Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/993c5c8d-b0fc-3f86-9d8b-2fe1b37feba2.roa
File:                     993c5c8d-b0fc-3f86-9d8b-2fe1b37feba2.roa (raw, json)
Hash identifier:          B+3hyWDdp87EJ5lSkiGTPgKhnJqCr+syPSkvjYpGmM0=
Subject key identifier:   14:0B:8B:E1:CA:6C:64:45:67:7D:8F:F8:3A:C6:04:A6:5B:8F:82:25
Certificate issuer:       /CN=d57f8311-a2bb-4ecf-923a-6d3c8526cbc3
Certificate serial:       010D0C9F4328584B355709F11257B15035AF3B80
Authority key identifier: 09:64:7B:1E:77:58:A2:36:98:D5:DA:8D:8B:29:11:D4:F8:6A:37:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/993c5c8d-b0fc-3f86-9d8b-2fe1b37feba2.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     401371
IP address blocks:        23.140.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:09:f1:12:57:b1:50:35:af:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57f8311-a2bb-4ecf-923a-6d3c8526cbc3
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=9d68dffa-d030-4aac-b29a-f34c40cc16c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:68:7f:53:32:c3:c4:38:1a:f2:ee:44:12:
                    07:82:0b:63:f8:d1:e8:07:15:ab:bd:57:90:b1:86:
                    94:3f:9e:63:8f:b5:74:99:4f:7e:3f:6c:00:aa:f1:
                    25:4b:e3:eb:42:d1:24:01:d9:26:b6:63:e1:a3:5f:
                    93:5f:17:ff:92:47:5d:ff:06:14:6d:2c:f2:2f:3b:
                    11:0f:70:43:5b:ba:68:77:5c:bb:df:ed:19:84:de:
                    87:b4:12:d3:97:c1:df:43:60:f2:0f:44:8b:7e:33:
                    e8:5b:7d:80:27:30:9d:51:91:48:c9:1a:b1:0c:8a:
                    34:35:62:ed:85:d1:c7:85:14:8a:1b:e7:82:2e:26:
                    04:02:67:cc:6d:d8:c1:7a:17:17:59:73:07:8c:ce:
                    2d:98:ce:f4:ef:7b:47:b5:33:f2:65:e2:dc:34:2c:
                    d2:5f:40:94:dd:52:b0:f4:2b:e1:50:56:3b:5d:4f:
                    0e:f7:e2:fc:c6:35:e6:4c:13:8d:87:4f:b9:2a:56:
                    97:13:9f:6f:8d:ca:19:ec:24:4a:d7:2c:83:4a:19:
                    d3:13:74:e1:7d:58:93:f2:95:ed:89:03:60:b2:ef:
                    c9:4d:37:7b:54:79:42:67:da:06:08:00:1c:79:13:
                    91:35:a3:ef:f2:f0:1d:7d:70:1c:46:78:71:92:de:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:8B:E1:CA:6C:64:45:67:7D:8F:F8:3A:C6:04:A6:5B:8F:82:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/993c5c8d-b0fc-3f86-9d8b-2fe1b37feba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.crl

            X509v3 Authority Key Identifier:
                keyid:09:64:7B:1E:77:58:A2:36:98:D5:DA:8D:8B:29:11:D4:F8:6A:37:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:62:f5:22:63:c5:67:4f:d6:c2:4e:aa:24:f5:9e:50:e6:
         3d:e5:98:2f:73:b7:fd:1e:33:00:02:d4:ac:64:cb:69:7d:ef:
         cb:4e:05:d9:fb:84:72:09:b2:3e:45:60:d5:9c:be:5a:b4:c4:
         2a:b4:fd:46:08:02:12:6c:bc:cd:82:3b:cd:b2:95:73:a9:9e:
         60:85:a9:b1:f6:73:fe:64:94:74:bf:a4:f8:ae:96:71:ea:a7:
         57:63:cb:77:92:66:64:1d:b1:0a:8c:82:cc:c2:38:6a:a0:2e:
         be:aa:9c:f6:12:b9:6b:10:90:28:7d:e4:b9:f1:22:01:f4:e4:
         20:9a:e6:21:e6:a8:31:f1:4a:c3:6b:f8:95:83:a0:a2:b2:09:
         5d:0e:bc:52:60:c5:d8:7d:4d:d4:5a:e5:15:9b:ae:46:b2:ae:
         e3:f2:79:69:8b:77:a9:cf:d3:2f:78:08:2d:0e:bb:37:90:5c:
         0b:d7:5f:c9:bc:2f:b0:d9:ee:59:77:65:fb:00:b3:e1:81:9a:
         b8:ec:ff:10:ba:3d:ab:d6:40:a4:0e:b6:36:1e:48:83:63:f0:
         20:69:21:e6:62:57:d6:4a:bf:47:b5:2f:b6:f4:c1:fb:c5:21:
         e4:b3:c8:5d:89:c7:85:dd:e8:51:b8:60:a5:e0:cd:87:5a:34:
         05:10:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:49 2025 by rpki-client