Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa
File:                     6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa (raw, json)
Hash identifier:          YPPkQ/nSIVfsUoF6zs9TkNPYvGo6RC58RJvwk90qFlM=
Subject key identifier:   2D:1F:0D:11:DB:8A:51:76:22:B8:17:2F:86:57:D7:9F:4E:57:C9:92
Certificate issuer:       /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
Certificate serial:       010D0C9F4328584A9FFBA81632E9578B7518DB00
Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     1030
IP address blocks:        23.167.40.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a8:16:32:e9:57:8b:75:18:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=ffa3705b-7266-4eb1-bf69-ea480f336183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:ab:19:8e:6d:b1:65:eb:d2:fa:5e:1b:71:
                    79:56:ab:ee:16:53:91:aa:fc:fd:be:39:a1:1e:f2:
                    21:3d:27:4d:b3:6f:7a:93:19:e3:3d:2b:70:35:c0:
                    3c:bc:73:13:a2:a8:c8:83:3e:10:7d:ac:83:da:69:
                    be:dc:41:a6:6a:dd:b1:65:45:2b:33:7d:dd:fd:ab:
                    d3:34:44:db:91:05:73:ac:c0:8d:55:17:a5:ef:71:
                    e3:aa:12:81:dd:36:4a:41:52:61:23:f2:a6:a8:7a:
                    a8:5c:4f:74:d3:e3:6d:fe:87:35:14:62:2f:aa:5b:
                    b6:9d:55:53:c3:70:58:da:0d:6e:13:04:0c:ac:04:
                    22:90:be:7a:71:64:60:f0:ed:a8:19:29:c0:74:1a:
                    24:13:43:8a:be:6d:0c:d8:de:2e:50:2e:8e:63:a1:
                    fb:5d:e1:78:da:77:0f:cf:6a:30:61:83:16:f9:4a:
                    0d:b4:68:60:4e:a3:75:1f:b9:a5:68:79:e4:cc:7b:
                    c8:8f:79:74:4d:75:54:b7:6e:e9:aa:53:5d:0e:da:
                    43:80:23:b1:4a:c0:1e:d3:16:e7:42:3e:f4:c1:8f:
                    79:f1:6e:d7:fe:dc:f6:69:6b:98:cb:34:80:f1:6f:
                    94:bb:4d:5b:ba:c0:6d:53:9f:d9:85:c4:30:e6:7d:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1F:0D:11:DB:8A:51:76:22:B8:17:2F:86:57:D7:9F:4E:57:C9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl

            X509v3 Authority Key Identifier:
                keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:88:03:30:db:37:f6:ae:c7:bd:bc:7d:09:12:6d:84:b8:
         9f:de:2d:62:24:ab:e7:f8:ea:5b:4c:09:70:36:cb:70:5a:55:
         42:57:fb:71:92:68:34:9c:e5:36:48:b6:0d:03:b7:46:f3:90:
         96:50:dd:e4:17:87:2b:70:e5:a8:0d:f0:e4:31:7d:3b:6d:c0:
         34:d3:b9:f9:17:7d:94:c8:c9:e4:89:e1:21:96:e2:97:e0:f9:
         8f:c6:ec:90:72:3d:d9:81:9e:95:2b:25:6f:1c:93:5d:bf:25:
         77:ed:80:f9:b2:9a:a5:ce:e6:79:ed:33:a2:b0:66:d1:ce:88:
         d2:14:71:ee:35:43:21:bd:56:65:d8:7a:08:9e:58:aa:50:b8:
         11:b4:ee:aa:6e:d0:c1:35:0f:fa:ef:14:e1:1c:29:2d:e4:6b:
         6a:91:c6:30:18:0c:3b:4d:a9:34:c6:b1:0a:0f:c5:d1:db:91:
         0d:92:53:99:36:ca:8a:47:6c:66:b5:18:8b:e6:ba:da:43:a6:
         28:9e:03:f0:51:93:ce:d6:e7:be:ce:53:7a:fe:39:c0:d1:3b:
         49:96:2c:78:fa:b3:60:f4:16:5c:28:b8:03:da:fc:d1:77:6d:
         99:22:f8:a8:c0:3e:11:e4:4c:5e:e0:68:26:f7:51:c4:9d:ec:
         a4:cc:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:32 2025 by rpki-client