Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa
File:                     4c039b9f-7d95-385d-a4d5-7d3621295d94.roa (raw, json)
Hash identifier:          uKNuPMup6GGbzKEgcFBKMhmZogH30x0Aei6g0viK9Og=
Subject key identifier:   9E:9B:CA:61:E7:35:81:D0:D1:92:35:D3:6A:0C:C1:01:3E:38:B1:CE
Certificate issuer:       /CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
Certificate serial:       010D0C9F4328584B4A473321518F08ACA23DFE40
Authority key identifier: 13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     33741
IP address blocks:        23.184.184.0/24 maxlen: 24
                          2602:819:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:33:21:51:8f:08:ac:a2:3d:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=78797b8d-7f6e-43b4-b12c-9407c805eea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:33:33:0a:b9:b4:5d:db:90:22:00:e6:7a:
                    04:03:f3:2a:65:e0:e6:45:b6:cd:67:ee:53:58:8b:
                    d2:3b:8e:1b:ac:fe:08:a6:1e:c2:0d:77:f8:0d:d2:
                    47:68:aa:e0:a5:5b:da:9d:56:fe:48:bf:0e:ab:9e:
                    a4:09:05:6e:b2:10:40:8d:dd:ab:7c:85:84:f7:a4:
                    0b:39:5b:eb:c5:5a:71:90:27:03:1d:91:1d:57:75:
                    a6:6a:d5:e4:0e:83:f7:8d:1c:a3:c4:b1:f8:d5:9a:
                    cc:a8:b8:89:87:1d:3d:23:f6:61:8d:9d:b1:cb:32:
                    be:fd:fe:86:48:c1:51:59:69:c0:3d:5c:93:71:78:
                    93:8a:cb:30:6e:ec:7f:62:2f:7b:2c:aa:99:50:df:
                    d7:25:0d:03:e0:41:4f:e1:7f:20:14:0a:04:e5:c4:
                    ca:aa:4b:df:72:6f:f8:9c:da:93:fb:79:0c:1d:4a:
                    b8:9e:6d:31:97:df:cc:5d:d2:1f:f7:67:3e:f9:c0:
                    66:e3:5e:82:49:c9:b2:36:d2:79:0e:12:02:01:48:
                    1d:25:70:14:1e:71:78:1e:3e:89:7a:99:38:f0:42:
                    fc:94:7e:82:9b:a3:c9:fd:ba:41:e6:7b:78:f6:ae:
                    ea:3f:69:ef:6a:95:22:d7:c1:00:93:07:18:06:56:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:CA:61:E7:35:81:D0:D1:92:35:D3:6A:0C:C1:01:3E:38:B1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl

            X509v3 Authority Key Identifier:
                keyid:13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.184.0/24
                IPv6:
                  2602:819:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:03:55:ba:70:d4:f4:0f:d6:7f:9c:e9:e4:12:a3:1a:43:
         b9:4d:f3:47:17:8d:e7:9b:c8:0d:8c:35:71:f1:f7:6e:f0:f3:
         fb:91:e2:83:9c:32:47:30:81:c4:7f:37:0b:ac:ea:17:58:84:
         ca:d1:35:19:99:cb:71:35:8a:52:83:58:9f:e7:7f:f7:53:75:
         9b:86:3c:1f:c9:15:48:a3:a8:d2:19:8b:a7:5a:c7:4a:b4:a2:
         6d:e7:70:cb:1a:1f:e3:8d:85:e4:a6:59:10:5b:8f:73:6d:27:
         de:c8:1d:e4:b8:0b:50:33:e5:5e:f8:0a:38:28:cc:54:b7:ef:
         62:8b:45:1b:1b:a4:ce:a6:3b:93:2e:c1:11:f1:6a:1e:80:12:
         76:02:98:26:2e:3e:f6:db:e0:a2:83:5e:37:b6:44:18:c5:dd:
         a3:06:66:76:71:18:44:2c:3f:35:0d:cd:28:48:02:b1:e8:3c:
         df:be:0e:ae:75:a8:28:42:39:37:37:8e:b5:2a:f3:17:73:c2:
         a6:12:a0:6a:c5:7e:c6:4c:98:2c:1b:f9:36:6f:6c:04:fb:f1:
         10:12:0a:b5:ee:bb:31:a7:96:96:76:a6:fd:40:c4:98:d0:9c:
         b6:88:a7:98:ca:9f:bd:10:83:6c:c6:b8:cd:45:94:80:15:e1:
         ad:5f:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:43 2025 by rpki-client