Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
File:                     5038e415-936d-36b4-b347-422bca3e97e0.roa (raw, json)
Hash identifier:          CSp3YWcuLPDprG7JYgY0YsLCVFnNdqyiaB6HtHo2O6g=
Subject key identifier:   E3:32:CF:B7:23:02:E1:75:C5:4D:27:FB:22:3B:03:5E:B0:D9:B2:13
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F4328584A88409D6E93BCB68910844C80
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     21658
IP address blocks:        23.175.40.0/24 maxlen: 24
                          23.175.41.0/24 maxlen: 24
                          149.112.109.0/24 maxlen: 24
                          2602:f926::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9d:6e:93:bc:b6:89:10:84:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=e8d30464-4c19-4afc-9762-878f20bf9ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:24:0c:48:63:18:8e:52:50:29:3e:bd:40:
                    61:31:31:d3:69:14:82:e7:d7:07:3f:9f:1c:77:12:
                    2c:12:1c:e8:29:90:34:c1:39:c3:df:19:41:12:d3:
                    7f:ed:63:39:d6:eb:fe:f7:f4:a5:6f:7e:f1:79:f9:
                    37:e9:f2:58:27:29:de:09:8c:82:5f:ca:0b:cf:6c:
                    ef:08:01:c0:21:69:e7:87:98:f1:4d:a1:14:0a:09:
                    3f:7b:e0:33:99:d7:37:dc:ed:2b:45:f3:f4:ad:9d:
                    cf:35:1f:97:7e:39:4b:c9:53:07:1a:2c:76:69:d6:
                    df:bc:31:76:39:d2:10:ad:b8:04:14:51:36:d2:d0:
                    d7:d8:ea:99:59:4d:d8:88:bb:fe:ed:36:27:a6:ab:
                    85:1e:5c:da:63:39:5a:b1:c2:b7:26:32:1a:5d:d2:
                    89:99:62:27:7b:c9:a3:c9:74:0e:05:ea:3c:7c:42:
                    ce:45:6f:55:a5:f9:05:4b:82:4e:69:a2:d0:d1:98:
                    03:0f:2a:f9:92:e8:d3:51:78:4a:c5:db:7c:e3:0a:
                    44:1a:90:c5:7f:56:20:01:de:57:01:80:c6:1b:33:
                    3e:6d:cd:58:09:a5:70:a5:27:7a:28:09:a8:dc:ed:
                    16:66:a1:2d:08:2f:69:90:6c:9a:79:ea:10:0a:a8:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:32:CF:B7:23:02:E1:75:C5:4D:27:FB:22:3B:03:5E:B0:D9:B2:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/23
                  149.112.109.0/24
                IPv6:
                  2602:f926::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:bb:f3:e7:b6:b7:e2:db:3d:c2:67:77:f9:4b:34:e5:ed:
         dc:2c:58:db:ba:8b:92:38:bf:c2:a6:75:1c:9f:ff:b6:04:6b:
         2d:c7:c1:cc:af:e1:ae:9f:9f:74:7b:b0:23:c7:75:0a:34:10:
         03:9d:7f:ff:2a:3c:17:e9:90:37:04:45:78:f8:12:7b:c3:05:
         5e:45:c3:e1:8b:f6:26:bf:67:c2:1e:65:f2:d0:83:4e:35:f4:
         29:b8:c9:f1:a6:ce:4d:53:f2:2e:0c:17:9e:e1:77:da:1a:6b:
         ef:29:4f:3d:48:a7:20:5d:e3:d0:93:05:0b:24:ea:90:a1:d8:
         8c:f6:72:b5:ce:b8:99:c1:3d:da:8b:44:d9:fd:19:5e:8d:eb:
         a2:47:ee:a0:7d:27:eb:4f:06:c3:89:24:ef:f1:4f:61:b8:53:
         09:8c:7e:72:3c:f0:e7:01:37:7e:8e:0b:96:5e:6a:61:35:2e:
         b0:47:ae:06:6c:2e:65:73:8b:b4:1f:5e:cf:2d:ae:4b:19:8d:
         06:25:e6:81:70:db:a7:81:49:b5:b2:cb:ab:3a:bf:27:c3:6f:
         5b:ec:af:7c:fc:db:10:87:a5:7b:c8:1f:fe:3f:87:71:50:6a:
         8f:0f:06:de:00:e4:56:d1:9f:77:ac:75:9d:fe:f1:49:8a:24:
         ba:61:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:09 2025 by rpki-client