Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa
File:                     7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa (raw, json)
Hash identifier:          lwq8Do6qBjh8Ph0YhjxgchUCkKt8Wqk3tlfU7/mYr/w=
Subject key identifier:   F8:AA:EF:6F:6E:31:13:F1:44:BC:31:44:F0:DA:4D:5D:CA:B0:D5:19
Certificate issuer:       /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427
Certificate serial:       010D0C9F4328584B328C3E89D2F5B4B5A6E7DBE0
Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     400882
IP address blocks:        23.162.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3e:89:d2:f5:b4:b5:a6:e7:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=44fd03cf-c2d6-449f-9c51-d030c12ee965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:df:93:bc:da:eb:54:da:fc:a5:97:6c:0a:
                    36:8d:59:ca:ab:56:19:cd:54:c3:f3:8f:c0:43:19:
                    dc:9c:87:e5:11:b6:ce:5a:48:f2:be:9b:af:53:61:
                    f0:c3:12:98:31:da:4b:6f:51:59:85:e5:70:20:4f:
                    f4:1a:f0:48:f2:7a:64:c7:ae:a4:83:06:a8:9d:18:
                    c4:af:73:92:7a:4c:a9:0c:ac:e2:bf:41:4d:ea:34:
                    47:a2:26:72:d7:66:1e:51:91:5e:b2:eb:ce:44:b0:
                    a3:67:cd:5d:b8:f5:50:15:33:4a:7c:de:f5:80:90:
                    d3:e8:19:92:0f:9a:96:f0:63:be:3b:7e:6c:b5:ab:
                    a4:82:ea:43:33:22:c4:df:7c:e1:89:b9:4c:df:18:
                    d3:b4:32:3e:25:e4:ad:f2:22:f1:ca:e3:78:e9:39:
                    2d:04:24:9b:17:aa:64:61:2c:8e:cb:3f:8a:b4:a0:
                    d6:9f:75:55:fc:d3:c4:53:87:fe:24:b8:a6:d0:76:
                    db:a6:39:28:95:0c:63:04:94:0a:4b:1f:e6:e0:6c:
                    6f:91:97:92:d7:c8:1e:2a:3a:45:e0:60:13:23:b0:
                    71:4c:a0:6a:d4:7d:07:df:da:f5:dd:21:19:3a:8b:
                    9e:85:61:07:bc:11:5e:4d:e7:21:eb:2c:9b:e5:58:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AA:EF:6F:6E:31:13:F1:44:BC:31:44:F0:DA:4D:5D:CA:B0:D5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl

            X509v3 Authority Key Identifier:
                keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:75:b3:15:dd:1c:ac:ad:b2:29:9a:36:e5:a7:11:4e:42:88:
         42:95:b1:79:95:0e:b8:d1:2b:66:5e:8f:ee:43:02:f8:ab:82:
         d1:5f:bb:db:64:8d:51:49:49:57:7e:80:e2:67:33:ac:47:16:
         95:17:17:15:39:6c:af:86:72:8a:a6:b5:2b:29:b7:a8:4f:b5:
         40:f5:a3:ca:7e:32:72:4d:69:09:9c:ec:0c:f0:e4:1e:b2:fb:
         7b:a7:08:bf:35:8a:f6:bb:a6:06:5b:49:85:9a:81:c9:88:20:
         8f:74:f2:bb:d9:3a:60:94:33:54:57:62:d1:b9:58:85:dc:fb:
         22:9e:90:31:fa:3b:02:c2:94:39:1d:3c:e0:85:c5:f5:da:3f:
         1a:61:0c:e9:63:b4:36:c7:0a:67:02:03:91:4c:9d:50:b2:19:
         9b:1a:ab:27:1a:55:0c:80:83:af:7e:f9:9b:0f:4c:a2:15:06:
         44:14:6f:17:53:12:b6:f2:07:7f:b6:7f:17:53:cc:b9:42:19:
         a5:ba:41:e7:24:a9:24:b8:f8:ca:3b:6b:6e:44:f9:d8:df:1d:
         9e:07:49:be:02:2d:10:97:f8:ec:e7:cb:8c:ed:9e:95:da:70:
         cf:86:75:af:c4:4b:a0:d2:90:43:e2:f6:1f:a2:47:59:b0:20:
         e3:de:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:51 2025 by rpki-client