Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/4ea53c2f-adce-3e4c-adc3-e04ae916eba4.roa
File:                     4ea53c2f-adce-3e4c-adc3-e04ae916eba4.roa (raw, json)
Hash identifier:          3JsWi0Dh6ydkzgHu3jPGcqiv5BJVQcFp2OuXMBc4o1g=
Subject key identifier:   8B:FE:EE:C1:0F:AB:D1:C7:E6:7B:C3:EE:FB:8C:8D:61:20:6E:83:FE
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584B7B21F63DF93EDA76862B8A00
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/4ea53c2f-adce-3e4c-adc3-e04ae916eba4.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     40448
IP address blocks:        23.138.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f6:3d:f9:3e:da:76:86:2b:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=983a501a-6a30-4eeb-a8c0-0c5ed6ea286d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:68:da:b7:f0:36:2e:d6:6c:15:f7:9d:d9:
                    a5:21:19:16:2e:25:fd:82:14:78:4d:a2:ce:39:ae:
                    8f:c5:c5:bf:39:26:68:8b:40:b4:40:09:84:e2:2a:
                    09:3f:4c:6f:dd:bf:7b:cd:06:64:e2:f8:5d:43:45:
                    d6:f5:4a:5c:74:d4:11:cb:2c:e5:7b:c5:f5:16:e4:
                    0b:a4:56:88:c6:93:ab:2a:b5:f9:53:e7:69:7d:da:
                    49:32:7f:7c:1e:ff:58:69:e1:2a:29:7c:51:1e:c2:
                    02:ad:6b:f5:90:6a:98:bf:db:16:d7:d6:fc:3c:b2:
                    ff:14:72:d6:84:c6:57:2d:13:80:87:b8:62:c9:3e:
                    1f:c7:71:bf:4e:aa:83:9d:58:91:94:e2:86:f4:d9:
                    c1:a8:e9:21:2f:81:d6:27:12:07:ba:29:6f:04:c0:
                    c2:05:d9:d9:c0:01:6c:01:b3:27:d7:13:b7:cc:a3:
                    68:9a:1d:be:b3:c9:93:07:7e:35:d4:15:1e:a2:6c:
                    5f:7f:45:07:31:89:05:bb:67:dd:6e:45:a4:aa:cd:
                    5b:ea:d4:46:25:ec:e8:19:ac:d9:30:2d:9b:70:50:
                    e5:fe:65:c0:46:1e:af:d6:6f:0c:3a:21:d9:2f:43:
                    c8:97:4f:aa:0a:11:b8:8f:8b:90:a0:73:72:6b:25:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:EE:C1:0F:AB:D1:C7:E6:7B:C3:EE:FB:8C:8D:61:20:6E:83:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/4ea53c2f-adce-3e4c-adc3-e04ae916eba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:63:7e:2a:e3:45:5c:c4:3d:97:bb:65:bf:88:48:56:97:52:
         aa:01:7c:e5:d1:1c:07:d9:ec:56:ac:37:9a:e1:6d:41:e5:92:
         52:5b:e8:44:6c:8e:64:f3:a8:5b:ac:09:93:40:19:f2:d0:25:
         14:d3:71:b6:4f:79:1d:42:03:1f:07:08:21:f0:78:f5:61:ac:
         fb:36:13:e7:7d:77:6c:df:d7:cf:71:4c:2f:5b:a2:17:e7:a6:
         35:76:62:b4:8b:08:13:55:ce:27:78:34:87:7c:cd:e6:10:6b:
         fa:93:b9:f9:c6:a0:67:02:08:5f:d3:fa:1d:81:21:b1:02:b1:
         59:67:9f:50:c2:25:b2:a7:9f:31:80:30:e4:9f:69:43:a6:8f:
         42:9f:02:f0:2c:18:e2:f4:bb:37:04:d1:74:dd:e7:56:bb:83:
         34:cb:b2:50:56:da:b0:3b:89:c4:b5:2f:6b:90:9f:b1:ca:d8:
         fa:28:f0:52:e0:02:eb:c1:07:0e:c1:d6:af:23:da:8c:95:36:
         a9:0b:b5:33:ea:3d:2a:66:c6:ca:a2:9f:c4:36:3c:69:84:d8:
         64:9d:11:5c:24:dc:5d:22:4c:e8:c4:99:e9:38:fa:80:63:e7:
         66:2d:8a:b0:20:fd:c2:bc:f9:f9:1a:e1:45:c6:e1:5e:25:4c:
         ba:08:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:48 2025 by rpki-client