Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/80d5c06c-4c16-364f-bbdd-3b4425164f0f.roa
File:                     80d5c06c-4c16-364f-bbdd-3b4425164f0f.roa (raw, json)
Hash identifier:          vYiDMZi1M57WrAasRetfgVGKLjr1/qMQnyUpFBIBSag=
Subject key identifier:   9C:E4:0E:74:F2:BE:72:31:D0:44:FA:4A:C8:C5:68:B8:AE:C7:05:14
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A3A1578037182799E37EE4E80
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/80d5c06c-4c16-364f-bbdd-3b4425164f0f.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     21928
IP address blocks:        23.18.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:78:03:71:82:79:9e:37:ee:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=79134703-2ed4-4a85-bd35-2f0c95ee2caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:97:d5:13:60:16:bf:a7:47:d2:4f:c4:48:
                    fd:8b:79:78:62:c7:da:58:06:88:c1:dc:82:24:6f:
                    a7:e3:f3:8b:48:87:5f:6e:0f:2f:f1:78:81:e5:33:
                    5b:a7:7e:4a:0c:62:de:90:9e:6c:a1:f4:00:d7:00:
                    e8:2c:78:5a:39:76:df:20:ea:8b:76:af:fe:f9:29:
                    30:f9:a7:67:13:04:cd:f9:25:eb:fa:3e:ec:2b:26:
                    65:11:09:68:50:dc:51:da:8f:bf:42:16:c4:fe:9c:
                    8e:4e:91:b4:fc:40:a6:a5:b4:6d:d2:de:8e:e5:43:
                    e6:3e:61:bb:53:c8:b0:fe:e0:a9:ea:14:83:1e:4f:
                    73:ae:fa:82:8d:6b:43:0c:c4:14:f8:2d:ba:09:01:
                    40:81:16:75:49:f1:13:46:dc:df:aa:ad:f1:07:de:
                    80:87:81:d8:91:f4:7e:cc:aa:e4:b6:45:2d:5d:d3:
                    2c:38:66:9a:2e:fb:23:8a:ed:6b:20:ec:16:a3:8c:
                    16:89:5c:f5:8b:ed:71:fd:fd:f3:73:9f:e5:04:3e:
                    61:ea:31:a1:92:fa:88:5b:55:61:06:43:88:59:e1:
                    8e:25:d0:8f:76:bb:d2:80:4c:00:04:ad:86:0b:bc:
                    e0:23:9f:f0:67:ae:30:ea:3b:7f:e4:c8:8a:f5:c9:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:0E:74:F2:BE:72:31:D0:44:FA:4A:C8:C5:68:B8:AE:C7:05:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/80d5c06c-4c16-364f-bbdd-3b4425164f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:8b:45:85:07:a2:be:a1:b7:b5:6c:7b:ef:06:51:b9:5f:d1:
         00:2a:cd:be:5b:7f:5d:e5:dc:c3:af:b6:6b:11:95:4f:08:f7:
         82:9d:8d:ae:e9:be:5f:78:7a:06:99:a1:48:ad:02:6e:de:31:
         24:ed:7c:18:3b:fc:a7:61:34:60:3c:cb:30:26:58:a4:b1:3f:
         86:9f:87:25:46:9e:f7:62:bd:4f:80:60:b3:0d:cc:5c:79:f3:
         90:24:96:7e:69:cd:58:fc:fb:da:97:80:dd:7b:1d:7a:34:f9:
         25:6e:e3:30:48:9f:34:e3:73:4d:75:c7:5f:d0:3b:1c:88:9b:
         40:c2:01:31:8c:cc:e5:7b:cd:aa:4f:9e:b8:05:ee:fb:ea:59:
         ad:b5:9f:9a:01:7d:f5:b0:4e:96:41:78:60:10:1a:b0:fd:31:
         b1:4e:ea:d2:60:04:d0:a6:2f:84:33:cf:2e:f0:47:ad:99:11:
         28:dd:f0:21:eb:d2:35:01:c7:36:97:e7:dd:e8:26:02:f8:25:
         24:f2:89:c6:83:7b:af:99:b9:e1:4f:0c:16:0a:94:d3:bb:cd:
         a6:43:34:b1:dd:93:2b:fc:e1:64:8c:73:b9:9c:a8:b3:20:12:
         c2:b5:1a:90:4f:74:8b:49:d1:da:84:b6:b6:c4:f6:0e:ad:3a:
         4d:68:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:31:22 2025 by rpki-client