Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/d113d69e-f05f-3138-9b51-59af9b3a7a66.roa
File:                     d113d69e-f05f-3138-9b51-59af9b3a7a66.roa (raw, json)
Hash identifier:          Pmz0/mfyIx+Rvz0Nw+ibHY3Fd53ShFR2rP7rGdjfJbI=
Subject key identifier:   42:68:41:F2:38:30:1C:7A:C2:C2:EA:41:EC:72:71:1E:DC:C0:EC:C2
Certificate issuer:       /CN=605ef18e-eb43-492e-a589-20f12375c0ce
Certificate serial:       010D0C9F4328584AA42B8520C1F96EA644256000
Authority key identifier: E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/d113d69e-f05f-3138-9b51-59af9b3a7a66.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     40785
IP address blocks:        23.163.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:85:20:c1:f9:6e:a6:44:25:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605ef18e-eb43-492e-a589-20f12375c0ce
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=146667da-2aba-4c9c-83bc-d08e1406d766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:f8:e8:9c:43:ee:00:c4:5d:5d:50:e3:f6:
                    7c:62:51:c0:f0:e7:e1:34:b4:ea:26:92:2b:36:d0:
                    26:97:20:6b:7e:de:6f:c7:21:0c:c2:ff:e2:3e:42:
                    f7:ae:0a:e4:30:81:e5:5f:85:6a:dc:01:2a:a6:7f:
                    91:c4:e7:f2:cf:8b:bb:f1:59:20:7f:1c:dc:a2:9b:
                    a6:0b:90:47:9c:5e:32:1b:30:99:53:60:9c:7c:3c:
                    cb:8b:94:b5:a1:9f:36:26:bd:f8:b9:a8:e7:53:df:
                    8d:da:c6:a8:e4:71:6a:cc:20:35:39:bf:6a:df:b8:
                    ea:56:cf:70:5c:5a:8f:5a:ec:04:66:1b:7a:ca:56:
                    37:45:c6:c1:e7:4f:42:77:95:3b:1b:c4:37:68:4b:
                    5d:41:c4:d5:04:76:43:db:1e:16:1e:27:f2:b7:40:
                    f6:9f:5d:bf:cc:94:12:38:98:ae:aa:5d:d8:93:c2:
                    d3:6d:23:c7:87:4d:b5:b7:94:82:d7:8c:7d:13:71:
                    95:11:14:94:40:c8:41:99:3e:64:71:41:b4:2e:30:
                    49:f6:38:8c:64:02:99:06:a8:29:8b:c6:7a:6e:8b:
                    7c:fb:ee:98:f2:66:30:34:af:5d:3f:9e:ea:58:a6:
                    06:75:ec:8f:6f:28:21:0f:e1:d0:f2:8c:e8:d5:ac:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:68:41:F2:38:30:1C:7A:C2:C2:EA:41:EC:72:71:1E:DC:C0:EC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/d113d69e-f05f-3138-9b51-59af9b3a7a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl

            X509v3 Authority Key Identifier:
                keyid:E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:9d:b3:89:8e:7b:14:41:a4:c3:cd:1c:13:16:dc:83:63:
         3f:df:8a:7d:02:fd:f7:3c:f4:77:33:af:19:b0:b7:95:5f:60:
         6c:36:4a:d3:09:ca:9a:b4:5b:b6:9e:ba:31:3f:82:07:38:37:
         d2:12:4f:ad:ce:ed:d4:86:91:20:7c:94:8e:1b:c9:e4:2b:4b:
         fc:a8:96:54:9b:08:f7:5d:4b:c3:04:4b:5e:fc:72:53:90:75:
         b2:62:c4:0b:9c:65:51:e7:dc:f9:58:af:57:15:37:97:51:d5:
         bf:93:9d:59:74:6d:f3:d5:46:42:fa:f9:ee:81:d0:a4:8d:53:
         c7:95:d8:47:7e:59:1c:c7:28:59:eb:76:a0:ab:02:c2:74:46:
         29:c5:92:bd:24:0b:e9:03:5b:6d:08:87:2d:e5:79:0a:a9:49:
         40:0b:75:50:3b:39:07:28:2d:cf:44:36:07:ba:78:2c:7a:fe:
         33:a4:3c:05:35:ac:e0:54:aa:bb:89:76:4d:77:35:59:b2:6a:
         bb:8f:31:c2:e4:b1:d3:f3:44:d2:5d:83:7b:da:5d:62:10:f4:
         34:62:e4:45:dc:eb:70:fb:b9:92:20:0d:87:4e:a1:d1:d8:97:
         13:67:e4:9e:99:6c:bc:99:c6:94:79:0e:5b:6a:28:c4:dd:d0:
         c0:f0:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:13 2025 by rpki-client