Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/c0c6ea05-0029-3393-85c4-ce0846b06915.roa
File:                     c0c6ea05-0029-3393-85c4-ce0846b06915.roa (raw, json)
Hash identifier:          2zn5myyGkn5UcxgIHz5GhQxq/gCVX/92jV2Cyj2hQj0=
Subject key identifier:   2E:1B:29:D5:4E:20:CA:FC:F2:22:51:E2:7E:6F:36:B3:99:C7:63:8B
Certificate issuer:       /CN=18e69682-4687-489d-8a3f-464eb9fd28e2
Certificate serial:       010D0C9F4328584B2B70F8EAF5E0041804522BC0
Authority key identifier: A3:D2:F2:B4:5F:8B:B9:F7:55:B1:C4:9E:D8:C0:FB:42:3F:95:1C:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/c0c6ea05-0029-3393-85c4-ce0846b06915.roa
Signing time:             Fri 12 Sep 2025 11:55:05 +0000
ROA not before:           Fri 12 Sep 2025 11:55:05 +0000
ROA not after:            Thu 11 Dec 2025 12:55:05 +0000
asID:                     154054
IP address blocks:        23.145.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/18e69682-4687-489d-8a3f-464eb9fd28e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/18e69682-4687-489d-8a3f-464eb9fd28e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:70:f8:ea:f5:e0:04:18:04:52:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e69682-4687-489d-8a3f-464eb9fd28e2
        Validity
            Not Before: Sep 12 11:55:05 2025 GMT
            Not After : Dec 11 12:55:05 2025 GMT
        Subject: CN=6433dca6-7c5f-40f7-b8df-47a0420d0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:7a:78:80:fb:68:9b:88:87:9d:2b:f1:6c:
                    56:40:cd:9c:2b:14:00:de:20:af:3d:07:e5:f1:9a:
                    1f:a2:c7:82:40:06:14:fb:b9:18:1c:78:29:cb:79:
                    18:2a:d2:7c:4f:1e:3b:86:fc:60:47:b9:54:76:7f:
                    7a:aa:88:5c:6b:78:42:95:4a:79:12:cf:43:1a:80:
                    7b:35:72:e8:4e:da:d3:c4:14:ec:b9:bd:be:aa:94:
                    d4:fc:b7:12:71:1f:e0:ed:42:e1:12:a5:0f:54:ee:
                    3b:8a:93:39:53:d9:24:17:de:d4:b3:9e:d1:7d:75:
                    34:e8:5c:bd:4c:b1:b6:4c:6a:1d:db:6d:3e:1b:15:
                    6e:ec:6f:f7:23:17:40:76:0a:98:89:70:d0:54:e3:
                    e2:fa:10:0a:64:29:14:9b:9e:71:17:cb:2d:3a:8c:
                    a9:6a:1d:32:8c:50:25:73:14:8c:5a:c3:4a:c6:71:
                    6b:d0:39:77:76:c6:1f:9d:6c:a2:0f:b0:11:a7:9e:
                    55:82:9b:27:0b:44:18:3d:6e:61:c4:92:42:f7:77:
                    9b:90:2f:0a:3e:ff:f1:19:42:3f:7e:d1:f5:35:a3:
                    af:dd:a5:04:be:7d:a1:2e:02:9c:83:9d:51:09:ce:
                    4f:3f:5a:a7:73:9d:41:2b:32:05:b7:8c:46:fa:82:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1B:29:D5:4E:20:CA:FC:F2:22:51:E2:7E:6F:36:B3:99:C7:63:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/c0c6ea05-0029-3393-85c4-ce0846b06915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/18e69682-4687-489d-8a3f-464eb9fd28e2.crl

            X509v3 Authority Key Identifier:
                keyid:A3:D2:F2:B4:5F:8B:B9:F7:55:B1:C4:9E:D8:C0:FB:42:3F:95:1C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:21:38:c9:80:33:87:76:f1:48:7b:b4:d1:3d:b4:d3:56:
         d5:9e:cf:16:65:b1:d4:1c:05:e3:02:2e:5d:bb:10:9b:d1:30:
         4b:ac:79:48:5f:18:ab:a7:8f:2b:8a:07:6b:c8:3c:08:19:81:
         70:39:23:d7:3b:ad:2b:d8:53:4c:16:45:02:83:53:40:6b:49:
         a6:5f:21:af:2f:0c:69:80:87:60:3f:be:9d:85:f7:08:1a:a0:
         fe:09:e5:79:8d:5e:98:43:8c:85:72:a2:aa:f2:7d:fe:36:f4:
         11:55:b8:6b:16:80:1d:bf:41:5e:20:41:f7:13:c0:5a:ff:e1:
         4f:aa:7f:53:2e:21:b8:6c:28:a5:ef:a2:37:c7:70:c7:15:78:
         38:f5:11:88:9b:9e:16:64:05:50:20:7a:b1:bf:40:87:9b:9c:
         bc:d1:6d:b2:ea:b8:e9:3c:dc:8e:9d:b0:c7:24:25:70:fb:6d:
         12:04:6b:ec:a8:90:db:10:45:d7:4a:cd:89:ef:07:6c:9c:c3:
         a5:b8:07:6b:ee:66:9c:b9:af:24:7e:94:4c:8c:db:4d:13:bd:
         3e:ed:6c:e3:51:fd:fa:ea:00:1e:3b:ee:6e:83:32:27:2b:e4:
         02:cf:14:a5:17:d9:fa:ca:8d:b7:09:b8:4e:7c:19:46:5d:c0:
         cc:95:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:32:54 2025 by rpki-client