Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4ed19f2f-685b-337e-a5ef-568bf7d20094.roa
File:                     4ed19f2f-685b-337e-a5ef-568bf7d20094.roa (raw, json)
Hash identifier:          MtaJe2BvJjS0oufKoEy5pwAqnGCMdWYkGylg2XwQbdw=
Subject key identifier:   1E:3A:07:35:52:7F:EB:29:13:EC:E0:E0:2F:33:00:D3:E2:6A:FA:67
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F4328584B25E0E0BD9EFC3B1A6386C3C0
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4ed19f2f-685b-337e-a5ef-568bf7d20094.roa
Signing time:             Wed 10 Sep 2025 12:05:43 +0000
ROA not before:           Wed 10 Sep 2025 12:05:43 +0000
ROA not after:            Tue 09 Dec 2025 13:05:43 +0000
asID:                     47629
IP address blocks:        23.174.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:e0:e0:bd:9e:fc:3b:1a:63:86:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: Sep 10 12:05:43 2025 GMT
            Not After : Dec  9 13:05:43 2025 GMT
        Subject: CN=cee251f9-c26e-428b-92eb-f4bb67ba685d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:83:3b:fb:b5:c3:94:7d:bc:b6:12:6d:33:
                    74:ba:bb:bb:67:de:3d:3f:68:12:5e:91:2d:a5:ef:
                    cc:cf:55:25:1a:ae:b3:4a:e5:c9:84:f5:05:6e:d7:
                    38:07:67:b0:02:46:01:2d:a8:29:0c:6f:2a:8d:3e:
                    bb:d8:30:d7:07:23:fb:27:ba:d4:67:b2:e9:a3:d5:
                    13:93:da:a1:3c:75:84:38:17:9f:d0:0a:db:a1:1a:
                    87:08:00:d1:7b:af:db:0c:4f:0c:05:8c:78:aa:62:
                    e4:ab:e7:96:b9:2b:1c:71:94:9b:94:3f:26:c7:91:
                    62:5a:cf:7c:e9:57:e2:77:7b:cd:1b:70:5e:22:18:
                    7a:57:22:76:ca:07:bb:f8:62:a0:c3:bc:4d:15:ba:
                    c7:c4:e5:e5:e1:3e:37:3d:b6:a7:ca:e6:70:63:8b:
                    fc:ff:b9:7e:68:43:34:25:5c:c4:bb:b6:70:5d:77:
                    02:95:97:e7:78:43:08:57:28:8b:20:1d:af:b1:33:
                    dc:27:1d:1a:c6:0f:d0:f3:2c:cd:a8:27:24:db:34:
                    66:1d:09:c7:42:ad:85:4c:d3:e1:14:85:d2:b6:39:
                    ac:45:15:41:96:1c:89:a8:50:1b:a1:32:46:83:10:
                    11:c2:2c:c2:19:cb:67:f7:ae:01:fe:5e:cb:da:e7:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:07:35:52:7F:EB:29:13:EC:E0:E0:2F:33:00:D3:E2:6A:FA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4ed19f2f-685b-337e-a5ef-568bf7d20094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e0:94:0c:d1:74:aa:10:b7:13:74:6a:d6:8b:cd:c1:e7:1d:
         6c:89:c0:47:b0:ed:9e:5d:7a:71:37:2d:d0:81:e1:95:7c:bc:
         79:ba:f9:f1:e3:e3:5e:5a:9e:e9:0b:a8:a9:c6:99:72:68:05:
         95:a0:55:fb:84:80:29:5b:c3:0c:10:c6:11:11:11:3f:ea:8f:
         47:ca:81:13:47:c8:0f:fc:a4:63:51:5e:86:46:43:5b:34:95:
         ac:0e:a2:c3:b9:65:cc:8e:b4:72:34:69:d2:dc:b4:bc:64:41:
         37:6a:e7:cf:96:29:29:5b:ba:4f:ce:c8:2b:9b:1b:f8:fd:76:
         03:43:a9:9e:d5:c8:10:fa:3a:9d:8a:ab:89:01:6f:7f:76:ad:
         9e:c5:b4:7c:4f:e3:11:e7:18:ea:c4:bd:05:7a:58:1c:eb:36:
         74:f6:d9:df:d7:26:0b:39:01:16:dc:34:2b:7a:60:61:54:b8:
         70:83:c4:33:17:2b:fa:dd:49:38:ed:69:54:f1:d2:0c:51:10:
         75:e4:7b:43:ac:00:d6:f0:87:e7:9a:10:0c:e7:86:a6:48:e0:
         4f:60:06:48:2b:5e:df:57:9c:5f:b4:f6:99:f9:ad:d8:d1:41:
         78:b9:b5:9d:d6:33:17:43:6a:9a:79:c7:6e:4c:18:b1:1a:3f:
         41:7c:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:22:19 2025 by rpki-client