Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa
File:                     40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa (raw, json)
Hash identifier:          Aix4KjWxcc8Mg1GTYjP9kyrkDXr4Q1nHcS00LAMsEYE=
Subject key identifier:   E0:BA:1C:3C:D3:77:F4:2F:DF:BE:1D:91:ED:44:39:2E:FB:BF:46:BD
Certificate issuer:       /CN=9e180184-106e-41ea-a049-5451e20c2840
Certificate serial:       010D0C9F4328584AD8C08DC1EABA595D378E3400
Authority key identifier: AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa
Signing time:             Wed 13 Aug 2025 21:03:20 +0000
ROA not before:           Wed 13 Aug 2025 21:03:20 +0000
ROA not after:            Tue 11 Nov 2025 22:03:20 +0000
asID:                     401511
IP address blocks:        23.129.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:c0:8d:c1:ea:ba:59:5d:37:8e:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e180184-106e-41ea-a049-5451e20c2840
        Validity
            Not Before: Aug 13 21:03:20 2025 GMT
            Not After : Nov 11 22:03:20 2025 GMT
        Subject: CN=415422f3-3553-47fa-b8ad-103a27f07f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:16:cc:c7:ee:f3:d7:8d:49:1d:c8:40:4e:
                    80:b1:e2:d7:25:3e:00:d8:54:92:03:84:f6:22:ca:
                    9e:02:6d:d2:fe:b1:8f:46:c7:05:e3:63:08:f7:91:
                    fe:7f:9d:70:35:d4:af:a6:64:99:6c:58:c2:c5:41:
                    c1:22:07:d8:5b:0a:56:cc:18:b9:87:23:4a:a2:d0:
                    96:07:ee:91:38:bd:58:b6:db:17:1e:a1:2d:c5:65:
                    bf:9e:7b:e4:41:8a:f7:19:f1:82:1c:2a:12:7a:46:
                    af:77:ca:c3:85:ff:d6:b9:6c:6c:ec:2a:52:20:92:
                    54:a0:57:63:ec:42:f4:c8:bc:b8:ef:9f:4c:79:ba:
                    0b:50:69:94:44:c6:66:bd:89:1a:40:e1:2c:03:cc:
                    2c:69:58:13:ab:9a:b2:83:f7:1f:7d:07:62:76:fc:
                    0f:6e:4a:ab:a6:4d:5f:01:82:fb:78:7e:5b:c3:ba:
                    18:70:22:26:65:8f:5b:bb:10:ee:ff:86:5e:ff:d6:
                    7d:1c:f5:82:7a:2e:93:9c:55:f1:18:76:46:ed:24:
                    23:02:14:8d:96:0a:13:03:dc:cf:00:16:a1:1b:8e:
                    e5:f3:c8:bc:f8:d2:7b:1c:1b:c1:2e:02:47:89:36:
                    ad:08:d6:7f:23:ed:d5:5c:a7:90:20:30:34:94:86:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:1C:3C:D3:77:F4:2F:DF:BE:1D:91:ED:44:39:2E:FB:BF:46:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:75:ea:3a:79:fd:a3:32:6c:2f:4e:f0:14:7b:3c:f3:89:f6:
         ae:1e:42:e9:24:45:8f:2c:31:49:f8:a7:43:93:9a:2b:9e:b7:
         55:fc:f9:d1:08:b9:31:d0:b9:4d:92:b7:d6:7e:88:c7:ae:7c:
         90:ff:f2:3a:50:41:d8:8c:da:6b:ab:d3:db:0d:24:63:b9:76:
         5b:49:77:43:bf:cc:63:b9:da:12:13:91:4e:68:4d:6c:ff:7a:
         05:bd:56:ae:78:8b:d8:af:49:ff:60:e5:dc:7e:ed:54:fb:e6:
         00:63:d7:19:92:8f:b6:b1:df:85:b9:3e:84:8b:8e:82:20:9f:
         cc:eb:a9:79:c4:85:e9:8b:aa:91:3b:7e:9c:7d:b5:90:cd:cb:
         d0:c6:0f:d7:4a:fa:19:3f:09:e0:e1:b0:25:0c:a9:a8:68:ad:
         fd:12:ad:8b:02:7f:fc:9d:e9:90:ae:56:68:d7:22:91:ea:58:
         74:ab:81:b5:94:e6:4a:a6:d5:6b:6e:fa:7c:92:13:0c:cc:43:
         9e:7d:2d:35:30:71:26:61:55:72:6b:70:c9:8a:cf:99:c7:fa:
         dc:e3:21:7c:04:0d:41:83:b9:2d:54:71:89:ff:ba:0c:3a:70:
         99:09:f0:f3:b3:85:dc:1f:27:56:70:69:82:40:79:dd:5a:5c:
         e5:35:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:45:36 2025 by rpki-client