Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/e2e0b72f-05f4-3ae6-95a1-36912fd30318.roa
File:                     e2e0b72f-05f4-3ae6-95a1-36912fd30318.roa (raw, json)
Hash identifier:          uHqsqDt8wNxFukQaIvq3e5YSIVSGFfWQJR9czK7Cfjw=
Subject key identifier:   E2:6C:ED:0D:DA:85:FE:33:BE:18:25:FD:73:26:B6:B8:3A:BC:9D:A3
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584B153C299424DC4BFAFF82A640
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/e2e0b72f-05f4-3ae6-95a1-36912fd30318.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        23.169.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:29:94:24:dc:4b:fa:ff:82:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=b071c5cd-b6c0-4ee4-8a89-c84a6ce2106d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:0e:ad:e6:77:99:a2:3a:2f:5d:73:21:d8:
                    60:1d:99:62:e9:fe:2b:b7:4a:aa:cc:95:94:98:bc:
                    2a:e3:65:68:4a:7c:99:5c:6f:be:ee:14:b1:63:06:
                    14:96:00:25:ac:f2:be:7e:e1:1d:a2:3e:87:83:c7:
                    9a:be:82:00:6a:84:2c:52:c1:12:de:d7:22:3c:fb:
                    38:35:6a:8d:0b:67:55:32:97:7e:58:b0:3b:1c:e2:
                    13:34:68:72:a9:5e:6e:39:41:0f:82:17:25:01:c5:
                    85:c8:ad:6d:51:3f:a1:f8:18:bf:ce:19:35:b9:9a:
                    c2:92:36:16:27:59:70:06:a0:cf:3e:b6:83:10:d2:
                    cc:52:f9:07:e3:2f:1d:d7:03:92:73:9b:c9:1c:59:
                    d0:3b:2e:fc:90:94:ea:ba:f8:f4:22:46:21:6a:6e:
                    58:8b:16:c4:78:32:24:c1:fb:82:6f:70:c4:b1:9b:
                    27:9e:bf:25:70:90:63:76:3e:41:de:82:c4:ce:7a:
                    e0:36:34:71:a3:1f:ae:33:99:3d:a1:73:ba:c6:89:
                    b2:f3:f5:4a:1d:09:27:bc:b3:90:85:23:9b:82:9e:
                    53:33:20:7f:d3:97:3f:21:90:a8:54:d4:98:97:7a:
                    ef:53:38:41:65:cd:bb:37:4b:9d:d2:a8:e2:84:65:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6C:ED:0D:DA:85:FE:33:BE:18:25:FD:73:26:B6:B8:3A:BC:9D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/e2e0b72f-05f4-3ae6-95a1-36912fd30318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:58:c2:c4:58:cf:7e:2c:42:d0:0f:b6:40:07:9c:b7:93:1f:
         4f:f0:4e:4b:3e:95:fd:d0:75:d2:f6:a9:f2:4b:79:40:30:8c:
         03:3f:bd:67:e8:be:e5:13:9e:f5:4a:a6:1f:4c:ad:7b:e3:1b:
         dc:f4:86:13:f8:11:3f:80:06:f6:59:34:10:54:90:9d:81:bb:
         75:b0:40:15:49:76:26:bf:69:e7:e1:a9:0c:ed:ea:fb:5e:32:
         99:26:78:b9:08:8d:68:db:95:c5:2b:49:5e:9c:ba:92:4f:29:
         5c:a5:bf:06:58:a9:8d:cd:35:05:54:47:d9:88:cb:7b:c6:e9:
         79:fd:8b:c9:e6:2e:e1:c0:43:7e:cb:9e:43:56:85:8d:8c:8d:
         9a:e6:38:16:6f:6a:1f:48:67:00:61:25:27:62:56:da:db:8d:
         b8:ae:cd:a2:2d:d7:d1:d8:a5:00:cf:98:88:73:c7:7e:54:60:
         8a:68:36:97:6d:75:33:9e:3c:d0:36:0d:a7:97:6a:fb:e0:e8:
         00:3e:88:62:50:ed:7f:46:78:4f:71:cd:5e:16:54:56:4f:c2:
         dd:c2:b2:03:c7:b8:a2:e5:1f:0d:25:43:e8:85:bd:89:f2:57:
         93:5d:23:35:6a:ca:dc:73:fb:19:8f:58:95:57:36:95:2c:93:
         b8:6e:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:44 2025 by rpki-client