Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23788cac-2bbd-31fa-aafc-291f00acce3f.roa
File:                     23788cac-2bbd-31fa-aafc-291f00acce3f.roa (raw, json)
Hash identifier:          lV6s1QImj8JnFi9BvheiwQqYbENotAQyoRYf3B/tPIU=
Subject key identifier:   90:0D:5F:29:3C:40:D1:D0:FA:8D:A0:04:90:B6:1C:30:E3:5D:2E:3E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584BA2378FD92566AA0C096CCD40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23788cac-2bbd-31fa-aafc-291f00acce3f.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     23473
IP address blocks:        173.230.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:8f:d9:25:66:aa:0c:09:6c:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=0d940241-4b00-411e-bd9a-54e6acd5cf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:f0:e0:55:46:9b:58:7d:92:a8:3e:05:11:
                    3b:34:16:49:07:dd:be:f8:39:35:ed:d7:19:8d:c4:
                    ff:82:80:8f:a7:fc:a8:bb:ba:bc:10:53:08:58:30:
                    30:7b:48:d5:11:93:24:d4:66:c4:dc:39:9c:3f:5e:
                    39:9f:46:5e:60:cb:c8:fc:2f:33:49:73:b3:31:e1:
                    53:69:70:dc:d6:80:98:91:29:dd:9f:21:af:fc:5a:
                    e2:75:9f:e5:b6:7b:14:22:8b:24:46:30:2f:22:fc:
                    80:e6:01:15:78:df:0a:45:dd:85:fb:4d:89:77:0a:
                    60:1b:0c:85:83:74:96:50:e0:c4:56:ab:99:27:f3:
                    20:81:53:41:7d:cc:be:1b:03:40:25:b2:17:69:79:
                    62:cb:e2:eb:cf:11:7e:e0:5f:da:60:ad:b0:0a:70:
                    5b:0d:fb:2b:fd:33:51:74:ea:da:b5:ce:72:51:8c:
                    a2:85:d3:99:3a:a5:11:bb:30:3a:da:9f:22:d9:cb:
                    8c:ed:af:8e:58:d3:88:20:28:ad:1d:50:f0:22:dc:
                    f1:dd:b9:71:d7:3f:dc:84:ea:8e:5f:fd:55:be:a4:
                    3e:45:77:33:d8:f0:3e:fc:1c:87:c9:a1:c9:89:09:
                    be:2f:2e:eb:94:70:28:c9:b6:e3:18:2d:37:a8:18:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:5F:29:3C:40:D1:D0:FA:8D:A0:04:90:B6:1C:30:E3:5D:2E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23788cac-2bbd-31fa-aafc-291f00acce3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:d6:df:1f:18:87:bd:85:ac:30:5d:48:38:3b:1e:88:7f:
         7b:03:f9:c8:c9:33:28:59:de:19:53:b0:1d:ac:a0:6d:e4:3f:
         5a:f0:59:45:01:7f:9a:cf:2b:e2:cc:45:fa:2e:9a:46:6d:11:
         c2:76:53:24:76:9e:df:76:98:16:bc:9e:46:67:53:fd:cb:0c:
         28:78:06:56:d8:43:40:a0:c0:9a:e0:e9:66:ce:e0:a4:c3:5c:
         3f:3e:31:4a:ee:3e:d2:84:08:7a:4d:1b:07:73:ab:c4:8f:48:
         4c:05:d5:8d:95:32:5b:51:ca:bf:ad:c6:e5:2b:b2:2c:aa:84:
         41:8b:42:ae:59:3f:69:33:d6:3f:9f:24:98:32:e5:96:83:76:
         d8:fd:8b:dd:d5:89:3c:8c:56:68:7b:fb:53:8a:e6:96:00:9e:
         f4:24:fe:f0:03:db:91:c6:c5:3b:d3:b0:fc:fd:79:e0:7f:7c:
         35:6c:12:4c:65:55:7d:86:a5:c1:0c:a3:bd:75:2f:c5:c1:41:
         56:47:2d:b3:48:39:06:da:52:3f:f2:4c:08:cb:16:0a:c1:f4:
         85:0e:21:1d:69:a9:15:aa:4c:02:e0:09:a3:ad:1b:b3:83:f2:
         12:ec:f0:f9:16:aa:2c:b2:95:d2:30:a0:73:16:b3:79:ae:5a:
         51:67:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:27 2025 by rpki-client