Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa
File:                     c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa (raw, json)
Hash identifier:          GdoatFeP2NsBLzqcd72QSM9PA0svQn/AfzE7fQDtX3E=
Subject key identifier:   D6:EE:FF:4B:D4:3E:8A:A7:69:35:A3:32:1A:A0:F0:08:35:4B:CC:68
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584BB88D2F3F39621D9A6CC1EF00
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     63183
IP address blocks:        23.190.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2f:3f:39:62:1d:9a:6c:c1:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=2e5e6515-f9d4-4396-bd89-ab54cf9d8255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:38:49:56:d8:d5:b4:a0:bc:47:2a:47:e2:
                    84:d3:b2:3e:15:93:99:75:b8:b3:14:c3:1f:58:46:
                    b6:df:b7:2c:c8:bf:ae:52:68:4c:b6:58:03:67:ee:
                    21:fb:48:83:8e:3e:a9:ae:be:37:31:ca:00:33:50:
                    70:e1:25:18:a6:f4:2f:32:83:0c:f9:41:21:4d:6d:
                    09:a6:91:5b:fa:00:67:78:3d:39:0b:32:b1:f7:b6:
                    60:dd:2d:d9:20:cc:5d:ca:95:2e:b7:ac:e2:21:08:
                    b8:6f:41:ed:89:0f:07:69:7d:cc:31:79:41:b9:8f:
                    bf:45:a1:ad:e7:e2:55:59:b9:61:38:94:93:ef:7f:
                    7c:19:65:d5:22:2e:3b:b6:c5:63:3c:c0:6f:7e:a8:
                    42:0a:37:79:b2:9b:0a:46:0b:db:38:4d:75:69:9b:
                    66:e5:44:6a:e3:4e:47:c7:fa:5b:86:cc:e6:46:a1:
                    b6:21:ca:14:22:0b:8e:d3:75:cb:55:91:bd:76:07:
                    f1:f1:44:1a:0a:3b:7d:24:d8:70:1c:29:50:04:c7:
                    7b:8e:e3:cb:43:e4:80:f5:7d:e1:01:d9:17:50:10:
                    f5:66:86:16:ef:06:55:b3:21:a0:44:06:af:64:3f:
                    9d:34:02:07:b5:44:18:4b:27:53:c5:02:bb:92:31:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EE:FF:4B:D4:3E:8A:A7:69:35:A3:32:1A:A0:F0:08:35:4B:CC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:eb:f9:83:f8:d7:37:58:86:da:7a:90:ab:88:17:5d:9f:
         38:88:c9:3d:8d:da:c0:55:8b:1a:f3:9a:d4:03:4e:58:49:58:
         7c:81:b1:46:14:48:52:e5:96:83:e1:a1:14:1c:18:b6:77:c6:
         40:08:3e:3e:f7:42:03:fe:5e:7d:77:c3:30:ba:b0:bd:26:93:
         70:89:74:80:fc:e1:4a:17:e4:09:27:36:c9:c8:75:8e:27:e9:
         fe:c1:c6:de:a7:c5:36:85:56:2e:e9:08:d9:aa:3d:37:68:b7:
         07:68:a7:14:b1:2e:57:aa:5f:00:d1:74:17:cc:77:75:f0:19:
         c4:fe:06:d6:a3:4f:4d:bd:75:bf:e7:b5:91:60:a7:87:cc:97:
         dc:1e:19:d1:e7:ab:71:78:41:9f:87:b8:46:90:41:14:93:fc:
         86:69:9a:72:5b:0d:08:ce:41:d7:10:42:32:f2:bf:b3:01:33:
         2e:51:7d:69:a9:27:06:17:ae:38:5e:cd:3e:b5:c0:62:81:37:
         d5:ac:35:97:6e:60:a9:b5:3e:8e:16:32:d9:48:2b:60:e1:0c:
         60:20:fb:5d:da:8c:66:a9:f2:27:57:94:4f:b5:ef:9e:aa:b9:
         f2:dc:73:c0:ce:d4:68:24:a2:17:11:0e:e4:f8:a5:84:74:ff:
         6c:29:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:30 2025 by rpki-client