Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
File:                     8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa (raw, json)
Hash identifier:          S5w6rRx9sqtVgKUW74JzN4QjAWbdaUIZySkaxY0/K3I=
Subject key identifier:   AF:A7:0E:DD:2F:61:FB:FE:98:40:88:1A:AD:0D:DC:50:6E:67:C7:01
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584B8EACE7BA204D582E24EF7300
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     18780
IP address blocks:        23.182.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e7:ba:20:4d:58:2e:24:ef:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=8aafa257-eef7-4982-b142-da4e66a1027c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:66:51:d1:0c:b0:b2:b2:97:13:b6:89:db:
                    97:98:d2:df:49:40:6a:c6:40:89:ff:9b:55:b0:23:
                    35:80:3a:f1:8c:c5:bf:98:76:2d:89:3c:1d:bd:59:
                    e4:8d:2d:b9:e4:a7:f4:5b:78:f7:31:22:ca:d0:00:
                    c7:ed:32:8a:5a:aa:b3:3e:02:cf:0b:8e:c9:10:cd:
                    61:4d:b1:d6:a6:5f:db:fc:d5:32:a4:1f:d0:62:80:
                    56:06:3d:86:9a:d3:04:2f:01:8e:7b:5e:f1:1c:2b:
                    cf:cd:9f:f8:84:3c:0c:a8:b4:f8:3d:80:0d:42:97:
                    a4:8c:08:ec:47:2c:75:e5:47:f1:6c:6f:c6:49:e4:
                    09:7b:02:60:05:c9:60:c2:b2:ef:3e:55:54:6e:2c:
                    1f:2e:66:c4:78:f0:f8:ea:c6:37:db:f8:64:12:7b:
                    d4:3a:f4:bb:b7:9d:4f:be:8a:c0:39:78:5f:46:b1:
                    69:f9:12:41:a3:ec:f4:3b:36:66:ee:09:40:ed:7e:
                    62:2d:ba:e5:aa:27:a3:ab:fd:b0:f2:ce:38:ae:4b:
                    40:3d:1f:49:10:2e:26:17:8f:a5:d2:53:85:d3:03:
                    bd:19:2c:e7:22:13:6d:ca:c3:a3:56:3c:24:c5:32:
                    b0:15:8a:b8:f6:20:bf:14:5f:c0:ee:c0:68:c1:59:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A7:0E:DD:2F:61:FB:FE:98:40:88:1A:AD:0D:DC:50:6E:67:C7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:17:c5:00:6e:8c:57:cd:bf:c5:3b:85:de:9b:3b:46:f0:e9:
         01:49:2f:cf:16:92:6a:2a:fb:42:0d:6d:b7:4b:eb:d5:a9:06:
         25:0b:eb:3c:6b:f1:73:ee:ee:c0:8a:47:f9:ba:1d:75:84:34:
         1c:51:30:34:28:fd:ab:76:cf:37:b1:72:e6:49:26:dc:f7:c2:
         4c:b7:6e:93:a9:c7:e9:26:f5:1a:7e:58:58:e4:17:87:68:ba:
         fd:cb:92:c5:05:70:5c:4f:84:01:cf:e5:6e:6b:5c:41:cf:8a:
         26:c4:fc:dc:4e:62:74:68:10:99:8f:92:b2:6e:d5:41:30:d3:
         f3:c7:76:0b:20:d5:ab:e9:ef:db:67:f3:50:ea:3a:6c:d0:b8:
         80:b8:a3:ee:d2:d6:be:54:34:3f:4d:a7:4b:49:14:03:9c:29:
         62:7a:2a:ae:9a:d5:85:a5:0d:89:3f:94:6b:11:35:e6:f2:27:
         39:53:6e:9f:58:72:f9:c3:5f:be:d8:3f:de:f7:61:e6:ed:23:
         26:d5:fd:04:e3:e8:54:6c:1d:df:18:f4:56:61:f4:01:89:ea:
         a5:7c:62:8b:64:b7:00:84:e3:7a:a8:f1:78:dd:29:4e:dd:94:
         06:e8:3c:05:87:d5:d3:90:a7:3a:c1:59:c6:a0:de:e7:19:57:
         a0:06:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:44 2025 by rpki-client