Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
File:                     0ed965f1-d881-3302-a57e-78c8e4449123.roa (raw, json)
Hash identifier:          ygyLfKMcUacH0ejflbOqEzi6ZR8nKPlzT4p3oyfFp/w=
Subject key identifier:   33:E8:19:F2:21:BC:8C:58:86:A9:11:95:4B:97:99:5C:10:CE:63:29
Certificate issuer:       /CN=13f57bc2-46f7-4081-86db-6187bbb84dae
Certificate serial:       010D0C9F4328584B92DCF173816BA93FCF5D5F00
Authority key identifier: 96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     54046
IP address blocks:        23.187.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f1:73:81:6b:a9:3f:cf:5d:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f57bc2-46f7-4081-86db-6187bbb84dae
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=6cb28899-c98e-4bbf-8010-998085aef08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:50:58:0f:68:d7:64:b3:16:53:c9:f9:fe:
                    af:ce:38:c0:3b:68:43:84:8a:b7:e2:c2:42:05:b8:
                    c3:22:68:85:bf:97:cb:1f:2a:a4:0e:3d:5e:c9:85:
                    62:20:35:1f:8e:a5:26:eb:66:07:b1:19:a6:08:2e:
                    34:bf:54:c3:36:3e:8d:a5:34:4f:f6:d2:ee:c8:fd:
                    ff:3a:b5:be:f0:86:64:51:c9:c1:ad:32:86:8c:52:
                    87:c2:42:03:ae:1a:bf:bd:21:d6:1c:6c:4d:e6:12:
                    04:39:69:74:92:81:7d:54:84:2e:a8:f0:24:d4:07:
                    6a:fa:03:e1:40:94:43:d6:3e:3f:54:70:37:31:a9:
                    f0:06:d7:09:1d:45:e5:a9:f3:ec:14:88:d4:f6:00:
                    ae:67:03:37:e7:7c:7a:1b:36:2b:7b:83:c4:d0:7b:
                    89:43:0f:9d:22:0f:da:33:08:c0:be:2f:89:e5:3f:
                    53:04:26:fc:ed:a0:9a:f2:27:a8:06:d7:b6:41:8a:
                    92:31:71:9c:fe:6c:8d:de:3d:c4:93:25:f8:0d:4e:
                    c0:77:92:f3:b8:22:3d:82:ca:6d:8d:ed:e9:d0:f1:
                    d3:dd:75:13:7f:7f:38:fa:b5:03:4c:39:93:da:38:
                    3d:45:4a:9b:aa:75:17:73:2a:34:f8:29:79:65:60:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E8:19:F2:21:BC:8C:58:86:A9:11:95:4B:97:99:5C:10:CE:63:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl

            X509v3 Authority Key Identifier:
                keyid:96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:16:13:25:52:6e:b6:d7:1f:21:1a:7c:61:a5:36:9a:fc:27:
         15:c3:e1:6e:d3:f6:c5:fe:67:4f:d4:9c:c5:50:5c:34:24:7a:
         55:af:d3:ea:a7:1c:44:a6:2e:a8:2b:df:b6:16:a9:fb:47:3d:
         74:23:ae:17:8b:64:63:4c:a1:b2:d0:e1:a2:86:ef:fc:a8:ad:
         68:be:c3:9f:a2:16:81:7b:47:c3:9c:0c:41:b8:c6:da:ab:94:
         2c:c7:33:3a:fb:69:56:48:1b:a6:4e:27:79:06:54:ec:cd:58:
         ce:e4:5a:d9:6b:40:80:ba:d0:d2:5c:8d:6c:c3:67:52:41:de:
         23:70:90:71:39:8b:4f:e8:d3:8f:45:58:7a:07:db:36:14:9f:
         b2:c5:98:be:b5:3c:ac:4d:80:a1:10:32:d0:29:9f:7d:1b:a0:
         cf:4e:f0:76:8b:a1:1f:7f:43:00:6c:9a:af:d9:3e:7d:92:93:
         3e:2f:e6:07:0f:74:f9:8f:d4:af:9c:fb:59:9f:44:19:d4:bd:
         45:c5:46:e8:31:22:72:84:27:3e:bc:34:b9:49:1a:56:47:99:
         d7:5b:29:76:db:ad:dc:17:d6:2e:c0:8f:cf:4f:ea:67:dc:79:
         b9:05:0f:e3:62:07:62:0a:6b:16:28:54:0b:d6:c6:c9:c6:c8:
         57:ed:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:06:46 2025 by rpki-client