Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88e8bd09-bb55-3cab-85af-c38649c0e12f.roa
File:                     88e8bd09-bb55-3cab-85af-c38649c0e12f.roa (raw, json)
Hash identifier:          eXLlctO20QrEvuk410tCAainotBIx8Pn6+eZBvQBUfg=
Subject key identifier:   91:8D:DD:C4:33:32:CE:B0:CE:30:64:53:07:8E:75:7C:C2:CA:EF:16
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8A7CC9CFBE1B87F0CCA05154
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88e8bd09-bb55-3cab-85af-c38649c0e12f.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     214143
IP address blocks:        184.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:c9:cf:be:1b:87:f0:cc:a0:51:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=e7713f6a-a9d0-4120-9d6c-aad38faef172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:dd:9a:78:35:40:f4:23:a0:25:51:4c:fd:
                    e4:e7:fe:f7:e6:91:05:f4:8e:65:77:10:73:33:bb:
                    dc:a5:81:f7:48:55:49:52:c4:76:60:38:eb:e4:2f:
                    a1:23:82:25:33:19:e4:e5:ce:00:36:67:29:42:94:
                    98:aa:b9:7c:82:f1:ca:db:fa:6f:c9:ed:95:c7:07:
                    f4:76:a8:91:ee:34:49:2f:97:80:ea:b9:05:a5:f0:
                    d0:c8:54:f6:fa:e4:a1:9c:78:38:7d:6d:af:74:5d:
                    13:0c:00:4f:1c:1c:b3:34:f2:47:fa:99:21:82:ca:
                    b1:d3:d8:0e:59:db:28:55:a0:7a:83:10:8e:db:2f:
                    94:eb:f6:0b:53:af:8f:db:0e:e5:f9:87:16:45:fe:
                    53:8a:c3:b3:97:f8:36:c8:46:c5:9f:61:e3:7c:47:
                    fb:bc:ff:26:b7:8c:43:60:80:47:81:e0:04:33:e5:
                    98:53:9b:19:c4:3a:2a:79:81:55:b8:e5:d4:eb:ec:
                    5f:2a:1c:c8:d6:df:3e:16:54:4d:c5:81:36:79:28:
                    c7:33:90:60:57:3f:c6:e9:79:49:fc:68:bc:db:33:
                    1a:55:c3:a5:0c:d7:01:5a:3b:bb:00:3f:af:66:97:
                    fa:1e:a4:8d:03:bd:5d:66:f4:45:9e:39:02:a3:3b:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:DD:C4:33:32:CE:B0:CE:30:64:53:07:8E:75:7C:C2:CA:EF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88e8bd09-bb55-3cab-85af-c38649c0e12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:19:01:7d:ef:0c:e9:48:5a:2c:cb:3a:40:b7:d5:d3:e8:63:
         d1:a5:9a:27:5b:d8:6e:d6:55:b2:1d:2d:41:15:e6:9f:9b:4c:
         a7:b5:65:a4:6b:d5:71:19:81:13:a8:64:93:c3:a2:74:51:30:
         f1:f4:53:22:16:36:f5:36:37:2f:38:f2:e7:3f:b0:64:09:32:
         f7:ab:ea:c0:67:8b:8d:5a:90:96:68:07:58:17:05:5e:60:4e:
         b3:2d:ed:4b:ca:da:8b:66:66:e5:c5:bf:76:f7:16:4f:25:1e:
         f6:42:e1:e1:17:5a:60:20:b5:dc:83:85:46:07:1e:9e:c1:e6:
         29:c4:a5:6a:8d:c0:17:5c:71:03:2b:b7:d6:ad:28:7c:b2:4b:
         f1:61:b4:35:e9:2d:5e:12:16:11:c9:23:d4:46:7f:93:8c:67:
         ab:6e:5e:8a:c2:8a:0c:58:a6:95:03:de:2b:59:ad:fc:bd:df:
         b7:c6:99:3e:d0:dc:0e:f5:a5:37:8d:2a:11:65:60:f4:57:c0:
         d0:56:49:51:c2:aa:a7:62:da:c5:8f:d7:71:c0:35:94:d4:47:
         74:0f:9e:f2:00:df:25:85:4b:d2:fb:cc:53:f8:11:f9:3d:31:
         a3:61:b2:bf:51:0b:98:e2:bb:ad:47:26:ff:ab:7e:11:2b:43:
         40:7b:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:51 2025 by rpki-client