Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/6b19fa2c-1cde-3335-a7a2-f7ba5e0cc4bc.roa
File:                     6b19fa2c-1cde-3335-a7a2-f7ba5e0cc4bc.roa (raw, json)
Hash identifier:          SpDsQScPp+/LQf1enScGOFrzl1x/HbA/7lMtnvn+mSc=
Subject key identifier:   C1:3D:AE:29:FD:47:10:14:C3:5B:2B:40:82:45:0F:73:C2:35:D7:4A
Certificate issuer:       /CN=47c48cee-f4dd-490d-8a19-50715f604b9d
Certificate serial:       010D0C9F4328584B2FC1822C9D443062F5145300
Authority key identifier: E0:4D:EE:E4:16:1B:B3:69:62:A0:62:5C:26:90:19:00:22:8F:2F:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/6b19fa2c-1cde-3335-a7a2-f7ba5e0cc4bc.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     8095
IP address blocks:        23.180.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/47c48cee-f4dd-490d-8a19-50715f604b9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/47c48cee-f4dd-490d-8a19-50715f604b9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:82:2c:9d:44:30:62:f5:14:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c48cee-f4dd-490d-8a19-50715f604b9d
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=a0492405-9b5f-4bc1-b526-ddda7c67fca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:57:27:76:76:b8:0e:06:10:f5:1c:c4:f0:
                    bb:3f:64:08:ed:76:fa:80:d5:82:0b:36:7b:91:a4:
                    a4:21:3c:44:59:de:86:37:ec:fd:31:00:80:5e:4d:
                    9d:35:c5:66:75:92:29:d8:64:bc:0a:19:1f:0b:d0:
                    cc:d1:66:a8:e3:34:71:61:c8:4b:e2:59:45:ac:e6:
                    6c:bb:12:80:4e:d8:42:d8:f2:6d:a1:ba:db:1d:5e:
                    4b:00:4f:da:65:0e:a1:93:7c:d6:66:77:91:59:40:
                    df:85:18:ff:78:41:41:71:31:37:1d:d3:93:c3:64:
                    1d:f1:cc:09:27:f3:0e:07:64:84:c2:a8:b7:f3:9e:
                    2f:7f:78:a4:f6:91:b1:37:08:64:d5:9b:19:78:37:
                    03:ea:83:dd:4a:22:3c:84:a1:79:11:fb:29:3d:8c:
                    f4:5d:28:c8:48:2c:f4:fc:68:19:65:f5:f7:94:5b:
                    77:b8:28:70:91:79:56:b6:c3:93:52:54:0e:a7:6a:
                    7b:92:87:f8:9e:21:7f:3a:ee:ff:ba:54:a3:c6:37:
                    93:22:3f:28:33:48:fb:a2:52:e6:41:77:e0:81:21:
                    67:11:3e:ca:69:01:66:2e:40:eb:9a:95:5a:65:85:
                    c7:e9:78:e1:a7:27:ba:0a:82:8e:da:52:cf:7e:cb:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3D:AE:29:FD:47:10:14:C3:5B:2B:40:82:45:0F:73:C2:35:D7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/6b19fa2c-1cde-3335-a7a2-f7ba5e0cc4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/47c48cee-f4dd-490d-8a19-50715f604b9d.crl

            X509v3 Authority Key Identifier:
                keyid:E0:4D:EE:E4:16:1B:B3:69:62:A0:62:5C:26:90:19:00:22:8F:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c9:fa:68:83:b1:85:7f:33:20:8f:ca:95:7f:ef:16:63:3f:
         37:3c:78:ed:8b:41:92:13:ab:6a:13:ce:fc:7c:db:e7:8b:6f:
         bb:b4:d8:e5:a3:c5:91:15:07:41:56:2a:43:a9:a8:68:79:91:
         95:ad:fb:5d:48:d9:30:92:b5:df:69:5f:3d:16:3f:0e:1a:68:
         36:e9:c0:a0:77:ef:de:c8:b8:f9:17:58:37:47:16:de:78:db:
         c9:b1:59:bc:22:26:a1:8d:93:23:24:c9:70:68:1e:b0:89:7c:
         8f:58:78:aa:68:41:37:f3:7f:bf:6c:08:bc:91:92:e5:3d:e5:
         26:a0:7b:0c:18:d5:ad:47:79:f9:45:b2:5c:35:8c:07:a7:76:
         d2:2e:31:6b:d7:62:6d:f9:e1:33:dd:2d:1b:eb:ce:16:a3:aa:
         62:c2:08:59:61:a4:2a:72:9d:92:45:f5:a5:eb:c2:93:52:65:
         16:12:6d:6e:30:31:a7:aa:f9:22:6d:0c:71:cb:b7:d4:69:cb:
         4b:bb:62:3f:c7:be:3a:47:26:c4:41:48:32:cd:9f:d4:67:cb:
         3f:18:0a:09:4b:52:aa:1f:1b:1c:96:b9:8f:6e:52:f5:14:d4:
         0c:1d:98:5e:34:52:fb:16:25:6d:c0:e3:5e:e3:65:ba:f6:71:
         8b:c6:70:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:35:20 2025 by rpki-client