Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866ff573-6b2a-3fa7-8299-48c3992229af.roa
File:                     866ff573-6b2a-3fa7-8299-48c3992229af.roa (raw, json)
Hash identifier:          vvRMOQC0kwllD7WZBabH7Ih4EIA0gsUIau5TfCf0J/I=
Subject key identifier:   86:F8:3E:CC:5F:C0:36:E0:0C:70:CF:33:4E:43:EF:90:AC:DF:80:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C07DDE819E4BC3E05B1580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866ff573-6b2a-3fa7-8299-48c3992229af.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     9498
IP address blocks:        23.200.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7d:de:81:9e:4b:c3:e0:5b:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=4129326c-ae4d-4bb8-a175-5cdc964296a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:c9:ea:72:63:0c:09:4d:38:b0:40:db:74:
                    8d:87:19:53:15:92:93:a6:83:e5:2e:02:fe:61:e9:
                    ed:ed:94:ed:9e:84:3c:d5:df:f4:0e:1a:41:0c:3c:
                    e5:eb:cd:61:bd:61:4f:d5:15:cd:15:b6:f1:62:98:
                    05:21:da:7d:69:66:36:37:b7:3f:b0:56:80:5b:48:
                    66:6e:f3:9d:ba:63:d9:cf:87:ac:98:7e:9c:35:b5:
                    1e:1f:78:70:71:85:99:1f:88:41:7d:73:c7:b2:15:
                    45:00:5b:7e:9c:94:58:2d:3b:58:b0:81:9e:73:24:
                    7f:77:86:c8:9d:5b:c1:cd:3c:3b:c8:2f:a4:c1:e9:
                    85:c8:a4:1e:af:7d:ad:3d:70:cf:6f:45:cb:45:f7:
                    b5:3b:67:28:b6:5a:0e:e8:71:cf:c5:44:25:82:f1:
                    fa:1a:75:b5:ea:9e:73:bc:11:a7:2e:2d:a7:8b:4a:
                    ba:23:ec:7c:42:9b:89:88:1e:7b:b2:f1:81:2c:7b:
                    b3:25:25:81:41:d1:3d:3f:02:26:39:5f:f9:39:0a:
                    67:0b:f0:01:fe:6f:d5:b6:3a:fc:52:df:25:74:3d:
                    0c:2a:e6:c1:90:f9:f2:3b:c1:0b:f1:0e:32:ef:c1:
                    fb:19:4a:fb:9a:bb:8d:d6:1e:84:15:e1:0b:23:ab:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F8:3E:CC:5F:C0:36:E0:0C:70:CF:33:4E:43:EF:90:AC:DF:80:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866ff573-6b2a-3fa7-8299-48c3992229af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:1b:05:8e:e1:39:a1:3c:6a:db:21:3f:42:ba:bd:d3:ca:
         c9:ca:ef:cf:5a:8a:55:c0:31:89:d7:82:05:07:d7:33:35:80:
         f4:c0:31:d6:cb:c0:55:98:e6:6a:eb:d9:90:d7:10:e6:b5:7e:
         f0:88:5b:16:27:01:32:c0:22:e7:b1:8c:94:ef:03:10:3d:cd:
         00:29:8a:48:da:b1:f6:0e:94:f0:1c:34:de:ef:4e:c4:8c:3d:
         1c:70:7e:56:ea:7b:38:4d:b7:45:06:1d:94:6f:32:a4:a7:a7:
         72:6e:bc:3a:8b:aa:77:33:8e:11:60:53:8d:4b:4d:36:88:b1:
         0f:ec:f4:57:b9:f4:d5:2e:4c:b6:3b:72:e4:84:03:ac:b7:5f:
         e2:24:a0:81:e0:06:72:4b:22:02:d7:bb:97:ea:e3:94:db:0f:
         1d:eb:a3:b2:89:70:6d:a4:1c:3c:bb:8e:f9:22:a5:c8:8f:7a:
         3d:e6:35:d8:7d:57:ed:97:f5:67:4b:cb:ec:23:a7:7e:a4:3a:
         bf:a9:70:b2:5b:df:78:46:9b:bf:d8:99:5c:dd:3a:6f:a2:50:
         eb:25:f5:ba:f5:6e:55:40:e6:70:4c:a2:0c:ea:2f:9e:9e:0c:
         31:06:d9:4d:33:3d:a3:f4:b4:1d:e0:e5:ff:76:39:a6:78:b0:
         8d:db:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:49 2025 by rpki-client