Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/79a68e4a-63c9-343a-a4c3-0a5e94130274.roa
File:                     79a68e4a-63c9-343a-a4c3-0a5e94130274.roa (raw, json)
Hash identifier:          LBjyYA//8nyTaBD7uDEdik8N1NAs0INu2XWbpXgMvrs=
Subject key identifier:   D1:67:EA:73:6D:93:AA:4C:80:A0:F9:68:8B:5B:66:BC:EF:DF:D6:D2
Certificate issuer:       /CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28
Certificate serial:       010D0C9F4328584B01B14CB07E3A2213ABE3A280
Authority key identifier: 92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/79a68e4a-63c9-343a-a4c3-0a5e94130274.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     400342
IP address blocks:        23.178.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:4c:b0:7e:3a:22:13:ab:e3:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=5036dc93-251f-48e2-af3c-09912ace486f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:6e:4b:8c:e8:66:6a:60:77:83:42:06:c9:
                    bf:b1:55:3f:7f:b7:e1:f8:7d:7e:cc:06:1f:17:09:
                    91:55:19:4b:48:dc:24:cb:3f:92:7c:60:60:6a:24:
                    8e:48:f2:6b:09:99:c6:31:6d:56:2a:09:d2:44:5e:
                    2d:88:01:40:1f:47:5b:66:f5:5f:e8:20:c7:8e:9c:
                    85:b6:9e:7d:c9:0a:7c:85:35:db:40:3e:e1:27:09:
                    6c:ea:54:c9:a9:c5:da:d4:74:99:01:e3:b8:86:cb:
                    d8:ff:d3:0e:4b:f1:1b:55:df:37:27:84:8a:b0:a6:
                    d0:79:52:84:7b:98:ba:ec:92:03:47:e0:89:ac:2c:
                    fc:a3:7f:73:0a:35:fe:33:84:9b:48:98:b6:48:71:
                    88:ee:f5:9b:a6:f6:33:7d:96:78:13:d2:9a:28:c8:
                    2f:98:f1:65:5c:e5:58:23:09:f4:36:e3:f4:00:38:
                    ac:f9:2a:26:95:21:43:ef:4f:e5:01:9d:1a:c0:01:
                    68:bc:5a:26:aa:c3:0c:4b:19:f3:bc:f8:3b:78:f5:
                    6c:b0:0b:c4:07:e7:9d:33:24:48:90:4e:94:f2:72:
                    34:90:fd:53:f2:80:90:1d:2d:91:1d:6b:2e:df:7c:
                    ea:58:b1:22:7d:36:b1:29:5b:e5:eb:84:4c:50:cc:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:67:EA:73:6D:93:AA:4C:80:A0:F9:68:8B:5B:66:BC:EF:DF:D6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/79a68e4a-63c9-343a-a4c3-0a5e94130274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl

            X509v3 Authority Key Identifier:
                keyid:92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:2b:66:3f:ac:f2:59:0f:ea:7f:08:ba:f0:8b:d8:12:18:
         a6:63:55:e2:5e:de:21:a8:1b:7d:c5:c0:71:ef:d1:de:4a:08:
         a7:90:16:e7:02:9c:55:77:1b:b1:d1:56:4d:5b:a3:98:50:05:
         3d:bc:ad:3e:ca:32:a4:67:87:60:44:bc:56:47:67:2b:1a:93:
         f6:0a:59:e2:1e:be:25:f7:fc:d3:f5:26:3a:75:de:82:0b:e0:
         01:7a:51:2a:f5:de:49:02:78:ac:59:2f:61:9b:ac:d0:1d:22:
         d3:aa:ab:c6:4c:15:7e:5f:93:35:cf:5a:b7:2f:12:da:7f:59:
         28:60:34:81:00:60:12:ef:fc:d9:78:a8:bc:bf:4c:e5:ed:7e:
         8b:7d:f2:6a:5c:74:44:2d:ed:b8:2b:fa:c2:af:90:99:c1:b4:
         c9:f7:2d:6f:ee:d3:d6:f0:11:d3:54:27:3e:ed:f4:76:f7:ea:
         64:62:12:ea:20:cb:21:7e:d3:ba:f4:d1:1d:5b:f4:74:8c:38:
         24:33:0a:9f:88:3d:4d:17:dc:04:93:b0:8d:9a:c2:6d:87:9b:
         a7:0e:bb:49:24:0e:45:3c:e7:cc:12:bb:da:4b:2b:90:42:b1:
         e4:5d:04:49:50:91:24:b9:b8:75:13:66:1a:84:91:14:4f:fe:
         c4:cf:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:31 2025 by rpki-client