Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa
File:                     b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa (raw, json)
Hash identifier:          klAtWD6SXuichnxWclB2yvnevQAESHT21IxpEfrnUUk=
Subject key identifier:   02:E7:1B:8F:17:58:BD:85:C7:27:2B:E8:3B:26:56:82:38:D3:3D:8A
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584B0A11612D77FE3464422CBC00
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     1024
IP address blocks:        23.172.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:61:2d:77:fe:34:64:42:2c:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=ce356ffc-93f5-4288-b546-9a2411fa852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:b9:fc:37:a3:46:bc:52:75:85:54:b7:ea:
                    62:29:dd:e0:d2:bd:c8:de:8f:29:25:5f:f1:7e:4a:
                    53:e2:85:cc:f6:83:d3:bd:f8:ed:bb:0c:2c:77:05:
                    0b:e1:b3:37:4e:f1:99:96:9d:16:cd:16:6c:36:41:
                    2b:09:04:93:21:a4:54:6d:3c:9e:36:62:a5:da:d0:
                    08:24:33:92:d6:d8:9e:5d:52:d4:02:6a:1b:8b:b0:
                    96:a9:64:53:6e:32:27:40:de:31:2b:6a:f1:4c:a1:
                    e7:25:fe:88:6f:c8:1d:0f:b6:31:db:bb:f6:56:cb:
                    cb:42:1d:5e:26:c5:fd:84:6f:59:0a:b0:d4:49:ee:
                    49:c0:bb:70:2c:51:8b:5c:71:81:18:d0:69:aa:29:
                    96:71:e8:07:6c:bf:e5:6d:ef:3c:da:19:d6:c9:57:
                    76:03:89:f2:78:d3:56:a2:59:a4:c9:22:fc:35:4a:
                    02:7b:c1:cc:cc:51:77:68:4a:af:14:e6:9e:a7:23:
                    5c:25:17:f5:96:6f:0c:7a:a8:a2:26:bc:25:bb:be:
                    76:c9:b5:7f:1c:71:16:af:29:7b:1d:d5:33:ab:d1:
                    18:82:3f:1d:e9:64:a6:43:bf:23:db:b6:88:4e:ff:
                    7f:65:72:28:2d:2d:4d:1b:13:05:52:89:e0:5d:0b:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:1B:8F:17:58:BD:85:C7:27:2B:E8:3B:26:56:82:38:D3:3D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:cc:03:74:ac:c8:5e:5d:27:eb:d6:34:ca:09:6a:45:1c:95:
         5c:3c:e7:2e:1f:98:47:e4:91:7a:8c:77:b1:74:29:e5:e8:7a:
         e9:a9:eb:62:61:0e:91:8c:5c:3d:00:39:06:d8:ec:15:87:45:
         00:94:26:3c:86:2a:72:ea:9f:74:3e:67:f0:75:b3:7f:02:aa:
         29:f5:ae:59:46:6a:2f:23:df:32:d6:d3:58:b9:1a:2f:da:5f:
         c2:15:25:eb:8d:85:88:20:ab:7f:d5:87:a1:79:75:a2:f6:ec:
         0e:bf:a8:a7:a7:10:31:93:19:da:66:42:6c:c4:ff:d3:2c:0d:
         61:01:6a:7a:f3:33:ff:21:21:5a:db:7f:1f:c5:c5:8e:cc:35:
         a5:80:bd:f9:f5:98:e5:e7:d3:78:13:a3:5e:45:6c:5d:38:e4:
         9f:bf:f6:e0:b5:08:a7:b6:dd:fc:fc:ff:19:9f:c7:3f:04:79:
         db:0e:70:ab:65:af:5c:29:23:c3:b1:98:ed:ff:f7:8c:c9:89:
         04:e0:eb:ae:c5:d8:47:82:8d:33:d6:e1:1b:8a:fd:c0:c2:b2:
         02:11:fa:fb:62:fb:37:e7:ce:27:43:11:32:42:00:96:cd:7a:
         c4:10:69:ed:83:02:6f:c7:e5:d7:b3:e8:1f:79:41:1a:a3:87:
         a2:09:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:19 2025 by rpki-client