Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
File:                     73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa (raw, json)
Hash identifier:          CwfU1ByVHuCy1D5O701UjnwY08ZFEOj1Ql761fUf3pQ=
Subject key identifier:   AE:19:03:E5:0B:75:24:C1:5A:D5:D4:D9:9F:05:ED:46:42:B4:28:E8
Certificate issuer:       /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial:       010D0C9F4328584B7B21F893E18D246FCC841B60
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     394868
IP address blocks:        23.174.0.0/22 maxlen: 24
                          23.174.4.0/24 maxlen: 24
                          2606:e780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f8:93:e1:8d:24:6f:cc:84:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=98f3fab3-5e8e-48b4-b46c-f1d1ae81b841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:37:6b:3c:9d:48:8a:48:89:68:8e:f0:f6:
                    e6:b3:80:07:bd:fa:f9:fa:96:a8:0e:a7:49:b5:5d:
                    cc:62:c3:c7:de:c4:43:e6:88:6f:23:bd:c2:2d:36:
                    ec:b9:5f:93:2c:fd:bf:0e:1b:09:8f:d8:9a:3c:f1:
                    b8:e3:2b:9c:d2:41:7d:2c:ae:36:a4:d8:d4:d3:f0:
                    08:e6:c8:63:f1:6d:f3:38:c4:87:63:25:ac:8e:c8:
                    8c:92:1a:14:22:72:91:d4:bc:c1:fa:00:84:dd:c4:
                    a7:e5:13:1a:f3:ec:37:41:bf:b0:5a:0c:a0:43:19:
                    dc:84:27:19:f4:f8:8d:c8:1d:7f:86:ab:3e:34:a1:
                    1d:86:98:23:44:5c:69:0a:9a:99:02:02:2c:16:fd:
                    c4:b8:c6:5d:ad:25:ab:1d:aa:c4:50:d8:7b:30:e6:
                    0c:de:a8:d6:e0:26:bb:e4:45:9c:ea:12:e8:18:16:
                    d8:33:b4:ef:7f:0f:72:c1:76:31:16:f8:50:ab:51:
                    0c:01:24:26:b8:3d:4f:dd:a8:99:c4:81:34:39:51:
                    ef:a1:f1:ff:44:e0:95:19:0c:c2:1a:64:43:cd:40:
                    9d:c2:a4:17:c7:35:20:1a:2b:48:7b:36:59:8f:c6:
                    a4:7e:f8:32:3f:e1:31:cd:3f:b4:00:1d:75:12:f6:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:03:E5:0B:75:24:C1:5A:D5:D4:D9:9F:05:ED:46:42:B4:28:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl

            X509v3 Authority Key Identifier:
                keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.0.0-23.174.4.255
                IPv6:
                  2606:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:ba:0a:7c:86:5a:b0:a3:10:1e:d4:e4:2d:2c:81:70:cc:
         05:ca:0d:c3:d7:a9:c5:1b:4e:41:71:46:b7:2d:46:06:e2:5e:
         ae:f2:09:95:cd:e0:bf:b8:e9:95:97:7d:88:24:ab:4e:76:fb:
         05:fa:20:45:0b:c1:fa:6f:7a:0b:c6:2a:c0:62:d9:84:05:6d:
         55:1a:f6:db:0e:be:b4:b3:60:67:3d:72:ac:c8:9b:72:43:be:
         4a:e6:34:2a:9b:90:b7:96:c8:1e:d0:93:e4:9f:d0:06:47:13:
         15:4f:20:73:0c:c8:0b:cc:18:68:0b:0b:8f:f7:3f:28:38:2d:
         e7:56:3e:ea:3e:21:a2:4e:87:a2:81:1c:46:ed:0b:3f:68:13:
         1c:5c:bf:3d:e9:74:0c:75:f6:9c:1e:a7:16:b1:38:17:d7:5b:
         c2:2b:76:9f:e3:6b:4e:75:11:b3:e3:89:45:70:7a:c9:7f:b1:
         fb:71:86:e3:56:a0:9f:cf:a5:a2:57:18:88:ba:5e:a9:21:3b:
         85:b8:2d:51:94:4d:15:d3:66:c8:4f:d5:75:ad:e0:b6:14:6d:
         25:64:12:9a:3c:02:d8:19:1b:71:64:09:87:58:2a:61:90:08:
         37:58:52:92:3c:a8:bc:2c:c9:4c:66:c6:04:5b:72:59:14:e6:
         a8:97:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:29:20 2025 by rpki-client