Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
File:                     e397c739-b478-394f-ae21-89fd0af584d8.roa (raw, json)
Hash identifier:          g1A41J9huvOqinUmcbF4eMsmN2zAIphPxfiqxcxivWY=
Subject key identifier:   78:2F:9E:A0:1A:B9:D1:DE:5D:41:D9:79:8C:6C:5E:07:06:97:03:44
Certificate issuer:       /CN=0c4c7001-7459-4ca5-93d2-88612666a768
Certificate serial:       010D0C9F4328584B8BE221D6863BC40B45199500
Authority key identifier: 56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16925
IP address blocks:        23.149.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:21:d6:86:3b:c4:0b:45:19:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4c7001-7459-4ca5-93d2-88612666a768
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=14164a66-4db0-43d8-87df-d7b18fc3e203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:ef:2c:df:49:29:eb:45:ac:70:b2:1e:c8:
                    c1:21:54:95:52:b4:15:39:a6:e0:6e:70:61:cd:0c:
                    d7:74:49:3c:34:b1:95:fb:9a:64:80:62:88:f4:ed:
                    eb:dd:91:bb:b0:9a:58:25:5c:bd:cd:45:59:81:ff:
                    83:d9:6d:eb:42:ba:28:5f:09:d8:fc:37:2a:9d:1d:
                    8b:51:26:d9:53:92:70:54:e6:b3:39:9e:1f:87:40:
                    8c:e5:9b:02:a8:33:7f:1d:1e:c2:4d:69:43:bc:5f:
                    61:18:69:04:a7:48:de:1f:45:65:34:78:db:67:fb:
                    b2:04:13:ab:d0:cc:f7:88:b4:4a:a7:b2:2e:18:f8:
                    61:89:1f:ff:f7:04:56:fd:50:63:84:04:29:9f:21:
                    f2:c1:b8:aa:7c:51:1c:71:1f:53:5d:cf:53:63:c6:
                    42:7b:41:b6:07:71:a1:92:9e:14:9a:fe:2b:f7:81:
                    64:7c:1f:0f:ab:77:41:47:5f:04:b6:5c:c6:a3:c1:
                    b4:d7:fd:ec:9b:18:d9:47:5e:42:a5:30:0d:d2:21:
                    6e:fc:04:8d:c0:c4:1b:33:a9:3d:79:f0:a1:99:d8:
                    79:6a:ad:ea:cf:35:8b:8d:88:96:24:2a:46:79:24:
                    e7:5d:e1:75:57:80:92:95:ba:ea:99:73:c5:e6:7b:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:9E:A0:1A:B9:D1:DE:5D:41:D9:79:8C:6C:5E:07:06:97:03:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl

            X509v3 Authority Key Identifier:
                keyid:56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:50:dd:14:0e:51:09:3c:23:03:ba:12:6c:3a:25:88:e1:45:
         69:31:24:af:de:70:74:59:bd:9f:04:04:39:ea:78:15:d9:c8:
         f3:ba:a5:62:f5:00:2c:ac:c5:31:14:a2:3b:9e:34:3c:5e:2c:
         d5:41:32:05:84:96:57:ff:58:7b:02:57:fa:ff:8a:c2:10:3a:
         30:ff:4a:6d:a1:31:59:b2:b3:9d:79:3f:c4:ea:f2:8c:d5:a4:
         14:89:24:9b:3e:30:c1:41:ed:3c:7a:87:b2:74:10:94:54:a9:
         74:e5:ad:b6:b6:b6:0a:50:36:83:6c:d3:52:53:62:80:b7:79:
         91:75:a4:c9:65:e9:72:b2:ad:3a:22:71:ef:e7:c5:b3:e0:26:
         0a:3d:23:20:4b:7d:d8:ca:20:83:42:cd:36:4f:2f:3b:8d:58:
         11:80:59:08:69:e7:5b:86:78:35:4f:af:ef:42:1c:fc:95:fb:
         df:70:bf:11:ed:8e:e7:9c:f3:31:b6:0d:e4:ca:31:95:8c:a5:
         fc:b8:d1:e4:0b:b0:43:88:5e:1b:de:59:22:79:34:25:27:ee:
         11:4a:a7:78:79:18:cf:dd:af:e7:e7:cc:ff:33:65:b2:43:8f:
         2b:7b:0b:4b:74:7c:19:ce:5d:38:24:5f:f7:89:6b:87:ef:91:
         9c:25:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 10:54:12 2025 by rpki-client