Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/7c2712aa-ab7c-3c02-9681-ce165472a3f5.roa
File:                     7c2712aa-ab7c-3c02-9681-ce165472a3f5.roa (raw, json)
Hash identifier:          cqsE0xKlKAFw1VUKWhnttCtNZzSApa/WeIvCCwWb754=
Subject key identifier:   FD:A4:29:AE:C2:82:91:83:84:63:FA:95:6D:6A:CE:A0:B5:B7:DE:2E
Certificate issuer:       /CN=17ba49ac-37d6-4b90-b973-bee8a685e116
Certificate serial:       010D0C9F4328584B973916A17B6A785020DE0F80
Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/7c2712aa-ab7c-3c02-9681-ce165472a3f5.roa
Signing time:             Tue 21 Oct 2025 02:29:47 +0000
ROA not before:           Tue 21 Oct 2025 02:29:47 +0000
ROA not after:            Mon 19 Jan 2026 03:29:47 +0000
asID:                     9304
IP address blocks:        23.147.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:39:16:a1:7b:6a:78:50:20:de:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116
        Validity
            Not Before: Oct 21 02:29:47 2025 GMT
            Not After : Jan 19 03:29:47 2026 GMT
        Subject: CN=c508e1fc-41ec-46c0-9c7e-9a4fd4992a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:b2:ba:1e:17:50:7e:09:8c:f1:1b:ba:9c:
                    3b:d7:0f:17:61:dc:07:17:2f:eb:43:9d:8b:fe:7f:
                    2a:09:ce:4a:af:0e:51:6d:42:68:44:bd:b6:d8:cf:
                    68:03:32:19:46:37:9a:c0:d7:cf:83:da:a2:d9:b7:
                    65:dd:2e:3d:88:24:87:c4:49:3d:dc:08:a0:3e:22:
                    cf:42:f9:7a:ab:5d:06:31:70:2e:05:40:da:22:b5:
                    02:21:72:81:3f:d4:5b:cd:1d:f8:71:21:8a:eb:30:
                    fd:90:4c:e2:ce:5c:33:ee:6c:ec:ba:d6:32:86:a5:
                    de:29:ef:77:64:87:a1:ff:d1:f4:0b:b1:6d:78:6d:
                    35:ce:79:c3:36:44:50:b9:2a:a6:e7:43:f0:7c:16:
                    31:67:77:ba:04:b5:4b:a4:1e:e1:e8:11:44:ce:e4:
                    5e:fb:85:ac:e9:ee:30:da:aa:b6:79:24:79:89:77:
                    78:67:e9:5b:0b:d9:29:8d:d5:a3:7e:c2:0c:58:28:
                    45:a5:18:1e:6c:1c:4a:38:4f:b1:fe:df:b1:1d:54:
                    b8:99:3b:1e:74:bf:a1:6c:77:94:14:6b:45:43:f4:
                    04:e1:0a:db:c8:0c:06:e1:77:d7:b0:5e:83:0a:74:
                    b4:c9:68:f9:3d:c0:0c:e7:d6:86:9e:d7:59:eb:5d:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:29:AE:C2:82:91:83:84:63:FA:95:6D:6A:CE:A0:B5:B7:DE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/7c2712aa-ab7c-3c02-9681-ce165472a3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:00:1c:2f:0c:dc:1e:ca:a9:b9:45:cc:ab:f8:b5:43:37:69:
         ce:99:12:2c:2a:55:c7:03:76:ec:72:e5:5b:59:f8:f0:80:6e:
         b6:09:c6:6a:e3:ef:ca:02:b4:c4:ef:82:f3:84:35:d3:5d:8f:
         4e:5f:e4:e0:0c:3e:d0:13:28:3e:6b:47:2d:44:14:63:4e:23:
         d5:c8:6a:2d:2d:a3:94:6a:39:50:2c:eb:e8:8c:d6:3f:f5:9c:
         c2:e6:9c:fc:d7:7f:ba:7a:60:19:49:dc:80:cf:30:91:2b:c9:
         6c:e3:5c:f3:9d:a0:c1:6a:c0:c9:1b:16:24:a0:17:4e:e4:27:
         5f:7e:dd:cc:d2:13:aa:8e:98:e8:84:22:6d:83:2e:7e:04:b0:
         5b:80:76:89:76:3f:8e:80:e1:f1:22:c5:e2:7f:5f:d4:0c:b0:
         15:c4:ae:0e:f2:af:00:1f:54:62:e4:ab:ae:8e:20:c2:69:fd:
         39:10:cb:6e:41:98:a6:54:a9:58:f7:65:32:c0:cd:28:47:f7:
         3c:8f:1b:29:58:d8:5b:27:55:43:77:59:81:3e:e0:7d:6f:d0:
         4d:33:b1:43:93:50:0e:63:92:3e:a6:97:76:86:5a:b4:34:19:
         f3:1a:97:ec:58:51:ce:29:d1:24:fd:4a:67:01:6d:c9:e8:8b:
         2f:5d:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:38 2025 by rpki-client