Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
File:                     1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa (raw, json)
Hash identifier:          8pgJRdR3MuUdrf4xVENdJKE/a/14blf1sg7ZGMntw3o=
Subject key identifier:   2A:EB:FA:A3:CC:86:F7:B9:CA:DA:BA:88:42:2B:2C:63:95:0D:AB:10
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584B2FC18D47E77AD5941DADB580
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     46261
IP address blocks:        23.190.80.0/21 maxlen: 32
                          45.43.192.0/19 maxlen: 32
                          64.187.224.0/20 maxlen: 32
                          104.153.80.0/22 maxlen: 32
                          104.166.64.0/19 maxlen: 32
                          104.247.192.0/19 maxlen: 32
                          107.161.112.0/20 maxlen: 32
                          137.83.79.0/24 maxlen: 32
                          144.208.91.0/24 maxlen: 32
                          160.202.64.0/18 maxlen: 32
                          162.210.36.0/22 maxlen: 32
                          162.217.172.0/22 maxlen: 32
                          162.219.24.0/21 maxlen: 32
                          162.223.28.0/22 maxlen: 32
                          162.244.132.0/22 maxlen: 32
                          162.248.208.0/21 maxlen: 32
                          170.75.144.0/20 maxlen: 32
                          172.82.128.0/18 maxlen: 32
                          199.101.96.0/21 maxlen: 32
                          199.233.232.0/21 maxlen: 32
                          216.115.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:8d:47:e7:7a:d5:94:1d:ad:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=1f4b904b-4d8b-4a82-921e-78cb192d8275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:23:54:03:ec:68:a9:05:e6:2a:1f:cf:65:
                    af:81:2b:4f:23:b9:4a:61:4f:9e:a8:c3:ee:1d:e9:
                    f0:f3:7c:dc:a7:79:d7:b6:a4:0d:b2:5d:8a:e2:54:
                    51:8f:89:d6:8e:cb:ce:4d:0d:e0:16:17:59:30:13:
                    fd:a1:20:cf:ad:b1:b8:b4:c1:95:5f:b7:7e:43:3d:
                    89:2c:94:a6:ec:e2:d3:68:39:96:47:dd:95:e1:1a:
                    df:16:88:01:80:7e:b0:12:5f:7b:b7:59:9d:29:c3:
                    90:48:a3:b6:7d:87:e4:8b:cb:e7:08:83:0c:81:19:
                    e1:9f:e5:dd:4a:f2:56:14:43:00:18:8f:dd:45:d7:
                    d7:90:1b:92:d5:9b:e0:f3:c8:df:11:43:0a:0f:6f:
                    75:d0:5e:a1:a8:bf:7b:ee:8b:ff:89:46:81:ad:55:
                    df:8e:4c:20:85:95:82:ce:77:a7:bc:ab:e8:c3:39:
                    77:0a:b7:9a:c9:bb:2c:bd:8e:7b:f0:ad:6b:86:f7:
                    9b:de:05:0f:69:86:3e:86:e8:3d:6e:31:4e:0a:64:
                    c1:bf:e6:be:64:1f:31:2b:0f:fa:99:80:40:33:a0:
                    67:83:ec:7e:36:6e:3c:fc:33:8e:0f:c0:ed:af:54:
                    c5:12:ad:98:69:e0:d7:78:14:27:7f:97:c4:12:5f:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EB:FA:A3:CC:86:F7:B9:CA:DA:BA:88:42:2B:2C:63:95:0D:AB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.80.0/21
                  45.43.192.0/19
                  64.187.224.0/20
                  104.153.80.0/22
                  104.166.64.0/19
                  104.247.192.0/19
                  107.161.112.0/20
                  137.83.79.0/24
                  144.208.91.0/24
                  160.202.64.0/18
                  162.210.36.0/22
                  162.217.172.0/22
                  162.219.24.0/21
                  162.223.28.0/22
                  162.244.132.0/22
                  162.248.208.0/21
                  170.75.144.0/20
                  172.82.128.0/18
                  199.101.96.0/21
                  199.233.232.0/21
                  216.115.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:00:84:1a:48:18:67:d0:ca:c5:f0:7f:c4:0e:12:f9:85:
         c3:02:36:d6:d1:78:85:40:85:7c:6d:ed:36:ac:54:0f:c1:17:
         cc:4d:ca:33:0b:5d:69:ae:c8:76:ac:ef:01:8e:a3:3a:47:5d:
         b0:d0:fa:6d:34:b7:01:e3:72:3b:fe:3a:e4:f1:b7:ae:b0:15:
         b2:7a:6b:a8:e5:21:22:bf:2e:e2:60:88:42:67:36:7c:de:67:
         4d:20:32:13:21:ae:6c:0f:57:72:de:0d:9a:fd:b4:50:43:37:
         48:18:e5:0c:b1:b6:e0:90:aa:1f:3f:33:e7:e8:da:51:32:a5:
         59:20:86:f9:75:5a:3d:33:a9:e0:36:6d:f4:a7:08:86:1b:e6:
         01:d6:c4:8d:61:50:21:e7:eb:0f:4e:3a:75:37:6f:46:c2:24:
         e6:2f:62:8d:2e:07:b7:3b:43:2b:d0:71:e9:33:63:c0:22:66:
         c3:01:26:9b:2c:25:ea:15:37:bf:4a:84:82:99:90:84:98:59:
         de:61:f9:c2:4f:bf:a6:17:14:db:55:39:cb:6e:dc:ea:c0:4c:
         64:6d:64:24:cf:de:07:ec:1b:6b:a1:1c:59:ed:06:80:d9:51:
         16:9f:8c:60:0b:96:ba:80:e2:98:d4:e3:49:ea:1f:a5:0b:e4:
         b1:c3:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:35 2025 by rpki-client