Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340/b1bed36c-e12f-3104-bf4c-249654f25e30.roa
File:                     b1bed36c-e12f-3104-bf4c-249654f25e30.roa (raw, json)
Hash identifier:          +byUvs3l+/NHw0Oz3ln7bGK1h0WkI/afmvslZBOGZ1Y=
Subject key identifier:   5F:05:1A:7E:4F:31:CA:32:75:90:75:18:5C:9B:A4:7E:6E:36:E0:65
Certificate issuer:       /CN=92e21095-4e07-4076-ae26-c16baab41340
Certificate serial:       010D0C9F4328584B9E07A815F9370C463E92F780
Authority key identifier: 39:02:FD:E4:D0:A6:6E:14:33:61:53:8E:1B:13:C4:8C:B5:A4:5A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340/b1bed36c-e12f-3104-bf4c-249654f25e30.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     25912
IP address blocks:        23.130.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340/92e21095-4e07-4076-ae26-c16baab41340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340/92e21095-4e07-4076-ae26-c16baab41340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a8:15:f9:37:0c:46:3e:92:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e21095-4e07-4076-ae26-c16baab41340
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=9533a2be-1382-4aef-b2cd-43a330907a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:29:1a:1a:92:1d:ab:87:e7:6f:96:ea:9a:
                    0b:5a:95:07:5e:70:88:71:c6:87:65:a5:39:d1:0e:
                    22:5e:02:4a:0b:21:a4:43:9b:2d:d2:4b:40:17:6b:
                    6a:9b:cb:81:eb:a1:b4:ba:e4:39:4c:c0:1f:c7:9e:
                    c3:88:43:df:00:c5:28:11:dd:b5:42:01:de:de:8d:
                    af:8e:08:d9:2a:7d:49:a9:99:2d:63:f1:ed:f3:94:
                    a6:58:b0:e6:a2:10:27:19:79:5b:99:60:0e:f9:ce:
                    62:ad:a8:f7:e2:fd:3c:97:26:60:ef:41:47:de:f1:
                    a3:10:4c:e0:78:8c:07:ed:8d:35:ec:06:42:a7:87:
                    10:03:91:4e:29:3e:9e:4f:b4:3b:4d:29:55:5f:c9:
                    36:64:43:cf:b4:86:a3:39:61:70:a2:82:67:28:0b:
                    de:09:5f:31:40:8d:d3:3b:ba:ab:da:d5:13:a0:02:
                    8f:46:ff:8c:8c:35:cc:17:c1:bf:fc:5a:59:e3:86:
                    81:a3:0d:5d:71:e7:83:ca:72:8b:a8:0c:65:a2:88:
                    94:b1:5a:1e:ce:90:3a:51:ad:7c:b7:20:65:5a:8d:
                    f6:23:05:b7:93:60:04:e9:f8:7a:87:81:99:58:0f:
                    a1:02:69:ff:9e:d1:e0:86:3b:56:00:79:95:f3:18:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:05:1A:7E:4F:31:CA:32:75:90:75:18:5C:9B:A4:7E:6E:36:E0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340/b1bed36c-e12f-3104-bf4c-249654f25e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340/92e21095-4e07-4076-ae26-c16baab41340.crl

            X509v3 Authority Key Identifier:
                keyid:39:02:FD:E4:D0:A6:6E:14:33:61:53:8E:1B:13:C4:8C:B5:A4:5A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/92e21095-4e07-4076-ae26-c16baab41340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:c1:8f:e9:04:7a:37:d0:89:1f:1b:55:f8:cd:ed:8c:d3:
         a7:89:92:b6:92:cc:a6:77:92:dd:ca:0a:bc:e2:7a:38:d0:b2:
         45:86:ec:e6:28:0f:65:b6:e1:d1:02:ae:d5:74:23:15:08:e1:
         be:23:8f:1b:a6:88:82:72:4e:96:00:70:9c:26:a6:6e:5c:f6:
         47:cf:32:bc:74:7a:69:0e:b2:66:cb:36:35:27:d2:f4:8b:38:
         53:c6:da:5d:93:73:6b:9f:da:47:35:2c:cd:66:3e:f7:93:6c:
         88:29:a8:dd:a9:bc:8c:96:38:93:03:fa:d9:bb:b4:fd:75:31:
         c7:43:1f:2f:14:2d:c9:d5:13:40:23:a7:44:eb:fe:ff:22:4d:
         c0:82:31:a8:2e:32:34:86:fd:30:75:bd:c8:95:ed:1d:97:6a:
         50:b9:06:ce:78:69:ab:57:1a:4c:68:3a:1d:be:b3:4f:42:12:
         d3:d7:05:93:7e:a9:cb:38:36:73:a8:f1:4f:43:e2:e8:01:80:
         65:db:f3:f7:2a:1c:a5:1a:9d:6f:c0:3a:e4:af:6f:bf:b9:2e:
         84:41:bc:bf:a0:92:a8:78:53:33:1c:0a:99:e9:cc:30:2d:59:
         36:08:64:97:41:22:d4:73:5f:2e:d5:65:8b:66:60:2b:a0:20:
         6b:6a:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:11:36 2025 by rpki-client