Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/796e02ff-36db-3738-9d1c-aed32e5059b8.roa
File:                     796e02ff-36db-3738-9d1c-aed32e5059b8.roa (raw, json)
Hash identifier:          gzx1RScTGQXGv9gT9gAKODNPQAAIU45FKtuQyz3UP1c=
Subject key identifier:   F8:70:91:6A:F6:08:14:BF:3E:9D:8E:AD:95:8F:4F:32:7F:A5:D2:8A
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584A894E1836EBC59E5C782A8A40
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/796e02ff-36db-3738-9d1c-aed32e5059b8.roa
Signing time:             Wed 16 Jul 2025 10:03:51 +0000
ROA not before:           Wed 16 Jul 2025 10:03:51 +0000
ROA not after:            Tue 14 Oct 2025 10:03:51 +0000
asID:                     7018
IP address blocks:        23.184.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:4e:18:36:eb:c5:9e:5c:78:2a:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Jul 16 10:03:51 2025 GMT
            Not After : Oct 14 10:03:51 2025 GMT
        Subject: CN=3bb84ed9-5492-46c4-8c5b-b98d97212c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:0d:a7:a1:9b:0c:b9:0b:5f:94:09:95:d2:
                    4e:40:09:1d:59:c2:df:11:72:7b:57:92:8e:e7:62:
                    d3:8c:10:be:6c:cc:d4:e5:7b:ca:29:15:1c:f4:4c:
                    b0:70:17:e0:dd:29:0c:61:eb:74:cd:0e:17:06:13:
                    55:1a:be:3e:36:23:0a:cb:3c:d1:28:aa:52:e7:09:
                    b5:ef:32:8c:f9:7d:a2:08:29:22:c7:57:fd:11:28:
                    f9:53:18:04:bb:fb:60:79:6f:1a:30:1b:84:e5:ac:
                    6d:06:ea:36:05:1c:87:64:40:c3:4e:ad:22:62:45:
                    b7:ab:b4:bd:cd:22:25:08:17:f3:f3:e5:0c:d3:a5:
                    bf:d8:29:74:b5:f7:a5:27:b2:7b:ea:8b:e2:15:de:
                    83:4d:20:65:3b:37:b7:7f:36:96:9b:df:cd:33:98:
                    44:02:3f:fa:4b:67:7c:46:bb:1a:6f:40:1f:b6:52:
                    1a:e8:56:ea:28:64:ec:93:ba:6b:dd:b7:5c:1c:ed:
                    11:83:e1:44:79:10:d0:83:ec:6e:37:d0:75:ff:0a:
                    4b:7f:f0:87:67:3a:4d:4b:f0:cd:d1:15:78:b2:d9:
                    88:c9:f9:53:e9:b1:57:42:87:ee:c3:11:23:44:72:
                    6d:13:1f:8a:82:3f:80:e2:99:a6:7d:39:6a:ef:44:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:91:6A:F6:08:14:BF:3E:9D:8E:AD:95:8F:4F:32:7F:A5:D2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/796e02ff-36db-3738-9d1c-aed32e5059b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:7c:dc:c9:3c:ea:79:3d:ad:17:e9:8f:14:02:39:5b:3e:
         8f:cb:81:bf:7e:24:1a:36:83:3d:17:cc:f4:f8:ef:bd:32:16:
         6a:25:9d:11:99:11:4d:35:48:c8:0d:b0:97:18:ec:b4:58:99:
         6c:3a:01:41:7f:e3:15:f1:26:e5:4d:d3:90:02:11:49:a8:b4:
         89:f0:46:5d:52:ea:ca:73:74:e0:bf:cf:6a:25:41:19:34:29:
         4a:a5:8a:64:39:64:1e:84:c5:c3:b7:d0:99:b5:1b:31:41:e5:
         6b:8e:05:78:c9:57:7b:10:18:f4:0d:1a:68:c2:ae:f3:61:1d:
         43:41:4f:e8:36:2b:50:da:fa:45:4c:e1:71:45:80:89:ee:94:
         a3:9b:6f:9f:6d:34:ab:bc:99:6b:74:24:6d:32:28:09:b8:91:
         71:96:89:cb:e0:7b:3d:80:b9:d7:0c:d4:cc:fc:fd:41:27:f6:
         12:67:b7:97:7c:32:78:62:2f:e2:f4:7c:38:45:ad:8b:c1:aa:
         62:ca:11:34:ad:3d:05:ea:8c:01:9c:09:8e:5a:c2:39:6a:f2:
         74:99:0d:f4:5f:f2:01:f7:a0:5d:30:e8:d4:12:82:43:51:d9:
         47:e6:fb:3b:e9:91:4e:21:60:c1:3e:e4:dc:bd:47:a8:e3:bd:
         9b:da:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:16 2025 by rpki-client