Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
File:                     8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa (raw, json)
Hash identifier:          LgU3FG1V3BXhPLGy5G+b3lYpF3sC2p3c3C4TqKL7yd4=
Subject key identifier:   E6:50:32:92:62:12:E9:B2:2B:3E:7E:92:F5:A9:A4:17:39:72:CE:3A
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584AADF11CFEE39435C44D5D3200
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     18780
IP address blocks:        23.182.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1c:fe:e3:94:35:c4:4d:5d:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=5ce72d9e-02b8-4544-9345-20d4222219a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:ce:79:2e:0a:6f:16:d7:ec:a2:92:e7:78:
                    02:5a:7a:29:d8:12:a3:ce:11:72:90:18:20:49:c7:
                    e1:32:c8:e8:04:53:72:df:3d:14:b8:3e:29:a3:c4:
                    39:23:48:14:c7:f5:bd:1e:d1:7c:62:ff:f2:0a:7c:
                    23:33:12:39:fe:ca:3f:a4:c3:71:5d:ea:15:7a:78:
                    dc:c1:9b:7e:76:56:21:f5:cd:54:e4:9d:ff:de:5a:
                    57:b3:d7:da:95:84:fb:b6:50:c2:75:8b:36:38:ed:
                    9e:1d:3d:4a:50:6d:f4:ec:d4:a6:fc:f0:7c:fd:d8:
                    bc:2f:01:a2:28:eb:7f:12:60:f3:f5:4b:9b:c0:d9:
                    0e:13:3f:2d:a4:ca:c7:a4:00:3f:f7:92:16:74:3e:
                    6d:73:95:ae:bc:44:aa:2a:6c:ac:5a:07:aa:8f:d0:
                    60:75:6a:4a:46:14:4d:e6:7d:8b:5e:f2:4e:2c:62:
                    74:4e:3e:1f:3d:b4:2c:9f:9e:8a:66:86:82:b3:ce:
                    c4:0e:71:42:ac:17:7e:2e:5b:3c:d3:b5:f0:87:04:
                    e9:80:59:3c:02:23:45:ea:3d:cf:02:fc:02:ec:5a:
                    c7:b1:9e:97:82:91:f3:35:f0:4c:50:f2:ac:c8:0c:
                    9b:fd:78:06:7c:93:b3:df:ea:56:fd:68:f1:03:cf:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:32:92:62:12:E9:B2:2B:3E:7E:92:F5:A9:A4:17:39:72:CE:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:88:41:c4:00:3e:8d:d9:1b:40:f6:20:f2:9f:51:c3:e3:
         8a:09:bf:9e:bb:54:d6:3f:50:94:fa:ca:f9:dd:c4:6d:7e:2f:
         31:83:0b:50:26:a7:61:e8:de:8a:23:a3:24:02:14:18:50:c0:
         1a:ae:7b:7c:1e:7e:10:ef:4b:5a:13:15:06:8c:b6:54:ce:5b:
         8f:26:2c:f4:b9:69:db:7c:ea:a3:b0:c1:cb:fe:63:33:a7:0d:
         3b:9b:5d:65:e0:a1:94:9a:d1:7f:37:1b:61:f5:b6:0c:6c:92:
         8c:41:28:e6:ad:67:ce:bf:6a:9e:ac:e5:8d:5e:39:ee:d7:05:
         82:4e:e3:1b:90:d1:0c:76:fd:c7:30:06:d1:96:e4:6d:5f:6d:
         b7:32:93:d8:5d:aa:27:3e:1a:d0:ed:ba:5e:b7:78:a7:45:37:
         a4:c5:4f:e9:ec:85:b3:73:cb:44:94:b3:ec:43:b3:0d:d6:5d:
         fd:38:3a:7f:94:61:3f:18:cd:5a:64:e5:be:e7:56:7e:b1:10:
         10:bf:3e:a8:c2:a8:0c:be:24:54:fa:59:fe:76:bc:29:93:04:
         70:f2:19:d7:9d:a1:de:f4:50:10:c8:f6:76:27:09:77:32:70:
         f0:99:c7:72:78:42:5f:95:79:42:68:c5:8f:4f:12:34:2e:c6:
         33:31:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:27 2025 by rpki-client