Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
File:                     7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa (raw, json)
Hash identifier:          uprA+WcKZ86pQtF6crqohHK7GrP4BSeRVCMlYzeH/no=
Subject key identifier:   48:9B:B8:92:E6:19:7A:A0:98:D3:2F:30:86:CC:95:3C:7C:82:0B:AC
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584B36BC4CCE91E4426E8CF5ED58
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     63150
IP address blocks:        23.172.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:4c:ce:91:e4:42:6e:8c:f5:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=54a63164-9cbb-4826-9312-be71dc529b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:7a:8d:a8:04:c7:22:3a:8c:c9:a8:a7:e9:
                    87:8d:b3:94:ab:37:78:6b:3c:70:ff:c5:e5:dc:b6:
                    7b:9f:94:2c:94:7a:70:2d:30:20:b6:9e:28:5d:ed:
                    ee:0d:8d:21:c0:30:07:53:ed:3b:29:30:d4:5a:be:
                    7e:31:ab:af:f7:a1:3a:0d:f4:8a:13:19:92:0e:b0:
                    2e:70:60:71:98:0f:6d:81:30:98:06:a9:94:5d:cb:
                    0f:2e:5b:9d:4d:70:1b:1c:ce:2f:66:ea:6c:fc:7f:
                    d1:42:8e:ea:f0:50:c9:34:21:de:84:ac:09:9d:85:
                    a7:05:61:80:38:dd:a5:6e:8f:29:18:7c:39:77:2b:
                    17:37:eb:e1:25:b7:c1:6c:b3:37:d4:22:a5:86:57:
                    e8:21:a3:dd:a2:71:36:14:58:c5:8c:fa:8c:5e:f6:
                    1c:53:6e:7e:34:eb:26:71:e9:1a:36:c3:b5:19:e4:
                    09:16:86:25:72:72:1a:68:9b:f8:19:a7:ce:6f:d1:
                    fb:ec:6a:2e:ae:be:13:ef:ee:4c:4f:12:0b:98:7a:
                    fa:4e:00:bc:d8:64:75:79:5e:f9:b2:0d:c3:d7:c3:
                    20:93:da:76:a9:8f:83:35:2b:ff:ce:10:76:e9:b6:
                    a3:3d:cb:29:40:f8:75:a5:56:05:21:de:37:52:41:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:B8:92:E6:19:7A:A0:98:D3:2F:30:86:CC:95:3C:7C:82:0B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:53:d6:b2:f0:59:10:6f:9f:c4:8d:af:ad:e0:bc:84:26:2d:
         cc:04:d3:71:83:4f:da:3f:4b:9a:9d:4e:4b:21:0c:d4:01:38:
         c2:d2:25:1d:84:7a:bd:2f:b6:d1:2c:1a:8e:bf:0b:f6:15:82:
         80:4b:d2:0c:93:57:38:ea:9f:f1:c5:c7:00:7c:87:45:b8:81:
         68:38:e3:57:01:16:65:54:be:0b:d7:4b:ff:17:3b:9f:24:c5:
         3e:ad:7c:e5:35:31:d1:22:61:9f:31:e8:b7:87:57:e6:25:da:
         dc:85:71:2d:6f:dc:44:39:c7:ec:ed:29:8e:1b:56:64:3f:5f:
         e1:89:81:ac:8c:84:4d:95:b9:d7:4a:ce:b0:ef:b1:56:bd:92:
         74:52:55:23:d5:b6:80:f9:a3:df:ee:c9:4a:15:02:00:46:66:
         7e:88:15:3e:66:e0:8f:f8:d0:fd:06:e9:cb:a9:ce:09:3f:b4:
         2e:cb:a5:12:2e:9a:ba:30:4e:9c:28:aa:88:26:13:c6:2e:00:
         4a:57:4c:4e:ef:e1:a5:88:f9:5a:a6:cd:cf:24:1d:93:18:99:
         fd:de:22:1a:fb:11:20:da:c3:ab:7d:7e:a4:8b:e7:4d:7a:ba:
         81:04:ef:ac:df:e2:9c:e9:cc:fc:8d:74:14:bd:ee:a2:25:1f:
         8f:88:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:57 2025 by rpki-client