Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/a339b963-39c3-3123-a97a-62a737e00fe1.roa
File:                     a339b963-39c3-3123-a97a-62a737e00fe1.roa (raw, json)
Hash identifier:          ss0pSwkBXLDljIZ6PwC1nZGPIdSJUan4b0Polre24eE=
Subject key identifier:   FD:73:CD:B8:B5:81:95:41:22:C7:85:0E:64:90:E8:21:00:0A:63:2D
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584B461706D508429C0D60D08D80
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/a339b963-39c3-3123-a97a-62a737e00fe1.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     20213
IP address blocks:        207.174.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:17:06:d5:08:42:9c:0d:60:d0:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=f0017b98-957a-4792-b1d6-d31fa1a20634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:7b:6b:56:ab:69:26:8a:c8:5f:90:59:0a:
                    5e:b1:4d:ad:7d:2d:50:b2:4c:e8:ec:72:46:b2:25:
                    56:78:ac:7b:f6:57:b1:13:25:20:4c:9d:a0:4e:3a:
                    6e:fc:0f:72:81:a5:5f:a9:c1:f6:7b:b0:e0:eb:18:
                    f8:27:84:d3:97:f2:24:61:c0:f6:aa:e1:20:29:4f:
                    f2:b4:c6:0a:2c:0a:68:c0:eb:29:46:03:86:55:25:
                    40:54:71:61:a5:b2:83:d2:74:c7:ea:6b:4f:74:33:
                    48:34:88:98:43:86:57:c3:8a:13:61:32:83:a5:a0:
                    ff:99:a6:e2:7e:b4:b9:7a:26:1d:04:d5:5a:6f:d2:
                    be:cb:7a:dd:6a:02:af:b6:a2:92:12:ad:0a:1a:6f:
                    e7:21:2b:ba:fe:21:bd:40:e0:6f:3c:b7:ef:17:08:
                    a1:55:6e:ac:84:0b:56:78:0b:e7:66:7e:08:43:39:
                    2c:ed:96:b7:51:d7:75:ee:23:12:40:df:18:c2:d4:
                    ac:77:48:a2:2d:73:06:fa:eb:66:a9:a2:46:ee:a1:
                    20:cf:32:4e:05:94:b9:d4:6e:3f:eb:4c:69:3e:68:
                    11:d6:02:49:40:bc:02:99:05:8e:c2:ae:e5:d4:79:
                    d2:88:b0:b0:3b:a6:19:e8:1e:f4:d1:9f:e4:f0:ba:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:CD:B8:B5:81:95:41:22:C7:85:0E:64:90:E8:21:00:0A:63:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/a339b963-39c3-3123-a97a-62a737e00fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:9e:f2:04:da:32:fa:1e:6c:bb:04:b8:02:18:4e:39:6e:
         3d:39:ee:96:70:79:f7:c7:40:50:14:5c:0c:98:cc:1f:e2:ea:
         5a:c1:32:52:bf:37:cd:c3:92:c2:af:3d:04:f5:72:2a:8f:be:
         5e:1e:b7:e4:9f:f0:89:9b:9c:6e:48:95:18:58:0e:55:c0:0e:
         34:52:cd:e2:7e:b8:26:2b:0a:44:ed:b5:2f:29:a9:a1:21:74:
         a5:88:fe:0a:70:55:37:ac:92:ce:11:9f:58:2e:37:61:d2:77:
         c2:3a:a0:51:6a:db:71:5d:52:37:ef:f9:6b:5a:f9:71:38:c9:
         00:c6:ec:3d:dc:f7:f8:8f:f2:9a:d5:dc:85:40:e4:4f:56:8b:
         7d:58:d1:4f:cb:b4:f8:52:71:36:33:33:1e:96:6c:4f:e6:01:
         c2:b5:8d:11:ae:86:d2:96:ad:e6:b4:a4:d2:dc:5d:3d:1a:a6:
         aa:fb:76:f8:9a:7d:cd:31:ca:3b:83:1d:84:f5:5a:22:64:f6:
         13:cd:70:e0:93:95:48:b3:e5:1c:71:5e:bf:2e:1e:ac:fb:16:
         e1:78:10:58:c9:01:15:09:06:47:36:56:5a:37:56:19:5f:9b:
         77:1a:e5:95:d2:c0:a6:5f:da:3a:4c:95:06:96:2a:85:03:b1:
         96:ea:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:27 2025 by rpki-client