:91:77:65:6B:5E:16:CF:2E:17:41:1C:3E:20
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F4328584B1F017079FBCD1EEAA05C4300
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     399214
IP address blocks:        23.141.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:70:79:fb:cd:1e:ea:a0:5c:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=e63e6c5d-3954-41d9-85ab-5f1d1abc5b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:86:3a:b5:28:97:c7:81:72:b2:0b:2c:9a:
                    03:29:3a:b6:5c:da:8f:c4:fb:81:89:cd:10:4c:e7:
                    7e:6e:51:20:77:e8:5b:60:e3:38:9b:38:9f:2c:10:
                    8d:ce:84:75:0e:de:7b:1d:78:63:53:09:d1:f2:2c:
                    2b:7a:7a:83:51:00:ee:9e:32:cf:e5:2a:c4:a7:d3:
                    38:32:ed:72:69:d3:58:16:64:55:be:89:15:bb:b9:
                    ae:ba:29:24:0e:24:ca:e6:01:01:c5:fc:50:69:f3:
                    e9:2a:00:1e:a4:c5:ac:49:a7:30:19:56:4e:3f:85:
                    cc:10:a3:ae:2e:3e:86:34:ce:9e:74:f1:77:58:00:
                    10:c7:db:cc:b2:90:b8:2a:4a:bc:5b:3a:6b:8d:7c:
                    4a:41:81:6e:c4:fa:af:d5:a1:0b:19:45:b6:dd:60:
                    a3:18:65:b5:3f:4c:88:e6:44:bf:a7:af:c3:20:16:
                    cf:6e:b0:ba:3b:33:d8:8c:41:46:2f:dc:ca:fc:cd:
                    9a:92:91:00:8f:0f:e4:2d:ce:86:a6:53:c1:04:bf:
                    32:b0:f7:a5:6f:54:0a:1b:11:85:be:17:5f:41:10:
                    68:23:7b:23:cf:b6:ec:af:06:9c:cf:2e:2c:d3:11:
                    c1:41:f2:21:21:b4:62:6c:26:50:bb:83:44:c8:c0:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5F:10:DC:6C:83:00:91:77:65:6B:5E:16:CF:2E:17:41:1C:3E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:07:63:66:51:2d:97:59:ff:30:b1:b0:c8:7e:05:eb:ad:78:
         e4:cd:56:90:82:9f:6f:b8:47:f6:45:cc:9d:01:5f:3e:85:fc:
         5b:f5:40:c7:62:db:a9:eb:b0:90:e0:f7:a9:79:c4:9e:b1:7f:
         44:2a:ec:4b:7a:da:09:f9:60:e9:f2:4c:ad:2b:b6:24:aa:89:
         ea:35:ba:be:b3:b8:85:bf:df:9e:fc:55:85:a1:95:83:1a:31:
         9d:00:d8:9f:f1:35:50:c0:9a:d5:33:a8:7f:f8:e8:d0:cc:a4:
         21:62:f6:6d:2e:43:78:b3:71:5d:c0:60:2d:d0:5b:92:a3:94:
         a4:de:eb:04:18:ec:be:21:c9:ff:c4:68:e4:6e:09:c1:8f:7c:
         ac:6d:e9:7f:32:46:90:de:1d:34:a9:37:95:24:7f:d7:53:cd:
         b7:7d:0f:ae:31:d3:f9:78:5d:60:18:90:0f:3a:81:b1:19:55:
         39:e1:24:c2:ea:3c:09:99:e1:c8:09:a4:a7:49:b3:fd:88:52:
         d0:82:18:44:ed:97:c5:48:66:cd:1e:7c:0d:e5:25:8c:60:c1:
         b4:7b:0b:7e:c6:1f:3e:36:55:0b:34:62:28:d9:2a:6b:54:85:
         50:89:b6:44:1a:50:a8:b0:89:80:85:47:66:4d:a0:d9:23:b5:
         51:b1:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:20:00 2025 by rpki-client