Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa
File:                     cf738f03-939e-3c47-ac2d-324d33da8d13.roa (raw, json)
Hash identifier:          FWnZhqHWqDcx6s3MkPf2kBQ8kc/TvCpP66LFnpp9unk=
Subject key identifier:   B8:32:F5:9D:DF:83:70:52:5A:46:3E:8B:26:0A:15:0D:8F:E5:C0:28
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584B0FA6B886C64A8F9A27313F20
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     23470
IP address blocks:        23.172.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b8:86:c6:4a:8f:9a:27:31:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=897fb44d-7780-4720-b606-b93a3eba4235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:d9:b3:5a:10:02:bd:a1:68:31:b3:78:c8:
                    62:7b:da:aa:84:fe:f4:99:b7:d3:11:ba:1e:f0:30:
                    d2:32:c0:e7:c8:e7:6d:54:57:59:52:1d:fa:3e:d2:
                    3d:b6:d3:38:eb:a6:05:e0:af:3d:56:64:54:82:ed:
                    4e:e0:03:2e:69:fc:8f:53:62:06:16:4d:50:fd:dc:
                    ec:06:7e:b9:c7:6c:fb:35:67:93:35:eb:44:d6:42:
                    57:a3:8c:95:8c:22:43:60:b9:57:d8:86:53:c0:51:
                    31:8e:13:ec:e5:15:67:1e:5e:2d:9e:a3:9d:89:43:
                    c3:e7:56:9b:6d:91:ae:9e:8f:a2:4d:c4:cf:b1:74:
                    cf:45:84:e3:ae:1b:e9:81:43:d5:96:c1:c0:88:27:
                    13:5e:3a:25:b5:29:a1:2e:3d:51:26:0d:a1:4c:ee:
                    44:dc:1d:d3:2d:4b:b5:61:ed:e2:83:a8:41:a8:22:
                    1d:16:c8:cc:63:73:22:4b:0b:7b:51:47:5a:08:e1:
                    57:06:06:a9:8d:dc:17:91:cf:d0:44:71:24:da:32:
                    a5:f0:00:c3:88:e8:ce:74:ac:c3:56:b3:46:fc:27:
                    e5:e7:db:0d:71:b5:4f:bf:59:09:ff:f6:67:37:b2:
                    50:44:f4:fb:51:50:93:11:22:8f:b1:12:49:eb:ad:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:F5:9D:DF:83:70:52:5A:46:3E:8B:26:0A:15:0D:8F:E5:C0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:af:ab:3d:3c:c6:6b:f2:43:9a:59:f6:f8:00:50:a9:b9:a0:
         ee:c6:29:c2:4f:92:3b:31:e8:b4:2b:8e:ba:9a:ba:ca:9b:1c:
         99:94:5f:dc:a9:ee:49:22:0c:1c:3d:b1:1b:00:b2:27:a1:4f:
         79:40:72:f1:8d:87:ff:ae:d6:af:12:db:7c:db:fb:d3:ee:7b:
         fe:f3:e8:c7:a6:e8:11:35:b4:0a:bf:8c:72:55:2e:59:ac:a3:
         2a:72:2c:e0:51:4c:ad:de:e4:f2:9b:5f:76:e0:8a:7d:4a:d9:
         de:ec:9d:8e:4e:05:31:18:bf:b8:38:85:fd:6d:84:39:3e:f5:
         32:45:fc:1a:9c:aa:d6:cf:6e:ac:2a:44:49:80:4c:c9:7d:50:
         be:4c:cb:9b:af:7c:8d:74:4b:11:11:42:36:71:af:23:28:0f:
         54:d2:45:e6:80:e1:a4:25:6c:4a:94:dd:b4:58:24:66:e1:3c:
         ee:84:85:b9:c1:a1:4b:60:4f:b1:ba:05:9d:2f:d7:5d:cd:ef:
         73:13:23:69:a3:f8:ab:e6:38:0c:c8:9a:92:9a:8c:5a:c5:5e:
         8f:4f:71:5b:f5:9b:2b:c9:09:e2:66:da:84:f3:64:30:9a:34:
         8c:5f:b4:38:b2:79:d5:0d:3c:05:cb:5e:cf:14:dd:99:6f:3f:
         26:da:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:36:27 2025 by rpki-client