Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa
File:                     20fb2ff6-1ede-3b64-9759-cd15d077540c.roa (raw, json)
Hash identifier:          +m9KlBODFp14Bk9x14JswmCLlEoq/+cUP2UFHFCi7iU=
Subject key identifier:   D2:44:04:84:4A:0A:D1:1B:B2:F6:8D:4B:6A:FE:29:8B:EE:FD:84:D9
Certificate issuer:       /CN=163ef5a1-ae20-492a-9aa9-c6fd0a7947a1
Certificate serial:       010D0C9F4328584AE0311E178394B9A1984F5180
Authority key identifier: 18:42:56:EE:8F:C3:F0:F1:AE:3C:E5:D4:E0:85:6C:D7:D4:91:4B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     401233
IP address blocks:        23.183.200.0/24 maxlen: 24
                          2607:c240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1e:17:83:94:b9:a1:98:4f:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163ef5a1-ae20-492a-9aa9-c6fd0a7947a1
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=4766f1ed-a6c9-4178-b233-ebae82a3e5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:35:1a:81:26:fd:24:3b:93:c3:49:b5:63:
                    78:22:7a:b6:bf:05:79:66:c5:c4:43:d3:1c:8e:ea:
                    59:23:83:d8:eb:30:b5:83:a3:3a:a5:e3:ad:dc:a1:
                    66:63:d8:a4:e4:7a:30:96:95:c0:dd:03:44:0d:1e:
                    21:b6:18:99:2c:92:c9:ea:c0:a1:a8:fb:58:42:8b:
                    13:aa:76:21:d6:bf:00:03:bf:e0:8f:5c:b1:17:e0:
                    d2:0d:0c:7a:87:9b:40:c9:4c:98:a4:28:a7:4f:35:
                    d6:c6:9a:03:34:33:3f:f8:ee:68:bc:94:d8:8c:b3:
                    c4:40:bd:2b:37:63:08:72:ce:dd:eb:e6:bf:0d:ef:
                    e9:43:a2:8d:22:43:00:b9:2c:0b:75:1c:d0:98:1b:
                    aa:b1:8b:08:c3:a9:ff:29:78:d1:48:3e:28:e4:97:
                    74:24:1e:f8:5a:45:a5:6a:a4:c5:79:c3:4a:a6:c2:
                    9f:c2:46:a1:de:80:15:40:29:33:78:b9:7e:e3:03:
                    6b:27:d5:18:c2:f7:70:95:1e:ad:19:b3:97:d6:ce:
                    50:da:cb:53:f7:35:c8:90:93:cc:83:33:3a:4c:46:
                    6c:e6:ca:96:34:2b:d8:b8:1d:2b:d6:58:43:fb:ed:
                    62:a2:92:40:0e:db:a3:03:bc:2e:79:11:a7:eb:be:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:44:04:84:4A:0A:D1:1B:B2:F6:8D:4B:6A:FE:29:8B:EE:FD:84:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.crl

            X509v3 Authority Key Identifier:
                keyid:18:42:56:EE:8F:C3:F0:F1:AE:3C:E5:D4:E0:85:6C:D7:D4:91:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.200.0/24
                IPv6:
                  2607:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:9e:77:81:23:8f:4d:c9:00:a5:11:35:d7:ca:9d:9a:97:
         91:05:07:12:b5:fb:fc:a0:1d:72:0b:7b:9b:4b:1f:46:fb:c0:
         ee:cd:4f:1c:bb:fc:68:7c:59:75:a8:6e:89:43:a7:24:00:fe:
         3a:16:4e:3e:ed:76:2a:b4:16:c7:ec:3d:3d:57:06:71:5e:34:
         2a:d5:5e:95:24:ba:43:39:f2:4d:b9:f0:05:cb:3c:de:6d:33:
         c3:46:70:08:59:c1:d3:0c:bd:f4:3e:5d:8c:1e:00:07:96:60:
         27:90:b2:8a:b8:d6:71:b2:69:f7:a7:f7:91:3b:ab:3d:87:2c:
         8b:28:cc:25:28:33:ff:82:9b:f4:b8:cd:85:3f:36:fb:65:a0:
         ad:37:2a:ed:81:43:f5:9a:19:ec:c4:4d:7e:a9:56:25:5e:c7:
         9a:1f:57:23:d8:ee:fa:79:85:b6:14:19:72:1d:e9:c7:46:d0:
         24:a6:11:5f:2e:32:a8:40:df:7b:2e:d6:ec:d9:ee:3d:b8:f9:
         c6:42:4e:65:c7:5d:50:9b:a5:85:d0:15:53:c3:6b:63:70:fa:
         65:05:52:06:61:56:21:1e:0b:a9:c3:13:c0:aa:eb:25:75:de:
         ea:b1:9f:80:be:19:33:3f:09:84:98:a9:83:00:73:29:c0:55:
         05:bf:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:04:29 2025 by rpki-client