Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa
File:                     e625c427-ed2c-3dcd-812d-91c421264688.roa (raw, json)
Hash identifier:          xPFj7yCyVJ4qkOaqMBq3tny5Cwj+7yUHZLXqZCjU7o8=
Subject key identifier:   48:CF:7C:8D:2C:31:5C:16:04:5E:1E:99:58:98:9C:C0:B8:64:82:4F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AB7B624AA1D1E948CA6A06080
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     216321
IP address blocks:        23.162.176.0/24 maxlen: 24
                          23.162.177.0/24 maxlen: 24
                          45.59.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:24:aa:1d:1e:94:8c:a6:a0:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=72cec23f-21a7-4c19-bf5a-d7e6b8619374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:8b:33:40:57:13:bd:e6:f7:00:3a:c6:15:41:
                    b7:10:15:89:27:b0:ba:6b:b2:8c:59:97:94:fe:47:
                    2f:b6:0f:4b:0f:a9:19:09:85:53:4f:b9:8f:0e:bb:
                    51:70:04:0a:c4:36:41:bb:fb:56:d9:4a:70:d0:58:
                    78:d1:06:1f:9c:67:d7:70:a4:ae:e5:2a:3a:a2:40:
                    52:44:36:e9:b0:69:a1:14:58:ef:c0:1f:c5:3f:8d:
                    f6:b0:64:46:b6:ca:5c:4d:42:33:b5:84:43:78:a7:
                    da:4b:ef:2f:4c:8e:7a:19:cc:2e:e6:d0:50:24:47:
                    70:c1:77:6b:c5:05:4b:ea:e0:af:39:f1:f2:62:f4:
                    c4:d7:9d:fa:0b:34:04:4c:f5:1e:66:b5:7e:fc:4b:
                    2f:ed:81:01:8a:da:1e:79:30:c6:18:b0:ce:62:a4:
                    0f:e4:6c:1b:b7:02:68:9d:90:6f:57:28:fa:0b:72:
                    88:8d:1f:22:32:cd:8c:13:27:c7:0b:46:a5:fd:7e:
                    9b:89:e3:14:10:61:0f:fd:c6:29:67:16:6f:26:9a:
                    fa:49:73:24:49:76:06:ac:e1:58:a3:e4:46:b2:12:
                    2b:03:a3:23:ae:4e:14:db:3f:bf:41:fb:3c:b1:c1:
                    e4:7e:53:77:c6:88:58:2d:93:10:f9:25:6d:d0:f8:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CF:7C:8D:2C:31:5C:16:04:5E:1E:99:58:98:9C:C0:B8:64:82:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.176.0/23
                  45.59.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:34:48:32:66:d2:0c:3c:8c:ab:da:c4:60:10:80:72:29:
         ba:03:93:87:de:cc:f4:4f:7d:e4:bc:97:7f:4f:96:40:1f:5d:
         4e:0c:70:49:cd:c2:b7:e8:84:12:ff:99:63:e3:76:9a:0a:ea:
         04:94:c9:f4:c2:2f:50:84:3d:c0:fa:85:0d:b0:cd:b5:03:5f:
         f8:fb:fc:93:f0:39:61:b9:ed:e8:b2:3c:c2:ae:d8:aa:5b:e1:
         f5:41:7d:26:8b:f0:4e:68:73:a9:0c:9c:0a:89:3f:3a:4d:cb:
         7f:f3:9b:d8:97:f3:ef:cd:d6:33:55:14:1b:70:6e:b8:8a:07:
         90:24:6b:2d:51:81:07:87:a3:4e:c0:eb:1d:66:ae:19:88:e8:
         dd:8c:17:7e:fe:64:69:da:3d:f3:d7:99:4c:d7:02:40:34:db:
         fe:e6:3f:16:71:e6:78:ce:3d:d9:1e:18:e4:3e:53:8e:6e:87:
         a2:f7:6b:2e:93:48:6a:c9:2c:ba:82:11:23:44:90:b8:ea:67:
         0b:3b:83:44:3b:44:51:03:a3:a2:64:2c:8c:73:67:29:06:02:
         2d:4d:97:4d:92:a0:d5:3e:7f:78:76:ba:74:69:90:e9:22:85:
         f6:e6:98:40:1c:b7:11:5a:ef:36:ac:42:01:42:7d:12:51:21:
         ee:11:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:32 2025 by rpki-client