Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa
File:                     371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa (raw, json)
Hash identifier:          MEjuAYiIW+SsMoI04vGl+g8qekcycDa9dikpokUkz/A=
Subject key identifier:   EB:82:B4:BA:20:16:CC:46:00:D4:EF:E9:30:9F:09:7A:EA:17:C5:86
Certificate issuer:       /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
Certificate serial:       010D0C9F4328584B4A472050C6527EFAFCBC1500
Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     401443
IP address blocks:        23.128.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:20:50:c6:52:7e:fa:fc:bc:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=ec3cf833-6395-4861-bd1d-e79628663287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:7a:72:d8:f6:fb:e4:18:2e:45:0a:ac:d7:
                    19:c8:74:5a:ee:4d:46:e8:55:43:0d:b5:f4:d2:c5:
                    e1:bf:cb:47:79:97:a1:50:e5:a2:fb:28:ec:4d:6a:
                    76:35:2f:cf:21:0c:48:a0:76:19:0b:81:67:5d:44:
                    b7:db:bc:a0:cf:d4:c2:4f:42:dd:b8:6c:a5:64:b3:
                    ba:58:d2:50:d7:84:15:64:ac:31:8d:97:e8:8b:91:
                    dc:49:a2:1d:a5:4f:69:fc:57:3b:92:d6:08:fa:08:
                    ca:2e:2c:f3:f9:10:4c:1e:6d:3c:ab:c6:4c:40:9b:
                    49:31:ab:af:be:16:be:36:1e:cc:bb:60:c6:d0:8a:
                    a9:ef:01:ba:19:86:ea:4c:5a:0a:d6:35:9e:db:a0:
                    2c:05:fa:e1:71:f9:b2:b2:05:d9:65:b2:02:28:13:
                    89:5b:98:98:10:68:82:7b:cd:e8:65:f4:b0:ab:b3:
                    48:a0:85:ac:8f:65:bc:ba:05:17:cb:1d:f9:e3:2b:
                    c1:54:a2:cc:8f:16:9a:46:01:47:3e:bd:dc:fb:17:
                    e3:1b:dd:97:50:55:61:d7:62:23:90:f3:d2:c9:5e:
                    ee:f6:64:df:73:c6:7a:39:60:b6:4a:be:a6:b7:73:
                    ba:2f:75:73:fe:53:a2:cc:75:84:cb:40:b0:fe:5a:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:82:B4:BA:20:16:CC:46:00:D4:EF:E9:30:9F:09:7A:EA:17:C5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl

            X509v3 Authority Key Identifier:
                keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:3c:1d:37:78:79:fe:5a:30:87:75:f6:8d:36:39:4c:79:
         0c:eb:bc:bf:6f:9f:ed:cd:cf:5d:f9:64:1c:0a:74:2e:c9:66:
         9b:81:6f:16:3b:53:c6:0d:14:bd:83:8d:2a:26:37:bb:ee:af:
         bb:72:97:56:17:2b:94:00:94:e1:35:2b:8e:c3:1b:af:bb:16:
         b4:08:36:87:ad:2f:c3:7d:cb:04:f7:1e:f2:b9:76:6c:9f:cf:
         2f:74:84:5f:a5:ce:30:5f:2b:15:5e:ac:f5:60:7f:db:e4:81:
         5f:4f:90:88:ba:93:05:8f:49:56:8c:ee:1a:44:30:4a:e6:de:
         4b:ab:83:4d:7d:b1:98:b7:87:dc:e6:46:6a:86:5a:54:27:c9:
         e4:52:76:d5:eb:bb:cb:af:fd:99:5f:c1:5b:7f:6f:cf:9a:cf:
         d6:80:97:77:5b:02:fd:cf:16:f5:56:96:0a:ca:8a:0f:87:9f:
         8c:3a:74:bf:4c:44:94:e7:6d:60:09:f7:e7:cd:9b:78:b2:e6:
         04:48:fe:5f:b5:63:d5:86:fc:62:34:c8:85:8a:8a:a0:51:2a:
         84:70:4f:7c:6b:57:74:83:e0:c7:84:ed:a8:d4:cc:c1:19:f9:
         39:c4:4e:13:9f:d7:cb:2c:3f:ee:8d:76:33:8a:ac:97:d6:fe:
         a0:af:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 20:46:17 2025 by rpki-client