Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/105656ac-b385-343c-8f88-fe05eea21f6f.roa
File:                     105656ac-b385-343c-8f88-fe05eea21f6f.roa (raw, json)
Hash identifier:          eS+hbL6joPFnMLQXKBa3DhUqWdoDWgvUgUuZB2UiPDM=
Subject key identifier:   16:09:79:4F:A6:6E:F2:0A:90:84:FB:85:07:F1:E1:44:F5:58:12:9E
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F43285849DC8FC62D1E6750E041B808C0
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/105656ac-b385-343c-8f88-fe05eea21f6f.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     61400
IP address blocks:        23.140.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c6:2d:1e:67:50:e0:41:b8:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=09ca1872-41f2-45ef-b16c-15b00f576926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:72:23:7c:ae:26:de:78:e8:e9:09:ff:82:
                    22:2b:a8:c0:6e:58:de:f5:d0:8b:d5:56:02:02:71:
                    b3:f1:c3:59:c9:ff:e6:bb:5d:e0:a5:32:e9:81:2f:
                    d4:7d:9d:33:2e:91:33:41:3c:59:d1:30:6f:35:1d:
                    14:c1:55:58:44:29:17:d8:0f:d0:03:32:d0:f4:87:
                    a6:b9:01:46:87:b5:cd:8b:66:75:27:4d:e6:2d:36:
                    d4:04:36:2d:3c:a9:01:49:24:68:fb:47:98:3a:ed:
                    21:2d:6f:0f:c2:c9:37:4f:07:e6:78:d6:8b:58:1c:
                    16:1b:8b:3a:dd:e9:8e:a0:5a:37:15:db:d3:09:82:
                    e3:7f:1f:17:4d:99:4d:0c:82:2e:61:60:0c:75:71:
                    87:e4:7f:c5:77:e6:e8:57:90:5a:76:39:8d:81:09:
                    a5:4b:74:c4:ec:ec:92:f0:04:0b:88:2c:28:87:1f:
                    ea:04:d3:3d:27:49:0a:77:b5:7c:12:50:30:35:93:
                    27:3c:b4:d4:5e:da:2e:88:60:01:9b:eb:15:72:29:
                    3f:67:b2:42:98:c9:b0:6e:54:0a:0d:45:b6:6e:63:
                    dd:f3:a1:28:1e:e3:3c:63:ac:2e:13:7b:bb:fa:2b:
                    54:a7:88:8b:dc:48:ee:6b:5e:25:da:22:0b:38:54:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:79:4F:A6:6E:F2:0A:90:84:FB:85:07:F1:E1:44:F5:58:12:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/105656ac-b385-343c-8f88-fe05eea21f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:db:fe:9c:24:8b:a7:1b:a9:d2:80:00:f8:0b:78:9a:8a:
         ee:9a:a3:dc:4c:df:84:0b:b4:58:e0:1b:af:51:63:6f:8f:0c:
         f5:f8:94:31:e7:4d:31:42:44:93:1d:76:45:4a:1a:08:f8:57:
         45:7f:60:5c:14:19:2f:c3:70:ff:80:30:f7:d0:59:06:85:bf:
         cb:80:9e:8e:24:58:a0:2c:c6:98:b8:ea:64:58:42:a9:c9:cc:
         4b:87:e7:1a:1e:12:04:36:e3:28:fd:0b:2a:3b:47:8a:63:cd:
         f0:f1:4a:7c:0c:1c:a5:e9:79:a2:a3:a3:8d:95:c8:12:c7:c3:
         b9:17:07:02:3c:fa:d6:35:7c:23:85:ee:c5:b2:c5:59:19:e5:
         3a:51:e3:48:9e:56:40:fe:24:e6:3f:5d:c1:97:84:76:74:8e:
         a0:c3:fb:c1:b6:26:60:ec:00:15:5c:76:e3:c8:61:36:e3:d4:
         fe:4a:1e:4b:2b:55:b1:92:0d:0f:c7:03:8c:42:e9:bc:b5:6d:
         10:b1:6b:cc:f1:b8:6e:d8:67:24:9a:82:56:2d:75:2b:60:02:
         a9:ad:a0:53:fb:c4:64:98:9e:ff:81:7a:c7:d0:7e:9c:a4:7a:
         d6:e3:7d:fc:d1:50:8f:ec:3b:75:b7:71:0a:9c:05:ea:ec:19:
         90:98:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:00:01 2025 by rpki-client