Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/640eeb58-0db0-3da8-bae5-14446d572e08.roa
File:                     640eeb58-0db0-3da8-bae5-14446d572e08.roa (raw, json)
Hash identifier:          37UTfTqVhwYacs+A5e2XYv3WXOdUYmgkzsluKqhh0gw=
Subject key identifier:   F5:BB:F2:62:43:7D:87:31:F0:E2:88:76:B3:E5:43:6D:F0:37:10:DC
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584B153C18869AF4F445EF0D5800
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/640eeb58-0db0-3da8-bae5-14446d572e08.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     30094
IP address blocks:        23.182.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:18:86:9a:f4:f4:45:ef:0d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=774ac00b-8d48-41aa-8fa7-e3b0f8fa3228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:9a:e3:9e:32:5b:a3:b5:4c:3c:13:f1:e2:
                    f2:06:71:4d:84:24:3b:e9:b0:e8:b2:f0:21:59:f1:
                    49:94:ee:67:23:9c:d3:33:e2:a9:9e:7f:69:e3:af:
                    55:be:3e:ae:95:6b:66:5f:20:ff:13:84:63:4c:2f:
                    c0:76:6c:9c:25:28:2d:68:79:60:b7:da:16:5d:a9:
                    62:2b:56:d2:05:c5:61:10:8c:b5:6d:78:d4:45:72:
                    f9:c7:8d:a4:1b:a7:f1:49:e2:98:2e:fe:f5:a8:fa:
                    7d:ca:e2:68:c1:68:48:53:a1:8e:36:ff:8c:03:1e:
                    c3:90:76:98:50:5a:8d:9f:f4:51:aa:84:65:9b:17:
                    84:1c:0c:78:23:a8:e9:ef:ee:ae:fa:60:d8:e2:27:
                    62:75:05:e1:6e:42:70:f4:62:51:6d:ba:7e:8b:2b:
                    a7:cb:38:2f:ba:02:2c:ba:18:89:9a:b9:2e:65:c5:
                    c9:b9:4c:68:d1:4c:0b:43:15:93:40:db:d9:e7:fc:
                    98:f4:d0:fc:f3:0f:b5:64:8d:52:ae:39:1d:eb:aa:
                    b7:81:ca:45:83:a2:6c:6b:ca:e9:e7:08:3d:7d:7e:
                    ef:3f:33:0f:75:5b:05:70:44:45:80:9e:40:de:89:
                    47:0c:96:72:bf:e0:db:57:70:b5:21:54:4e:63:99:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:F2:62:43:7D:87:31:F0:E2:88:76:B3:E5:43:6D:F0:37:10:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/640eeb58-0db0-3da8-bae5-14446d572e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:46:9e:c2:4e:a9:1f:9d:75:be:33:28:9f:0a:fc:78:6b:49:
         10:e1:6c:75:90:a0:7f:aa:86:70:85:08:0c:de:c3:40:5c:97:
         dd:69:a0:39:4e:5a:22:08:69:16:18:32:32:98:ed:73:79:ff:
         54:0e:67:88:06:38:41:e2:61:bd:48:2c:7e:ca:5e:2d:e0:e5:
         7c:f6:93:a7:f6:85:5d:c2:b0:ea:30:97:c5:fc:c3:f4:3e:4f:
         8b:65:02:22:bb:93:21:67:ea:79:63:bc:db:81:86:a5:26:1f:
         99:1b:23:ba:38:50:4f:a4:5b:89:05:87:70:1c:01:94:20:ee:
         08:45:84:af:70:9d:d7:a9:87:bf:f5:30:3c:3c:ae:8d:7d:13:
         90:d4:d0:ec:6d:d1:90:51:0b:f8:1e:03:cf:48:8b:a0:41:35:
         59:82:19:81:50:b1:13:fb:d5:ec:b8:8d:b3:9f:18:7c:d1:0e:
         47:c0:a9:dd:5b:bb:82:0c:03:57:3d:62:22:00:99:da:0c:6d:
         33:dc:f8:76:e3:69:2d:c5:83:40:14:cf:1d:53:1a:ce:2a:00:
         fd:ff:6f:9f:07:08:0d:d0:9b:78:05:94:01:81:2f:ba:31:f7:
         61:32:db:82:82:3c:ad:41:88:fd:28:2e:4c:3c:e3:71:3a:88:
         47:63:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:55:02 2025 by rpki-client