Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
File:                     d4835f23-c62a-3ced-954d-94b4dda54d19.roa (raw, json)
Hash identifier:          cMpBPx+onkx+j3HpEBMcMKjvHI3AVUmDKm7VosnefGA=
Subject key identifier:   E3:89:62:45:8B:D2:4A:D5:09:54:14:64:BF:4D:BE:10:28:E2:B4:A5
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F4328584B92DCF136D0E610F9EA807000
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     20473
IP address blocks:        23.140.60.0/24 maxlen: 24
                          2602:f8a2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f1:36:d0:e6:10:f9:ea:80:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=d543aab9-309a-4b7b-89ce-fb4e89614ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:70:0a:c7:b9:30:4f:78:17:82:ce:bb:ae:
                    0b:aa:86:a9:72:29:03:7a:41:3a:fb:bb:fc:4e:32:
                    65:44:29:10:3f:20:9f:35:ec:c5:fc:b8:6d:cd:3b:
                    3a:c3:e9:63:b8:9c:29:54:08:84:df:9a:2f:f7:77:
                    6f:32:19:a9:a5:c3:b1:e3:f7:b0:4b:f6:f1:9f:ed:
                    bf:fa:91:da:17:f4:cb:33:91:2a:24:d9:10:c3:f8:
                    a6:bf:58:99:f6:74:d1:a8:a5:dc:69:49:f3:7e:cf:
                    e6:02:0c:1f:33:b7:dc:b9:5f:bc:87:68:58:43:96:
                    f9:1b:20:65:49:f6:de:c7:8c:bd:cd:14:5d:cb:a6:
                    85:58:28:48:53:c9:03:5f:a1:58:10:78:dd:9a:ef:
                    bf:78:85:81:9e:e2:07:cd:e4:61:cf:83:61:57:67:
                    b0:9d:44:cc:14:25:78:25:6b:e4:d6:dd:71:7d:31:
                    4b:7b:da:e8:af:3e:f1:b0:0e:38:2c:43:eb:ae:9d:
                    b4:5c:a6:0f:16:9b:8f:79:f0:17:31:bb:1d:6d:6a:
                    df:1c:a6:02:95:0a:ff:9b:1f:c7:8d:99:e2:05:bc:
                    fe:07:40:73:41:37:00:44:e6:a5:1d:d1:cb:aa:d1:
                    18:98:e1:6c:62:51:e2:d8:fa:a0:ca:b5:06:3c:11:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:89:62:45:8B:D2:4A:D5:09:54:14:64:BF:4D:BE:10:28:E2:B4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.60.0/24
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:25:6a:4e:e6:92:71:11:d6:ec:44:31:24:1d:44:46:fd:5c:
         02:22:07:61:ac:24:7c:db:06:97:da:ae:1f:03:04:02:04:c7:
         b7:78:72:1f:ce:1e:77:cb:57:d4:38:db:2a:72:31:74:94:5d:
         7e:07:91:ea:1d:c0:3e:5e:05:51:46:0b:31:dd:ed:f0:00:1a:
         0a:df:41:e4:20:2f:70:b5:13:01:b9:31:83:9b:cf:f9:c0:c0:
         48:e0:52:4b:8e:12:98:b2:07:58:e2:ef:06:2a:63:80:7f:79:
         82:60:29:4d:1e:98:6f:b8:a5:b5:cb:49:d2:5c:93:6b:7d:95:
         b7:30:f4:6e:2c:4f:53:fe:04:ba:90:7c:0a:f1:9b:12:1c:4e:
         87:08:bb:c6:44:cb:07:34:c6:51:bb:a5:d1:98:33:62:4c:4e:
         38:7e:1f:d8:9e:11:66:19:bf:d9:8e:41:c2:d3:6d:e9:48:f7:
         d8:75:3c:b7:b2:e5:ba:87:37:94:90:a7:17:87:25:a4:bc:56:
         3f:c4:83:de:63:71:84:52:69:ae:47:6f:92:c8:12:9f:15:1b:
         4b:5b:99:a9:92:ee:67:bf:d5:dc:82:bc:84:ab:09:ef:f7:1b:
         11:62:ff:af:c4:70:dd:1b:b3:84:07:f2:ac:7a:81:d6:d7:4b:
         3d:1b:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:56:49 2025 by rpki-client