Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa
File:                     68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa (raw, json)
Hash identifier:          PRA8Rt+LVsj+Wm72+Ah3TJ93syqR3CYtGGdLxXedaTo=
Subject key identifier:   9A:BE:D9:5D:1D:35:2A:3A:FC:D0:3F:F0:B8:9C:9D:9D:FB:06:8F:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA9325751C7A3D44F1DC67C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     24319
IP address blocks:        23.54.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:57:51:c7:a3:d4:4f:1d:c6:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=0d5d658f-d1c7-4673-a8e6-342788121248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:1e:82:4a:f8:1b:60:ac:b5:8d:02:d7:af:
                    08:bf:be:76:52:ff:8f:29:46:d7:c9:66:da:8a:7e:
                    59:76:17:08:bd:ed:ea:70:eb:de:57:84:f9:98:5c:
                    51:59:e4:c1:c4:9d:11:09:47:8c:7e:74:4f:33:00:
                    d3:21:e5:3a:ad:4d:f1:e4:dd:73:27:b5:96:74:52:
                    dd:25:b3:f9:02:aa:a1:4f:ff:6e:bd:02:ca:0a:19:
                    db:29:2e:ed:77:d8:2f:20:a6:3d:cf:cf:ae:b2:f4:
                    48:20:f7:eb:a8:cb:32:52:1f:e2:d4:d4:2c:cd:e6:
                    c1:c9:3c:22:63:20:20:fc:d9:1b:2d:e3:f8:06:13:
                    19:85:96:7d:77:a7:b2:72:5e:6e:21:22:45:c2:43:
                    41:0e:d8:0c:dc:1e:fe:44:07:af:ea:8f:df:ca:fa:
                    c8:62:13:6a:73:6e:1d:4e:15:53:cc:84:35:f6:78:
                    85:36:9f:06:47:27:1c:b0:6d:0a:66:5c:8c:37:61:
                    a8:1d:ad:a5:29:26:c8:c3:9d:69:d9:c5:c6:c5:c5:
                    cc:b7:d2:e1:d9:c1:84:6c:ca:69:2a:2a:f1:88:3d:
                    23:e4:e8:8d:68:bd:c9:73:aa:5a:11:e8:6a:fd:a5:
                    1e:78:85:1e:ad:fa:c0:31:63:ee:4f:c8:54:cc:2c:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:D9:5D:1D:35:2A:3A:FC:D0:3F:F0:B8:9C:9D:9D:FB:06:8F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7c:6b:4b:fc:a8:77:6f:ab:2d:b8:5f:1b:94:71:ff:28:4f:
         c8:ed:4a:32:08:ff:68:94:61:a6:e9:93:ab:55:59:72:c8:ac:
         57:de:ff:5e:df:a5:81:07:3b:38:2e:74:96:a3:05:c9:9d:ab:
         6b:96:a0:72:d3:38:73:45:b5:c7:c2:ae:97:dd:2a:54:8c:30:
         96:fc:d8:d7:2d:cf:09:32:b5:5f:40:7f:b4:0d:89:7f:ff:2a:
         9d:b8:7a:07:b5:b1:eb:de:84:ac:04:f4:4c:a6:7b:91:19:a9:
         94:37:df:80:da:ea:ac:f4:2d:70:f6:0b:a5:1d:7c:44:cd:82:
         d1:19:a7:53:c2:c9:23:78:fc:e1:a5:cc:ad:43:34:a0:9c:18:
         e3:40:00:fb:d5:e0:26:f8:e2:44:58:a3:71:ae:ef:2f:7f:39:
         01:5f:2f:19:9c:72:5c:16:f6:2a:09:08:d7:2e:29:ad:f5:db:
         22:4e:e8:ec:42:8f:0d:a4:43:9d:e0:5c:93:1b:65:14:fb:cf:
         2d:11:09:ba:ec:aa:e4:56:cf:7a:2b:85:d4:b6:39:e9:54:80:
         ca:39:2e:3f:7e:fd:13:9d:c4:8d:e8:94:d7:6c:4d:46:16:c9:
         98:6e:d9:85:02:59:0f:59:a7:8f:1d:55:ac:9c:62:7f:cf:4b:
         75:81:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:18:04 2025 by rpki-client