Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
File:                     0ebef180-3425-3d62-8313-9b404498163b.roa (raw, json)
Hash identifier:          XP4a4uQAM0o9uUhQj0wrT4l78ZR+Lz2O3+wiLzmskuI=
Subject key identifier:   AA:F5:9A:59:61:B5:2C:F7:C3:81:EC:BA:46:BB:70:CB:2F:00:61:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BBFA5B3781E67403B3B89C480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     20940
IP address blocks:        23.72.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:b3:78:1e:67:40:3b:3b:89:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=5cf1deab-6320-46e1-b4ff-eb7e9383372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:05:58:a7:9d:8e:5b:42:63:6f:6d:30:67:c3:
                    1f:1f:b6:de:2f:91:b2:64:b6:ee:7e:28:a1:ad:d7:
                    36:3b:ec:a1:be:43:96:0a:b2:fa:10:36:b6:7c:a2:
                    e6:54:13:43:17:32:73:76:f7:ba:5a:7c:c8:79:db:
                    96:ef:06:aa:71:a7:be:a3:ec:5e:42:e4:ce:d1:98:
                    ee:69:56:b0:0c:00:cc:a0:3d:f7:98:1c:c1:b5:41:
                    3e:2b:93:f1:ab:c1:0a:2b:30:3b:ab:1f:bf:82:99:
                    04:be:0d:bc:c2:f2:5f:73:04:41:b0:f5:53:df:2d:
                    0d:ac:22:e0:25:25:1a:c8:9e:9e:2b:14:26:25:73:
                    99:cc:77:19:3c:28:8b:2f:79:5e:7d:a4:c0:cc:24:
                    87:95:e8:8a:a8:00:0a:1b:51:c8:da:a9:8f:ec:a7:
                    11:a5:2c:20:8e:65:37:3d:15:3d:c8:4c:65:fb:6b:
                    9f:f7:c2:a8:36:99:9b:7e:c4:47:e4:e8:d1:6a:1b:
                    c9:6e:fc:06:70:2a:1b:5d:b3:74:db:a4:5f:4f:a7:
                    60:81:f9:6a:e0:37:f6:90:c1:43:0c:b9:72:8f:dc:
                    fa:fe:bd:43:0f:d9:f1:1b:c6:18:bc:82:c2:70:4b:
                    0e:15:59:34:d7:70:46:b6:1a:39:72:52:2b:f9:da:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F5:9A:59:61:B5:2C:F7:C3:81:EC:BA:46:BB:70:CB:2F:00:61:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:a9:d1:bb:77:24:0e:64:44:04:43:20:ae:72:d2:9f:c1:
         2f:59:cd:ab:34:57:36:94:2f:81:6e:27:82:81:9d:08:1c:f5:
         57:9a:e1:87:98:c3:06:2e:be:96:87:40:d7:01:aa:3a:24:d0:
         87:56:ad:75:aa:6a:cc:53:7b:5b:4d:6c:95:9d:cd:cc:08:ca:
         db:8c:8b:13:d7:19:58:5f:23:79:3e:8f:c1:39:cc:ca:18:40:
         e1:83:22:f7:ba:ac:9a:39:30:f1:de:c9:2a:c0:06:cd:13:3a:
         13:cb:8e:86:e8:47:97:e8:0f:ab:fd:49:e8:34:c1:d3:c2:e0:
         a2:ca:06:67:40:da:49:2e:6d:26:66:b6:56:b2:35:7e:0a:b6:
         20:65:c3:52:1f:d7:52:3f:dd:cd:e6:2a:63:be:3f:a1:e7:11:
         e8:6e:00:e6:21:47:33:52:b0:90:85:7e:15:cf:a3:50:66:2c:
         97:e3:77:37:85:47:22:3b:8d:de:90:b1:56:0a:7f:cf:89:94:
         d3:3e:c1:d7:96:9f:41:0c:65:26:63:87:ac:1c:18:1f:81:38:
         b1:64:62:9f:81:55:ac:95:24:1c:a6:f3:f9:13:fb:ef:6f:f4:
         2f:7c:03:37:49:16:e1:de:ee:b2:0a:f1:af:c6:e1:0d:f4:22:
         b9:6f:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:28:39 2025 by rpki-client