Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa
File:                     9305f653-4589-3b05-9b07-a986191aeaaa.roa (raw, json)
Hash identifier:          SlApmXb9/YVjdVDOmc2uWSSFDZNIslrwDDwuE4E/SCU=
Subject key identifier:   DA:E0:7D:30:8E:06:37:F0:26:35:9B:8F:8F:8A:AA:E8:E1:84:7B:6E
Certificate issuer:       /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
Certificate serial:       010D0C9F4328584BBE402552EB5E97F2F426F480
Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     216360
IP address blocks:        23.185.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:25:52:eb:5e:97:f2:f4:26:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=64d8c56b-782f-4cc1-826c-91c445f3e928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:1f:6d:a6:79:cc:67:dd:08:46:97:1e:8e:
                    62:20:a4:dc:6d:50:8a:4f:73:d7:7e:5d:72:ac:04:
                    c4:d1:01:c5:e5:fa:54:1f:49:0d:d5:a7:d6:ad:52:
                    ec:2f:67:d8:7e:10:3e:ae:e3:ca:0f:9b:f9:59:ed:
                    97:15:6f:9c:67:64:6b:ae:f0:c7:0a:80:e5:6f:2b:
                    2f:93:2b:39:7e:26:53:33:d0:1c:ff:1b:3e:81:15:
                    b9:9d:56:2f:51:59:5b:c0:ad:5f:38:c7:be:09:f5:
                    c5:45:77:16:08:d1:fb:c9:99:e5:95:a6:f4:9b:93:
                    b7:97:cd:77:0e:2b:2c:b6:b9:fa:9c:c7:06:e4:59:
                    2f:be:a9:ec:da:0e:91:f1:02:99:5b:e6:d7:d1:96:
                    c0:1f:f4:7f:54:2b:c2:40:0c:0c:39:fe:c5:0e:5c:
                    30:6b:c1:24:26:57:c5:a9:78:c1:e5:5d:08:04:43:
                    01:c5:78:0c:0e:2f:90:d6:b6:c9:91:c3:cd:7a:41:
                    3a:e7:b0:98:75:f1:32:fe:14:6e:42:48:0e:6f:e7:
                    09:1d:a5:1d:99:f6:a0:ee:db:61:97:ba:c7:4e:d5:
                    0b:65:ff:32:9f:83:94:dd:00:5d:10:10:35:a4:3a:
                    04:b1:7f:fc:66:4d:ed:73:6b:e0:c3:5c:f6:03:c9:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:7D:30:8E:06:37:F0:26:35:9B:8F:8F:8A:AA:E8:E1:84:7B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl

            X509v3 Authority Key Identifier:
                keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f3:38:4e:9e:4e:af:d0:ee:db:61:71:4a:14:20:d4:81:ce:
         c3:5d:ad:d5:a5:8a:e9:d2:8b:14:d9:52:93:d8:3c:0b:6e:47:
         99:87:cc:76:de:b2:85:4f:bb:48:7a:17:93:cd:57:6a:84:d8:
         f3:a9:fd:a2:38:be:0e:4d:c3:93:ab:62:3f:79:a1:43:18:55:
         ec:99:81:16:f8:fa:04:c9:50:a3:93:b9:d0:d6:9b:b2:1b:11:
         a7:f3:a7:b0:7b:f7:ce:b4:a0:5f:43:14:d2:56:f7:fe:2e:8c:
         82:e1:1d:bc:c8:06:81:77:b2:1f:5f:97:53:1f:2a:91:a1:f1:
         36:08:07:1e:e9:39:40:b2:24:76:2e:97:f0:02:aa:a6:38:49:
         73:89:55:71:5f:0c:29:c6:70:fc:87:95:00:ba:fc:d8:e5:09:
         e1:82:aa:23:be:3a:dd:40:26:1e:df:a4:2d:4d:17:9a:12:8c:
         5b:ed:19:b1:06:f8:3d:82:96:4c:61:ef:0e:6c:f8:9a:7e:aa:
         2e:dd:15:72:09:bc:95:94:8c:0f:54:9f:99:89:2a:76:b7:5d:
         e9:9e:45:16:e7:ef:bc:53:bb:79:27:38:e7:06:f8:83:78:96:
         25:f2:cf:75:61:25:e8:4b:9c:96:46:ec:97:9a:27:2c:56:06:
         5e:73:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:12 2025 by rpki-client