Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/70896c35-ab87-317c-859a-f346e8a1f3b9.roa
File:                     70896c35-ab87-317c-859a-f346e8a1f3b9.roa (raw, json)
Hash identifier:          i0SqSPbhasIdHSaK+G+x/UPdh2kvoXViM2w1nQv6LdM=
Subject key identifier:   B8:BE:CF:B9:B8:16:F0:6A:56:CC:78:B4:3F:FC:0E:39:B8:1F:A4:4C
Certificate issuer:       /CN=5dbcd19a-2b5c-428a-819d-73d9a69760f9
Certificate serial:       010D0C9F4328584BA6DCBE122B61FD336F1EFF00
Authority key identifier: 61:C8:6F:D9:9D:BE:41:61:E1:7E:28:58:5C:D9:42:B2:20:81:9C:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/70896c35-ab87-317c-859a-f346e8a1f3b9.roa
Signing time:             Sun 26 Oct 2025 16:56:39 +0000
ROA not before:           Sun 26 Oct 2025 16:56:39 +0000
ROA not after:            Sat 24 Jan 2026 17:56:39 +0000
asID:                     979
IP address blocks:        23.144.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:dc:be:12:2b:61:fd:33:6f:1e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbcd19a-2b5c-428a-819d-73d9a69760f9
        Validity
            Not Before: Oct 26 16:56:39 2025 GMT
            Not After : Jan 24 17:56:39 2026 GMT
        Subject: CN=4a7491f2-b69b-4059-a890-8b111eddfa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:c7:9b:49:9c:f0:19:67:fa:81:b1:d2:68:
                    1a:07:33:d4:c3:0a:d6:05:f6:cd:a3:9e:b5:0c:bd:
                    4b:cb:d3:ff:0c:9e:ed:0d:01:5c:bd:1b:37:45:2a:
                    b4:9b:97:ca:03:84:a9:4c:da:96:66:2c:69:b4:9f:
                    ab:42:37:ff:a3:75:27:49:b7:84:0d:a4:8f:53:60:
                    f5:b3:bc:d8:5d:5c:63:eb:79:cf:de:ba:c3:f9:a6:
                    da:5f:19:62:9e:62:04:4d:6e:79:e0:dd:5a:11:75:
                    14:0a:8f:65:9b:1a:2f:12:3e:fb:e8:17:ab:b6:86:
                    92:78:b2:94:d7:14:45:33:3f:bd:ae:21:76:bc:be:
                    13:7b:47:85:b5:51:a5:b3:9d:29:48:25:21:aa:3c:
                    2d:2f:5c:17:25:9d:b8:7d:c4:f1:80:68:0b:8a:f5:
                    4c:9c:8d:06:26:eb:a9:ec:aa:e5:2c:99:54:fd:e1:
                    ab:6f:01:dd:c6:cc:66:13:8a:8d:16:43:16:db:11:
                    60:f3:f2:35:63:10:c2:7c:6b:68:95:7d:e0:3b:6d:
                    45:86:06:5c:d7:63:3e:44:0e:c9:b6:76:cf:00:48:
                    ea:99:d4:ad:f4:31:e3:62:f4:c3:db:73:c8:39:55:
                    2f:ec:43:c5:68:09:24:fb:7c:29:71:5c:ae:e9:a7:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:CF:B9:B8:16:F0:6A:56:CC:78:B4:3F:FC:0E:39:B8:1F:A4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/70896c35-ab87-317c-859a-f346e8a1f3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:C8:6F:D9:9D:BE:41:61:E1:7E:28:58:5C:D9:42:B2:20:81:9C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:48:c0:7a:08:fc:34:12:ae:f3:64:09:fc:00:9a:9b:cb:
         fe:33:a0:70:d1:02:a1:42:ea:59:7d:c0:96:91:18:60:c9:13:
         ea:ae:51:03:a0:0a:43:93:d4:73:08:31:b9:b6:ad:03:42:50:
         69:04:72:b9:ea:b2:2c:87:d6:fe:f8:e5:53:be:da:b0:86:05:
         d7:07:79:48:a3:89:0c:4d:c7:5f:70:0f:82:48:81:d7:ec:7b:
         7b:8c:85:2b:dd:5b:79:92:25:ca:53:ff:e0:0d:46:85:62:12:
         e8:35:39:5b:0e:77:9e:7f:15:35:0b:38:81:14:24:ad:19:4a:
         65:60:3f:88:2a:5d:6f:8a:d3:6b:fa:0b:c5:89:46:38:9c:95:
         cf:dd:3d:60:1f:02:6e:b2:e1:4f:e6:93:27:32:c4:25:0a:ce:
         c3:21:e7:95:1d:6d:d7:14:80:3b:c8:0d:4c:a1:27:22:50:18:
         47:d6:7a:b5:b6:c8:eb:cb:fc:30:75:6d:b1:f9:3b:81:df:c4:
         aa:2c:c3:ad:04:89:18:ba:7f:d1:35:96:d8:1c:b3:22:72:13:
         e9:27:2b:9c:c1:be:f2:2a:90:22:72:0d:06:ff:bd:6b:00:fd:
         f9:6b:fa:c7:80:d9:ca:72:0e:fc:2d:03:9a:99:a9:ab:87:ea:
         86:c4:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:52 2025 by rpki-client