Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/496afc45-c760-3f66-b7b7-c85288ce00c9.roa
File:                     496afc45-c760-3f66-b7b7-c85288ce00c9.roa (raw, json)
Hash identifier:          fnwnF5oXnGh7smPSIKxR5I4OSkuAs1OmiUswq7Wot4c=
Subject key identifier:   0A:9F:96:3E:48:0D:B9:E9:76:F4:1A:5C:4C:16:37:A8:50:F0:B2:C8
Certificate issuer:       /CN=1def28a9-0b42-43a8-9407-32d9e4a0540e
Certificate serial:       010D0C9F4328584A7BB0B8682A965FB1F106BA00
Authority key identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/496afc45-c760-3f66-b7b7-c85288ce00c9.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     401119
IP address blocks:        23.180.24.0/24 maxlen: 24
                          2602:f8d3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b8:68:2a:96:5f:b1:f1:06:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1def28a9-0b42-43a8-9407-32d9e4a0540e
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=a595d714-ca39-446f-84a6-6efb20330028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:6e:e2:14:bc:f6:0d:91:8e:ce:aa:06:d5:
                    07:74:8c:dd:b1:9d:94:0d:8b:09:10:31:91:f2:b1:
                    ef:00:a2:22:11:38:db:91:b7:bf:9c:7e:7d:b8:f6:
                    7a:9b:97:00:5b:b6:bd:52:31:02:3e:0d:09:b8:3a:
                    6e:de:60:31:86:bb:78:2e:8a:56:59:e3:61:55:e3:
                    5e:a9:50:a9:ae:bd:73:a4:d0:ef:49:b6:2f:f2:8c:
                    6c:e4:74:cc:80:82:15:98:27:09:b1:01:aa:dc:e1:
                    53:55:d5:0a:20:f6:95:1e:b1:5c:06:14:ea:1a:ee:
                    8c:7c:44:e7:46:de:3f:1e:58:17:0a:f5:9d:39:49:
                    d4:98:9c:04:51:32:4e:6b:6b:bd:29:6d:e1:fd:06:
                    58:60:6d:7e:42:e6:ca:28:24:97:1c:53:fa:45:06:
                    14:09:ce:35:92:87:22:6d:09:52:07:af:c0:79:42:
                    eb:50:dc:64:e0:e6:34:a2:e5:fc:7d:e4:b1:63:0a:
                    63:df:ea:f9:a2:f6:07:04:2e:3c:19:bb:89:64:06:
                    6b:87:fe:b3:f2:30:e9:f8:74:c1:f7:52:b6:63:26:
                    98:dc:fd:01:31:64:95:db:2a:ad:4d:e9:3f:32:ca:
                    b3:68:bd:3b:20:97:a5:48:1a:e9:30:fd:d8:4d:4d:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9F:96:3E:48:0D:B9:E9:76:F4:1A:5C:4C:16:37:A8:50:F0:B2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/496afc45-c760-3f66-b7b7-c85288ce00c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl

            X509v3 Authority Key Identifier:
                keyid:4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.24.0/24
                IPv6:
                  2602:f8d3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:7c:b1:85:16:37:3a:e3:20:35:e3:ec:45:f3:78:9a:d7:
         b6:1c:77:c0:3d:81:15:5a:21:2e:a8:f6:27:16:23:6c:9e:94:
         c8:0a:a8:9d:11:f2:ae:5d:c4:9d:cd:e3:4d:b9:bd:2b:31:fb:
         cc:02:dd:a1:4e:9e:50:e8:5c:73:f8:31:ac:72:c9:19:55:cb:
         70:df:41:dd:3b:28:76:cc:40:9f:57:fd:66:09:6a:fa:70:0c:
         2c:6e:d9:d8:49:af:23:ca:74:bb:85:8a:33:89:e1:15:b4:71:
         08:2c:cc:9b:03:a8:c8:98:c4:aa:e7:42:3d:32:fc:36:aa:82:
         91:3e:b0:ab:58:03:b7:77:7f:6f:e3:a9:bf:42:ce:ce:65:68:
         23:b6:87:3e:ac:da:54:17:2f:27:1c:91:31:68:0a:28:31:c0:
         4b:35:ca:9f:04:68:c8:0e:d7:90:20:b0:33:59:0f:a3:56:0d:
         56:b0:7c:ea:f3:e3:d0:f6:7d:72:fd:13:f2:82:64:a3:61:92:
         0e:b2:03:c3:17:1f:56:a4:24:8c:12:09:2c:7f:3c:b9:56:ca:
         98:11:21:ef:d5:fa:fb:82:2e:dc:bb:15:3c:70:04:41:97:6d:
         0a:fb:a2:45:34:cd:2a:c7:7a:63:a0:a9:ba:7e:c8:54:46:f2:
         4b:15:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:10 2025 by rpki-client