Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/496afc45-c760-3f66-b7b7-c85288ce00c9.roa
File:                     496afc45-c760-3f66-b7b7-c85288ce00c9.roa (raw, json)
Hash identifier:          tyj4a07jfckn+cgEVSHJA1ynC8ysjp8I1Kxh+7CEC2U=
Subject key identifier:   8E:16:67:7C:0B:BF:35:2E:C4:93:28:58:99:3D:0A:68:02:FD:AC:8D
Certificate issuer:       /CN=1def28a9-0b42-43a8-9407-32d9e4a0540e
Certificate serial:       010D0C9F4328584B5C6C7A9D768F2FE404D9E200
Authority key identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/496afc45-c760-3f66-b7b7-c85288ce00c9.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     401119
IP address blocks:        23.180.24.0/24 maxlen: 24
                          2602:f8d3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:7a:9d:76:8f:2f:e4:04:d9:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1def28a9-0b42-43a8-9407-32d9e4a0540e
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=b207aef7-95ac-416d-95d5-e1dc9b3c6125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:fc:ae:e5:65:8a:85:b0:29:1d:48:d6:91:
                    c9:e3:b0:fc:42:47:6a:bb:f4:9f:8f:a5:0a:5d:44:
                    01:50:9a:09:a1:67:88:d3:75:4c:1a:41:8b:07:47:
                    7e:aa:89:ba:e9:c7:9b:e4:c1:97:3b:6e:2f:7e:64:
                    0a:86:68:02:61:80:b2:46:0b:9a:b4:ea:0b:b5:9d:
                    36:97:c1:7e:50:ae:25:a1:72:93:2f:f0:a9:88:57:
                    17:68:45:9f:af:64:67:95:82:39:42:ec:bf:c3:bf:
                    54:59:e8:5a:b6:49:e5:4d:5a:04:6c:19:c6:a1:ae:
                    73:1d:ff:2e:58:db:ea:3a:53:44:51:62:4c:9e:e3:
                    b2:e7:43:21:87:29:26:16:03:90:6a:fc:93:a0:b5:
                    12:87:ea:71:3d:95:ae:4b:23:8a:4c:3b:5e:3a:f0:
                    db:79:19:ec:f9:b5:b6:db:56:84:a9:8a:c0:7b:10:
                    f2:ff:80:b9:fb:24:20:70:41:1f:63:90:cb:a0:1f:
                    fc:bd:07:96:90:3d:66:6c:b2:ff:fb:8f:76:5c:49:
                    96:4d:cf:8f:ac:86:ff:aa:8f:b9:af:1d:10:b6:98:
                    c6:71:61:ca:6c:0e:4c:ea:82:40:e3:ee:7f:04:2a:
                    c3:99:d6:72:d4:ac:8f:e8:f7:4b:f7:ec:4a:2e:b8:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:67:7C:0B:BF:35:2E:C4:93:28:58:99:3D:0A:68:02:FD:AC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/496afc45-c760-3f66-b7b7-c85288ce00c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl

            X509v3 Authority Key Identifier:
                keyid:4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.24.0/24
                IPv6:
                  2602:f8d3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:00:33:01:a2:d8:92:15:b5:9e:03:57:a7:0d:0f:e1:01:
         e0:02:eb:36:bf:db:58:de:1c:15:d2:2b:70:9b:ac:4d:73:51:
         c6:d8:33:ad:0d:48:b5:3f:c8:53:5c:be:9c:94:84:7f:56:37:
         1d:a3:bd:60:15:4b:62:52:05:c4:45:43:43:60:1b:c6:66:f4:
         4f:a1:e9:43:a6:82:c0:2b:6f:ca:30:11:a5:cd:d3:41:b9:ff:
         f3:53:50:ae:f3:bb:37:81:44:8c:dc:c2:c9:8f:b7:b7:49:4a:
         1c:a6:39:12:ff:c6:87:dd:f8:33:b8:39:07:a7:9e:48:3c:7b:
         f3:75:9e:8c:30:1c:5f:fb:fe:84:03:4c:5f:d1:b5:6e:06:38:
         13:d8:8a:14:4b:95:28:9b:68:12:1d:17:bc:e1:b1:ec:be:8a:
         0d:4d:1e:c2:78:68:d2:ec:2f:d8:b8:c3:f0:fd:8a:6e:b7:29:
         f9:ac:23:12:36:8f:b9:d1:cd:8f:db:99:47:2b:f7:ef:a5:7a:
         3d:1d:11:6a:ad:cc:7d:c9:c8:3a:08:1c:8b:44:07:a9:30:dd:
         26:3c:08:66:a9:c6:66:3f:ba:a8:f5:c6:3a:fc:ce:5f:27:b3:
         86:44:fb:de:b9:16:5a:7c:4c:4c:f7:de:30:01:fa:1e:ff:0d:
         b1:35:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:42:12 2025 by rpki-client