Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/646c5cf2-6f09-397c-aa85-5164d230c503.roa
File:                     646c5cf2-6f09-397c-aa85-5164d230c503.roa (raw, json)
Hash identifier:          JzaaGsDJjeBMbr+zKAaaID766oDLK5tH4gNi+ChBqBg=
Subject key identifier:   5D:84:48:6B:94:14:00:D2:DB:53:A6:8C:91:34:43:AF:6F:9E:B8:93
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328584B3986FCF7B15E771722BF4C80
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/646c5cf2-6f09-397c-aa85-5164d230c503.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     27364
IP address blocks:        72.23.0.0/19 maxlen: 19
                          72.23.32.0/19 maxlen: 19
                          72.23.64.0/19 maxlen: 19
                          72.23.96.0/19 maxlen: 19
                          72.23.128.0/19 maxlen: 19
                          72.23.160.0/19 maxlen: 19
                          72.23.192.0/19 maxlen: 19
                          72.23.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:86:fc:f7:b1:5e:77:17:22:bf:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=b6bb468a-9c3b-4512-8f53-216e2918bc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:52:00:6b:98:ef:fa:66:a0:3c:bd:36:1e:
                    d8:5c:1d:38:e2:eb:fc:cd:fe:ef:9f:c1:ea:dd:cf:
                    d6:c7:ba:32:54:54:5a:58:dc:90:38:a8:7e:eb:64:
                    29:83:74:29:4b:bc:7d:e8:b0:71:de:f5:86:6e:20:
                    bf:65:b9:cf:fb:7d:f9:27:77:f4:66:92:6a:b3:6b:
                    69:74:bf:8b:f0:54:bf:26:58:39:ff:7e:c4:72:9d:
                    61:98:9b:22:38:7d:36:ec:f6:50:4c:47:e9:9a:b2:
                    5c:43:99:1a:13:72:95:29:72:d8:85:a6:94:82:5d:
                    12:3b:cd:19:41:fc:88:d6:2a:ee:99:63:4c:4f:1b:
                    e5:0d:b9:c2:2d:c5:89:d2:ea:fe:1d:f4:2e:de:8a:
                    5a:c4:e7:d1:a3:60:69:9a:bf:19:3d:52:07:a3:b4:
                    13:b4:54:cb:d2:08:86:59:2a:77:26:48:88:f9:75:
                    3c:40:f6:cb:7f:60:3b:fa:ff:cd:f0:8b:19:8b:a2:
                    48:2b:ce:ae:08:f1:7d:f7:10:a5:e5:48:d4:f8:3a:
                    9f:69:2e:22:80:51:3e:de:a5:e3:7a:db:bf:b4:b9:
                    f2:90:83:5a:70:f6:30:b1:4b:10:2a:49:46:57:e8:
                    f0:1a:4d:4c:4d:55:7a:5e:26:4b:51:39:af:55:87:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:84:48:6B:94:14:00:D2:DB:53:A6:8C:91:34:43:AF:6F:9E:B8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/646c5cf2-6f09-397c-aa85-5164d230c503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6f:d8:57:2e:79:08:97:15:1d:15:7c:c8:84:d7:7c:e9:82:
         e3:de:8e:c6:0f:74:70:f5:08:a7:a5:e1:43:d3:45:71:aa:76:
         de:b1:6e:dd:ac:cd:08:15:dd:64:b3:96:cd:37:b0:c8:f3:5f:
         57:5d:5d:1a:a3:0c:23:9a:8f:cc:a4:98:21:61:ed:8b:c7:db:
         12:58:7e:97:ae:a4:fa:5f:16:f3:88:50:11:0c:9a:66:4e:9c:
         9e:a0:d4:34:5e:19:d2:20:d8:42:b6:00:8b:85:97:91:2f:99:
         5a:0b:ff:8f:e6:f4:67:a3:9e:e7:9f:ff:66:a3:53:69:cd:79:
         ab:61:9f:10:93:8f:35:06:68:dd:32:c3:f4:23:9e:56:b5:0d:
         a1:5e:41:26:ef:1a:d5:8a:54:28:51:df:17:5f:41:85:95:cc:
         21:71:b2:76:8b:67:ea:fe:15:42:c3:fa:9a:aa:b9:0d:4b:1f:
         9f:24:58:46:e6:db:9a:74:6a:d8:0d:0d:f6:3a:e0:de:c1:8f:
         8e:d9:88:11:7d:52:e6:eb:67:9c:9c:04:56:db:26:93:bc:bd:
         a3:c8:22:23:db:f6:26:a8:eb:ce:ad:ad:8e:47:62:16:9f:68:
         58:a6:32:de:19:4e:6b:15:65:40:36:17:21:6e:a3:6e:76:b6:
         3a:95:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:29:51 2025 by rpki-client