Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa
File:                     5296663f-6f5c-3a1e-a5be-a48a076b287d.roa (raw, json)
Hash identifier:          aFDQ3GPGIMRkGProMTP5yEt7HTHda6vidDOR0WabssY=
Subject key identifier:   74:FA:C6:91:BD:88:33:D5:FD:C6:C0:5D:7A:8A:46:66:83:49:F4:E1
Certificate issuer:       /CN=57f6f431-f55e-4ae4-9576-b5b27773bfed
Certificate serial:       010D0C9F4328584A4F05B1B6757F672E956B4080
Authority key identifier: 4B:9A:DB:F2:1B:A6:83:19:9D:A7:D8:7C:CE:19:6B:28:58:1D:A7:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     8095
IP address blocks:        23.180.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:b1:b6:75:7f:67:2e:95:6b:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f6f431-f55e-4ae4-9576-b5b27773bfed
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=ac33466a-afed-4884-b9bc-bc2087f1863c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:7a:5f:c5:3b:ff:22:db:d9:bc:57:ef:1d:
                    74:2c:78:9e:40:f6:93:93:17:c1:88:d9:ec:fb:f0:
                    e3:d5:1d:aa:23:e4:69:8f:01:a3:e5:8b:9a:84:c8:
                    42:d7:37:82:b0:63:99:53:40:a8:85:cd:76:ef:32:
                    ab:9b:e0:4a:29:4a:4b:51:15:68:36:3a:43:50:7b:
                    6b:fe:8f:0d:b9:0a:44:3e:b9:d4:e0:ec:44:4f:06:
                    db:32:52:f2:1f:7b:08:66:9a:50:6b:60:6f:62:31:
                    5f:c1:63:77:0a:f9:0c:09:b5:fe:ec:7b:cd:8a:47:
                    de:00:66:eb:d6:ef:f2:83:74:e8:40:b2:26:77:4e:
                    86:60:77:e0:10:e7:b1:d4:98:d2:53:cd:2c:26:dc:
                    83:83:d5:59:e9:8c:74:ff:6d:05:e2:89:f5:d2:75:
                    bb:68:39:75:f6:0a:a4:94:8b:6d:fc:70:b4:e3:c8:
                    ff:50:83:17:5a:13:8e:26:73:4d:aa:5b:76:32:11:
                    9b:55:a6:52:bc:09:11:b6:71:ab:d8:33:99:05:49:
                    e5:7c:1a:00:20:e7:41:31:39:72:ae:f3:d4:ea:45:
                    37:f2:e4:6c:4e:1b:13:5e:8f:17:ee:84:4c:f8:59:
                    97:ff:23:23:5a:24:84:ff:d7:d0:39:cc:c1:e1:fc:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FA:C6:91:BD:88:33:D5:FD:C6:C0:5D:7A:8A:46:66:83:49:F4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.crl

            X509v3 Authority Key Identifier:
                keyid:4B:9A:DB:F2:1B:A6:83:19:9D:A7:D8:7C:CE:19:6B:28:58:1D:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:35:42:8b:25:4f:3d:ab:68:31:15:0a:63:8f:42:4f:b1:
         9a:55:a6:56:6e:a0:c7:ab:ee:1f:8d:43:08:fc:62:ca:ab:76:
         e5:46:e3:98:fd:b8:22:06:c6:57:6e:05:15:80:e6:4b:8d:ab:
         ad:0c:03:3f:88:fb:64:57:16:d6:2d:42:95:ee:dd:69:14:ef:
         c5:eb:3d:34:83:e9:31:ca:00:5f:61:6c:e8:d5:e3:7e:12:47:
         bc:9f:53:70:88:82:90:25:3b:6b:9f:79:61:08:45:09:41:ac:
         a0:6c:b0:8c:bb:59:95:7a:05:25:f9:da:c9:db:1a:4b:c3:cd:
         65:80:4e:4a:d6:ff:14:2d:57:fd:36:bc:ea:23:55:2c:ea:cc:
         ae:3c:96:8f:73:ec:5a:0d:d8:43:78:f4:08:fc:a9:3a:0e:51:
         f7:b5:89:45:86:7b:e8:75:4b:79:b5:13:7b:b4:71:12:b1:6d:
         1a:48:e1:26:12:0e:e8:95:c1:6b:f9:89:39:72:19:4d:e2:15:
         f0:8f:41:c0:d0:6c:2b:24:84:b6:b6:05:5c:7f:fc:17:76:d0:
         dd:00:41:c4:34:d5:08:34:2c:e3:16:c3:4a:fa:f4:66:77:90:
         06:9b:e4:a2:20:f3:5e:03:4f:f9:bc:2c:8d:af:08:7e:b0:af:
         f6:19:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:18:30 2025 by rpki-client