Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa
File:                     e625c427-ed2c-3dcd-812d-91c421264688.roa (raw, json)
Hash identifier:          CxvkaZ4sWp18Kcko4hoz4zLgPR/uEnKUEmYtICKP0QE=
Subject key identifier:   50:45:3C:E2:45:C9:3E:47:7E:FB:9B:19:40:A7:C2:83:46:2F:52:3F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B9872463E82322D760A90E220
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     216321
IP address blocks:        23.162.176.0/24 maxlen: 24
                          23.162.177.0/24 maxlen: 24
                          45.59.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:46:3e:82:32:2d:76:0a:90:e2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=e3d5b748-eff3-4205-a2b9-ee573384e6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:4c:09:d3:2d:2a:36:fb:24:ad:41:6a:46:
                    80:44:e0:f8:ff:f3:bf:8d:0a:72:be:8a:f6:dd:76:
                    04:bc:45:b1:79:0e:e1:6a:7b:54:c1:ab:1e:4a:a1:
                    41:06:76:c0:dd:de:50:37:b3:39:17:91:a6:e6:4d:
                    da:41:98:aa:36:c8:a6:7e:56:da:f7:3d:08:e7:e0:
                    73:ac:22:55:80:68:6b:2b:34:f8:c1:7f:80:d4:d7:
                    43:29:c0:c5:64:dc:b1:b5:3f:5a:9f:ab:fd:6d:d5:
                    78:d0:ba:b9:c0:88:65:99:31:f3:c0:a4:47:c0:d1:
                    13:ab:62:bd:33:bf:16:4d:82:48:b3:cc:18:a3:41:
                    e9:7d:76:aa:0b:56:da:41:d8:71:a8:01:a4:d8:e8:
                    6e:66:c5:90:f2:c0:55:2c:bd:73:a1:73:0d:b1:58:
                    aa:6e:fc:e4:80:ac:0d:79:cf:56:22:61:60:52:c4:
                    9e:7a:b2:9f:8e:b9:c2:8f:5a:68:61:19:e5:05:8f:
                    82:d6:98:08:bd:af:df:fb:7c:d3:d9:49:52:fa:ea:
                    a0:76:9b:28:e9:3b:82:1e:11:3e:db:68:78:9c:f5:
                    ae:4a:7f:1c:14:7d:20:c6:64:25:16:35:7f:65:65:
                    d6:63:12:d4:b9:48:e3:f7:f3:5e:fa:f3:9e:91:83:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:3C:E2:45:C9:3E:47:7E:FB:9B:19:40:A7:C2:83:46:2F:52:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.176.0/23
                  45.59.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:21:a2:28:2a:30:b4:a0:72:58:6e:ac:0b:de:1c:c5:54:59:
         70:23:de:d3:6d:ec:8a:6b:b9:82:89:0b:dc:d2:39:07:4b:e7:
         82:ef:e4:f0:78:8d:0d:5e:f2:04:05:a7:5f:78:47:c2:c8:17:
         3c:d3:35:a7:17:d6:a8:3f:3b:f0:7b:dc:6c:f5:85:bb:e4:19:
         b6:8a:34:b6:f0:57:ad:4e:41:9e:bc:22:49:ea:98:45:d8:99:
         ed:62:ed:37:a1:99:a1:18:60:24:44:18:e7:39:63:a1:2f:15:
         60:07:d9:c3:4f:66:0a:3b:55:8d:f1:3b:61:0c:06:c6:84:fc:
         03:47:3c:0e:19:1e:5d:18:bc:fe:81:53:69:e2:20:d1:9c:79:
         a6:dd:3a:18:30:4b:fe:38:5b:2b:5a:a4:a7:32:59:58:7f:69:
         bd:8a:b6:76:76:2d:be:7e:ef:2e:3c:bc:b0:e6:ab:38:9d:c2:
         0d:70:9d:8e:91:a7:00:e3:31:cc:33:8a:61:45:57:ac:1a:a6:
         a4:a0:33:96:3a:8a:ff:4f:db:df:f8:1f:c3:a8:71:3b:83:85:
         87:04:d4:0d:a2:fb:39:17:ea:d3:3d:85:3d:18:7f:8d:2f:5a:
         42:fc:5e:bf:f6:43:c3:0f:1f:51:5d:6a:be:e8:dc:8d:9c:53:
         65:d5:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:09:00 2025 by rpki-client