Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5a11f9d4-af71-3c80-8646-2457e6c1ad3b.roa
File:                     5a11f9d4-af71-3c80-8646-2457e6c1ad3b.roa (raw, json)
Hash identifier:          W4udK9qz2iMxKrPNrbjzZobhSC1M2skFEB1dosRzc0o=
Subject key identifier:   C0:F7:D7:31:D4:18:97:E9:4B:01:78:78:9C:DD:A5:56:8B:C2:76:64
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F4328584B91597F0140F8297B4CCCA780
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5a11f9d4-af71-3c80-8646-2457e6c1ad3b.roa
Signing time:             Sun 19 Oct 2025 00:00:14 +0000
ROA not before:           Sun 19 Oct 2025 00:00:14 +0000
ROA not after:            Sat 17 Jan 2026 01:00:14 +0000
asID:                     266777
IP address blocks:        23.175.40.0/24 maxlen: 24
                          23.175.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:59:7f:01:40:f8:29:7b:4c:cc:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Oct 19 00:00:14 2025 GMT
            Not After : Jan 17 01:00:14 2026 GMT
        Subject: CN=9cdbec9c-9229-4d1f-8412-78a2b0666d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:a7:5b:e4:f2:4c:d0:c8:e9:a7:be:86:74:
                    15:90:4d:f8:ba:32:83:42:18:19:bf:01:b2:d2:74:
                    3d:73:48:5d:a6:03:d1:64:a8:3b:a4:bf:03:1c:50:
                    31:94:0d:a3:ff:16:8e:6c:32:81:ea:00:01:a0:5f:
                    bf:35:d6:83:54:d8:0f:4c:98:2f:da:47:b4:5d:98:
                    d1:a4:19:7a:9b:da:34:02:fd:e0:9a:68:bc:ff:d4:
                    1d:e3:94:1d:0a:9c:40:79:bf:52:2a:96:0d:b2:bf:
                    14:99:f0:4d:19:27:c7:d1:db:9f:d9:69:b6:64:8e:
                    d2:b6:96:66:a3:c4:e8:93:9b:e0:c6:67:2b:30:2d:
                    52:52:0f:88:7b:0b:50:24:12:24:84:e7:a0:2c:92:
                    ce:a7:34:7c:72:a6:8f:6b:4b:ff:b5:d8:a7:78:db:
                    61:5d:9c:59:b3:95:ab:cb:7d:df:bc:d3:b7:60:c0:
                    75:32:3b:da:06:ed:8a:22:50:bc:c1:c3:c5:b0:f0:
                    2d:b8:70:68:0f:85:35:2d:67:7c:93:5c:ff:e7:25:
                    15:1b:04:31:dd:2a:f7:1c:d7:a7:af:9c:a7:7a:e3:
                    5b:1c:16:04:e1:1d:37:94:23:a3:2e:7d:db:c8:fc:
                    89:fe:87:f6:31:cf:61:f9:ef:4e:29:a8:75:fa:05:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:D7:31:D4:18:97:E9:4B:01:78:78:9C:DD:A5:56:8B:C2:76:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5a11f9d4-af71-3c80-8646-2457e6c1ad3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:01:6c:78:c7:20:68:ab:9e:a2:b6:41:53:90:bf:3d:7d:
         0d:e2:4f:5e:93:90:29:ec:92:b1:7e:68:4f:96:c9:29:19:b8:
         6d:88:4f:3a:aa:66:47:c2:97:38:5c:56:99:79:9c:22:f5:7c:
         ac:7a:89:e8:f9:4e:0c:4c:d9:5b:8b:47:e5:96:50:6f:bd:e3:
         6a:80:40:c4:4c:49:d4:f0:2c:2d:c1:00:28:86:c3:d0:47:92:
         b1:10:a6:ad:a1:67:52:b6:9a:69:a1:77:80:fd:ea:a6:f3:2e:
         da:35:3f:69:55:3c:a7:5b:8f:ff:a6:ff:74:ff:da:75:ca:a3:
         2f:26:1c:d6:17:69:9f:3a:0b:75:de:ab:79:71:a4:3c:cc:47:
         a2:3d:ed:5e:be:32:20:9a:1d:51:c8:a5:00:ab:31:28:91:b0:
         b1:c4:37:cd:bc:c0:f6:9b:9c:ef:ff:16:6d:72:40:18:b4:4d:
         e7:cc:19:90:4d:11:16:84:2e:44:10:ad:92:46:da:97:49:4f:
         57:17:21:1a:bd:4d:97:d2:6a:33:6d:46:28:b6:bb:e9:d5:85:
         75:c3:ec:ff:4b:d4:5c:42:6a:c4:b4:ef:14:f3:11:60:fc:40:
         45:84:5b:8a:d2:27:7e:d0:34:71:b7:4f:e3:05:89:21:b4:a3:
         9a:b2:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:06:09 2025 by rpki-client