Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          AKsiWIx0U6br6wISHzsZVHCqmkbvBS0e9YDYtx1WiWo=
Subject key identifier:   F3:0D:A3:1F:D6:2D:72:C0:30:A8:62:61:9B:98:91:D9:B7:1C:6C:03
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F4328584B63674B933774444544205950
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          152.228.36.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4b:93:37:74:44:45:44:20:59:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=9e8e9302-9f0a-4af5-b4e1-474848e3584e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:0e:59:c4:28:96:4a:7d:4c:db:28:d4:4b:
                    06:f8:05:bb:de:cd:e6:98:7d:5f:45:67:8d:3f:13:
                    82:29:b7:62:3f:45:ca:e5:bb:02:cd:d3:47:af:53:
                    7f:de:f7:78:b7:a6:6f:8a:24:e2:cf:a6:d1:53:a3:
                    04:3a:f2:35:bb:94:b7:01:4b:3d:58:16:33:85:c3:
                    ef:60:45:e6:d5:d9:8d:29:da:4a:8f:bf:37:c3:b3:
                    a2:d8:28:2e:90:92:68:d4:5c:12:5c:71:87:8e:db:
                    94:7c:05:13:9a:ff:94:8d:f2:f7:8a:39:25:0f:8e:
                    cb:15:69:ba:a4:98:ad:2a:fb:42:de:50:80:9f:29:
                    72:75:d0:2d:18:13:56:71:f9:82:31:50:d0:dc:80:
                    3d:44:bc:40:d9:79:12:f6:91:12:3a:f9:52:e8:43:
                    3e:fe:45:c9:6b:a5:86:45:99:a1:22:01:4a:f6:cc:
                    0a:80:0f:35:c5:f7:33:67:4b:46:a9:5c:68:d7:71:
                    00:03:d8:9f:1e:0f:2b:39:33:ec:27:24:b5:2a:7a:
                    00:28:df:5a:56:56:91:25:bd:7d:2e:90:76:56:10:
                    3b:96:e9:8f:b0:7b:b3:a6:2a:25:f8:ed:37:94:45:
                    28:fa:39:3d:45:7a:ce:86:dd:a5:91:b6:27:1a:5d:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:A3:1F:D6:2D:72:C0:30:A8:62:61:9B:98:91:D9:B7:1C:6C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  152.228.36.0/22
                  168.203.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:63:d1:74:02:12:5f:42:33:a2:06:c4:2c:bb:32:49:5e:
         89:6f:ef:84:94:3d:b6:d1:7d:ac:af:f8:4b:5f:d2:3b:d8:90:
         33:fe:df:6d:cb:5d:6b:86:67:ac:1e:f2:b4:3b:27:dd:4a:49:
         ee:3a:39:d7:83:fd:3f:d8:5a:9b:10:3b:ba:6c:0d:a9:4e:1f:
         7e:26:19:c7:9d:86:6c:b9:18:89:e4:72:54:4e:fe:c3:b0:d9:
         f1:2d:92:66:8a:49:5c:67:24:c4:08:70:74:44:15:dc:86:2c:
         0c:93:0b:3a:83:12:11:29:4e:04:60:3d:11:c3:c5:6a:fe:05:
         a5:c7:7e:cb:79:5f:a9:da:89:b8:fc:6c:7c:c7:2b:d6:47:00:
         ca:09:0b:a1:4c:d1:80:8d:da:6e:8e:4d:33:fe:51:4e:e1:fd:
         05:7f:f3:95:81:9f:a0:30:ba:f8:a1:a1:38:8d:77:23:96:88:
         84:a0:d4:e0:7e:d8:09:b1:5c:42:0e:8c:e6:92:c3:78:aa:aa:
         47:d4:0d:55:1f:01:21:da:66:e3:38:2f:92:71:af:9a:5b:68:
         46:46:38:53:93:22:18:3c:d8:74:78:27:fe:32:17:d6:66:a1:
         36:9b:a8:f1:d4:da:6b:f7:65:f1:1d:e2:ac:71:c8:81:b5:61:
         66:78:fb:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:43 2025 by rpki-client