Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7fc23652-9760-3d99-8168-99afe47bbe30.roa
File:                     7fc23652-9760-3d99-8168-99afe47bbe30.roa (raw, json)
Hash identifier:          XswsiJavgU0FkG7LCYpTUIxcDZ6yR1mGzjpKmsPUTBY=
Subject key identifier:   C9:23:99:2F:4C:2A:EF:05:07:E3:AC:4E:72:BB:5B:9E:D4:01:4D:9F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B4BAC599466B38F83EBF67B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7fc23652-9760-3d99-8168-99afe47bbe30.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     272367
IP address blocks:        45.73.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:59:94:66:b3:8f:83:eb:f6:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=63165b91-fa52-4681-a146-8f55bc8fd67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:ce:14:b0:53:5d:f3:c6:ad:6f:72:49:6b:
                    6b:4f:b3:0a:23:67:26:c3:c4:ee:d8:08:49:00:77:
                    8b:d4:37:bf:45:e0:e7:12:82:33:a7:96:58:f6:1e:
                    cb:2e:1d:db:6e:e2:c2:65:31:06:d3:28:ec:e8:6f:
                    dd:f2:68:48:3e:41:63:1d:ad:d9:e4:b2:ec:87:02:
                    5e:d2:f7:a3:53:4d:62:48:28:a2:61:b3:6f:1d:d4:
                    b5:07:2f:2f:fc:53:f8:68:1b:32:c4:fc:f0:75:b2:
                    1d:b7:6a:99:15:8b:19:a6:3d:78:34:72:d7:31:53:
                    73:52:8e:8f:fc:f7:9b:64:17:64:7c:79:85:a3:35:
                    f3:5a:92:d5:44:fb:25:f7:6e:60:04:a6:89:39:f8:
                    98:22:18:3a:26:0a:31:2a:75:3f:c4:8a:3e:e4:57:
                    24:7e:11:9a:94:37:63:ba:92:fc:3d:1d:db:05:bd:
                    dd:18:4b:de:5d:93:c6:7d:05:e8:72:d6:57:89:8d:
                    07:67:7a:1a:84:ff:9e:3c:b2:ca:3a:2f:a7:5b:20:
                    c5:45:69:c4:98:00:9b:f0:f3:30:90:2c:2f:14:3f:
                    cc:68:6a:d8:db:2b:be:26:f6:63:cf:f4:57:19:fb:
                    1d:e9:f9:0f:c0:2f:b7:a1:15:e2:1a:e0:3d:3b:b7:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:23:99:2F:4C:2A:EF:05:07:E3:AC:4E:72:BB:5B:9E:D4:01:4D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7fc23652-9760-3d99-8168-99afe47bbe30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:30:f2:d5:7e:b5:39:05:1b:5a:d1:fd:58:e3:82:e8:ec:6f:
         b4:88:3d:9b:23:5b:73:4b:f9:aa:f1:7a:44:e0:3d:cb:9a:bf:
         c5:21:72:48:23:bb:ad:81:c4:ad:56:13:15:3a:89:89:08:13:
         6e:72:46:bc:f6:0e:b4:d4:5f:22:21:7e:d5:b5:48:85:92:52:
         f2:62:f5:1d:11:72:0c:c3:60:e6:d0:bd:eb:f9:38:2a:af:27:
         5c:f3:0a:1a:b1:4b:6b:1e:a8:e2:a0:60:37:1c:7c:84:29:ac:
         88:e5:fc:92:52:c1:ca:4b:76:43:79:03:d5:a7:84:30:ca:1f:
         8a:2c:ae:e0:30:f4:7d:3f:a9:f0:99:db:11:58:4e:bb:8e:13:
         13:11:ee:5a:90:af:6d:a4:2b:06:96:89:b6:b4:04:5b:7d:27:
         0e:2e:d8:c8:07:21:e6:80:dc:43:6c:e1:10:e7:78:22:f8:87:
         1b:d9:a7:49:a4:ff:b9:cc:73:6a:96:dd:c1:2c:68:1f:f5:59:
         71:2c:b4:75:6f:da:a9:5e:62:f3:a5:38:f4:8e:18:5d:db:2b:
         11:95:d9:cb:3e:dc:dc:7d:71:34:b6:ea:e8:71:6b:3f:c5:95:
         04:a8:92:e8:da:b3:d1:74:ea:b3:7c:d7:8b:46:d6:bf:dd:2a:
         f2:7c:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:48:20 2025 by rpki-client