Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9b925ce9-6a24-319e-be38-2072e240fc0c.roa
File:                     9b925ce9-6a24-319e-be38-2072e240fc0c.roa (raw, json)
Hash identifier:          Vve41LAp3w3/05ECcc/7/OSgraGA7kglrvy4RqdjyPU=
Subject key identifier:   00:94:CF:4F:3B:63:79:91:45:01:99:7C:48:19:26:D9:37:C0:EA:B9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964BF9360084A44AEC8BE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9b925ce9-6a24-319e-be38-2072e240fc0c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     19157
IP address blocks:        23.86.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4b:f9:36:00:84:a4:4a:ec:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=4806d6eb-632c-489f-b632-f7182a6d8d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:bb:b1:3e:f0:8c:eb:31:e0:50:11:76:d6:
                    99:b9:cc:4d:be:55:71:fb:c4:c7:0f:8c:ce:5b:22:
                    de:21:41:90:4a:bd:82:12:27:c9:af:de:3d:7d:0d:
                    2b:ee:d0:41:bc:1b:e0:39:2d:3b:27:07:00:67:5c:
                    63:ce:45:98:f4:46:71:8d:e5:e2:8a:22:2e:8e:e6:
                    94:71:72:ca:a2:12:12:20:b4:c7:0b:ac:24:8c:dc:
                    15:bb:39:79:1a:b8:3d:bd:d1:0f:82:cf:f4:76:58:
                    e7:de:35:6d:24:29:b7:ae:1f:68:b0:62:59:a1:1a:
                    85:26:a9:52:6c:e9:37:db:58:63:48:db:02:d1:1e:
                    33:a2:26:52:7f:a0:15:9f:1b:4f:eb:e7:ba:a6:3e:
                    32:e4:34:d0:1c:29:26:6d:32:06:da:41:64:6d:fc:
                    70:88:14:00:32:8a:9f:cc:76:87:2f:4e:d2:99:48:
                    f4:c6:e9:13:b7:a5:95:eb:e6:cc:76:31:a9:96:14:
                    1c:6d:83:56:f8:50:98:62:f6:31:22:f2:07:e1:46:
                    46:a0:c4:ec:00:78:b2:6f:b2:1b:c6:32:64:2b:c8:
                    27:b2:a8:b4:cf:7b:b2:e1:94:65:34:67:5c:5c:ec:
                    c0:3f:31:d9:f3:9e:6d:0f:95:fd:a1:d0:91:d1:be:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:CF:4F:3B:63:79:91:45:01:99:7C:48:19:26:D9:37:C0:EA:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9b925ce9-6a24-319e-be38-2072e240fc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:90:41:9a:90:a6:16:93:de:5c:37:60:23:37:b8:73:cb:
         30:a3:45:85:43:0b:e2:1f:7f:69:7a:f9:ba:86:9b:33:14:07:
         e5:ad:d7:df:ec:29:87:b9:16:7e:ee:ee:68:cf:dd:e5:9e:e8:
         f1:09:de:2e:69:7f:12:04:69:e1:66:94:6c:02:e8:51:6a:6f:
         1b:d3:e7:7c:fe:68:d7:7f:69:ab:58:16:7f:5b:af:79:53:bc:
         7c:97:46:99:06:06:3a:49:10:be:c6:1d:65:26:09:8a:7b:da:
         48:00:cb:6c:19:ef:ef:34:1c:57:b9:bf:14:02:24:56:38:f2:
         ab:8e:5d:83:94:1d:c2:e7:ea:01:62:db:44:2f:f8:35:88:64:
         17:7d:29:cd:0e:49:63:93:dd:9b:86:18:3a:78:f7:81:8c:32:
         0a:fe:23:f2:c9:c1:d7:eb:76:f7:f0:de:fc:31:fa:78:bc:71:
         47:07:7f:c5:fe:49:88:4a:cf:9c:a8:66:88:6b:5d:13:e5:2a:
         1b:59:40:d3:5f:40:eb:05:52:fc:62:0c:98:54:9a:e8:36:4e:
         27:a8:86:31:06:f7:89:11:ef:e9:c7:1d:f5:ca:fc:6e:2a:79:
         00:de:76:7e:0e:cb:e4:e7:17:c0:56:48:19:4a:84:f0:05:a1:
         9d:c5:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:30 2025 by rpki-client