Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa
File:                     94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa (raw, json)
Hash identifier:          ERPij3C0an0M01o5/6GGInZclLcSwyMXfeJUjOO7edg=
Subject key identifier:   75:45:D1:B7:F6:FD:D3:27:1A:0F:BB:89:8E:B6:CA:A7:00:CC:BF:EC
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584B6D2C928247B6421646DE3840
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     7862
IP address blocks:        146.23.194.0/24 maxlen: 24
                          146.23.196.0/24 maxlen: 24
                          146.23.198.0/24 maxlen: 24
                          146.23.202.0/23 maxlen: 24
                          146.23.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:92:82:47:b6:42:16:46:de:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9586ccb3-1865-4610-882c-d36da8418316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:6a:02:42:59:b5:02:45:04:68:81:ec:f1:
                    1c:0c:22:0b:32:fb:82:10:da:56:50:d1:1a:0a:af:
                    6a:44:0f:59:6e:52:38:c7:3a:ee:14:77:d5:ec:6d:
                    fe:91:a1:3b:85:df:4d:06:8f:69:36:2b:1d:2c:44:
                    81:46:aa:96:74:81:79:fb:c9:87:23:46:22:e7:ab:
                    16:70:ce:49:89:14:07:6e:90:e7:4f:03:4c:1c:19:
                    6a:39:5c:c3:41:79:94:f9:8b:0e:81:28:b2:38:e5:
                    84:77:d8:9f:de:7e:fb:eb:d1:2c:24:2e:b8:d3:66:
                    93:9e:2c:25:05:e2:92:75:e5:25:c3:63:dd:85:7c:
                    0a:3c:7a:4f:05:5d:29:e6:56:99:9b:49:b4:99:ab:
                    75:7d:20:b5:04:c1:c5:b4:40:d9:aa:8d:4c:81:aa:
                    b1:e3:72:df:b2:32:d4:16:a2:79:90:69:51:7b:a2:
                    ef:74:33:a4:34:ba:da:86:f7:73:94:7a:27:03:98:
                    7a:99:74:ee:06:05:fe:fd:23:4e:97:a8:1d:5a:41:
                    59:33:c1:7b:6c:f5:1b:6d:b6:3c:57:7e:dc:dc:86:
                    6c:a8:ad:ef:42:d5:94:5b:41:e8:6b:05:5d:d0:d7:
                    42:4b:8d:55:64:22:7a:a1:b2:a0:b8:83:d8:64:87:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:D1:B7:F6:FD:D3:27:1A:0F:BB:89:8E:B6:CA:A7:00:CC:BF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/94469c8c-ac9a-3b20-aa70-a50c7e3ae241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.194.0/24
                  146.23.196.0/24
                  146.23.198.0/24
                  146.23.202.0/23
                  146.23.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:34:d7:02:e7:94:45:e1:f3:66:78:d4:0d:01:96:18:7f:8e:
         3e:0a:85:67:56:56:ec:7d:30:0c:99:a5:00:fe:f0:11:76:92:
         cf:e0:09:a1:3e:91:51:41:83:19:4b:d6:bf:ed:22:f2:86:b1:
         d6:37:c1:c5:a2:e8:3c:67:53:3a:7c:92:f2:46:69:14:1a:a2:
         12:ca:b1:55:6e:7e:09:52:15:56:94:f9:71:d1:5c:3e:28:f6:
         4a:23:a3:fa:4e:fc:b5:fb:bf:cd:27:00:18:42:1e:3c:34:7f:
         e1:b7:ce:4c:92:18:09:86:5b:9b:d2:96:b1:e8:89:c0:c3:b3:
         61:6c:e3:99:c1:16:41:b3:4b:95:4e:dd:7c:06:26:70:93:f3:
         d5:a6:1a:e0:2d:18:46:43:22:a3:98:dc:e9:03:e5:80:97:d9:
         8f:d9:45:a6:90:4b:08:e0:ca:9d:d4:92:ae:ad:28:ee:2d:c6:
         2e:f8:e8:6b:9c:82:4d:e5:bc:19:f6:82:83:0c:de:6f:a2:12:
         bf:1d:64:a3:c4:ac:eb:f4:5a:47:f1:c3:e1:7a:48:a6:9d:9d:
         59:80:ed:13:f4:9b:60:f6:11:81:b5:17:71:32:35:b0:f7:c2:
         ee:20:c4:6c:6c:e8:ba:ee:af:4f:5f:da:71:d8:ea:95:b1:03:
         22:e2:1a:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:23 2025 by rpki-client