Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
File:                     f0d10397-6934-3c37-9304-645005e262ae.roa (raw, json)
Hash identifier:          E4wcTcbvacoH1NzWX0gCVWb3MyeleuHYWcJSobvDM3I=
Subject key identifier:   54:CC:1C:9B:5F:AC:7B:A5:A8:1B:3F:14:CE:64:52:29:1C:36:E2:74
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584B4E77101ED884155534E0C300
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        23.141.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:10:1e:d8:84:15:55:34:e0:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=4942a6c5-a12a-4be3-9e78-55e0874874f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:13:4c:3f:6c:97:e0:52:b6:57:12:c6:43:
                    e1:d1:02:6f:d5:70:ff:0c:43:64:d7:58:50:17:dc:
                    a5:bc:eb:24:72:fe:b8:80:76:60:40:24:5a:93:34:
                    62:ee:fd:f6:b7:cf:73:44:8b:fc:84:cc:fe:8e:3b:
                    77:43:be:a6:df:e3:b0:d5:98:6a:1e:f8:ad:20:6e:
                    c7:49:14:bd:80:8d:a4:f8:b1:f1:05:35:65:8d:66:
                    9f:ef:cb:b6:dd:0c:ee:50:40:60:3b:a0:00:e8:63:
                    89:5a:64:27:92:2c:a8:8c:ba:9a:58:84:8a:c6:b1:
                    6b:2b:20:a4:6b:f6:b8:00:12:bf:28:51:23:57:78:
                    db:bf:c3:ff:19:33:91:0f:a6:b7:28:d7:1b:de:00:
                    70:d6:0a:ae:fe:80:aa:56:2b:df:4f:4e:72:e8:82:
                    75:5f:39:1a:2e:c2:84:87:fe:ec:ab:3c:f3:32:32:
                    1e:a1:f7:2a:31:49:ed:eb:14:ce:d4:b3:98:d7:4f:
                    97:9e:88:89:64:7b:e8:73:7a:c7:3b:fb:58:73:11:
                    63:53:30:67:e8:3d:c0:52:d9:10:f4:8e:4b:96:7f:
                    54:df:0a:b6:3a:06:a1:dd:c4:2d:83:54:3c:c7:78:
                    69:55:49:8f:04:ce:2b:e9:a6:69:ae:56:9f:e7:34:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:1C:9B:5F:AC:7B:A5:A8:1B:3F:14:CE:64:52:29:1C:36:E2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:71:88:9a:fd:af:68:64:1a:83:ce:dd:d2:80:fd:d7:a9:24:
         5d:c4:e9:ee:03:7e:4b:15:93:1a:1a:1b:9e:3b:41:3c:86:3a:
         64:42:52:0a:55:a8:c4:55:7f:39:4a:4a:ae:c3:5c:62:a5:3b:
         12:bd:63:b6:ea:50:87:94:37:73:f9:39:b9:4b:d1:e5:83:4f:
         7a:1b:c3:b2:90:24:aa:71:40:54:5e:d7:35:ea:75:29:c4:80:
         e5:d2:ab:c8:95:9f:16:f3:a4:4f:76:51:34:35:28:fb:80:04:
         a5:1f:e8:a7:f0:13:d9:71:76:ef:e0:42:b2:f8:1b:60:61:40:
         b8:61:9e:4b:ad:8c:94:eb:56:d6:00:9a:15:b9:da:7d:44:72:
         c4:a4:b6:4d:aa:c0:bf:69:43:b1:d4:3e:b0:72:e2:24:30:7e:
         d2:0c:a7:55:d8:30:b8:1e:7c:b0:51:45:26:16:32:b4:87:46:
         d7:81:03:5f:4c:6e:c4:aa:cd:a1:28:a3:b7:e0:6d:7d:0c:da:
         ed:86:39:a6:38:5d:39:f2:8e:d8:75:a5:2f:79:a0:27:18:5c:
         b0:eb:80:c5:84:83:e5:84:8b:d5:a5:ca:44:98:a2:8f:b9:8a:
         00:7e:80:43:55:b5:b8:3a:83:55:6f:13:fb:e8:b3:3d:dd:6e:
         90:52:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:16 2025 by rpki-client