Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3469ff4-c106-32a1-9483-eb2e7ae4889f.roa
File:                     b3469ff4-c106-32a1-9483-eb2e7ae4889f.roa (raw, json)
Hash identifier:          zUZME7SGB+zdm/7AbLCYEtLYPW72fKuKTzTBSUpO8Fg=
Subject key identifier:   91:8C:1E:98:57:25:0D:D8:84:A8:F0:D0:7A:9A:44:DB:ED:FE:E0:A1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BBFA5B6C39E06F98E43377080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3469ff4-c106-32a1-9483-eb2e7ae4889f.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     6762
IP address blocks:        23.79.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:b6:c3:9e:06:f9:8e:43:37:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=1bf4f981-2bdf-402d-bad5-5aa933ae2cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:47:e1:10:5f:b3:ee:d3:6c:b1:2b:30:5b:
                    a9:19:d8:b8:29:80:cf:64:fc:54:7b:66:9b:4d:a4:
                    e4:d3:23:8e:ac:d0:41:7d:8b:37:d0:31:b0:c4:8b:
                    b0:29:cf:d0:80:8a:93:26:a4:46:5a:7b:6b:b4:2c:
                    51:f3:a7:14:b5:c8:29:6c:57:63:93:2a:95:15:1d:
                    27:95:41:d6:09:b1:ab:d1:25:a5:11:30:e3:f4:51:
                    06:06:c9:a3:78:c2:a3:cf:61:9c:43:37:53:71:81:
                    ec:2f:2a:56:46:bb:28:4c:66:2d:15:73:d4:81:82:
                    70:70:9e:17:16:5d:cb:b9:1b:5f:ef:58:c9:79:6b:
                    3c:90:ca:2e:15:d3:cf:50:f3:7e:08:2d:05:50:8a:
                    20:c9:a9:dd:04:07:83:19:d0:44:23:32:34:a7:2f:
                    f9:cf:ab:8a:bc:55:09:3d:be:60:40:74:c6:9d:63:
                    47:c9:c6:af:e2:42:1e:e2:f7:1d:6f:4a:41:dc:dc:
                    b5:bf:c8:7f:cd:10:7e:cf:05:4b:9b:17:0b:57:1e:
                    e9:43:e6:8f:b1:5e:1c:c1:f6:4f:9e:5a:7d:84:f2:
                    3d:34:7f:71:70:ed:bc:4c:96:eb:81:8b:3d:97:d5:
                    16:bd:3d:f2:8d:73:3e:04:d1:a0:9e:5c:d7:0b:e5:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8C:1E:98:57:25:0D:D8:84:A8:F0:D0:7A:9A:44:DB:ED:FE:E0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3469ff4-c106-32a1-9483-eb2e7ae4889f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:08:92:52:2d:c7:a8:05:de:1c:dc:bb:b1:99:5a:30:b7:c1:
         74:5a:64:6a:c3:b1:bc:58:15:9a:dc:90:6d:21:f8:25:d2:19:
         d5:ed:45:fc:7e:ed:fb:3a:3f:20:2b:20:61:3f:06:31:c4:f5:
         fe:c5:76:75:20:ca:32:02:3d:e2:3b:64:16:36:ed:7b:75:2f:
         ab:6e:63:52:68:eb:c2:e0:9e:8c:d9:04:1e:30:0e:9c:c7:29:
         80:2e:cd:38:04:6b:53:6b:fc:29:d5:0c:ea:ee:c7:0a:b9:5c:
         21:4d:d3:89:48:7b:57:40:d2:a3:08:69:5f:74:a2:e5:03:7a:
         2b:f4:e7:4e:c1:27:96:44:b3:31:1c:39:10:80:ae:b2:20:27:
         ca:e1:f4:7b:6c:9a:4d:fe:8a:d4:d5:df:a3:87:11:22:c1:9f:
         41:0e:8d:94:bd:a4:71:ba:53:75:91:a1:6a:1b:17:44:73:3d:
         ce:03:ae:9f:f1:c4:4c:61:2d:a1:0b:43:8d:c8:c1:f3:a7:76:
         68:ac:9c:b1:15:92:1e:03:6d:cb:6c:fb:95:37:47:ca:d7:7f:
         24:61:61:f3:72:df:14:fe:2e:7d:67:5a:66:ee:0e:bc:00:10:
         ac:45:73:a6:66:66:e0:33:b4:14:d9:3f:0e:a8:f2:24:7b:b2:
         b8:fb:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:47:20 2025 by rpki-client