Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
File:                     b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa (raw, json)
Hash identifier:          UAMHkSD5DheLebonvGOACgyVJoksyatLLFgH7t3bKPM=
Subject key identifier:   73:8A:1C:5C:3A:03:BD:FB:EA:AB:6F:2D:39:86:50:71:2A:32:E0:6C
Certificate issuer:       /CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
Certificate serial:       010D0C9F4328584B23317FC405C8BD00AF8F1D00
Authority key identifier: 7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     46384
IP address blocks:        23.171.64.0/24 maxlen: 24
                          23.171.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:7f:c4:05:c8:bd:00:af:8f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=29aa5954-8704-40f5-9902-ce5385b54f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:ef:44:97:b5:2e:46:61:92:79:02:57:4b:
                    12:54:01:8a:bf:62:8b:20:76:cb:8a:7f:ea:3d:1b:
                    1a:bd:d9:41:d4:e1:0e:e4:e3:e4:c6:a0:b3:4a:03:
                    bb:c5:48:bd:1b:8c:0d:da:fd:66:44:79:3e:88:94:
                    89:f4:10:35:2d:95:70:7a:e6:66:27:95:d6:6a:73:
                    2e:6e:cc:0e:58:8a:fd:7d:9d:ad:7b:18:f4:54:36:
                    03:52:57:a6:97:1e:99:d9:3c:bb:37:67:f0:91:1b:
                    d8:76:ea:4d:1f:0e:ed:9b:94:91:a0:fb:40:13:9f:
                    c9:35:e9:84:23:a8:a8:72:4b:e3:c6:0f:19:20:0a:
                    be:0f:0f:ef:5f:b6:b7:6a:3f:45:95:bd:1d:1d:ca:
                    92:5f:b4:8e:d7:b5:73:01:90:5a:74:5c:29:08:d6:
                    04:1b:a0:ac:b9:39:be:be:5f:0d:65:93:33:79:1e:
                    e3:a6:f8:36:a2:4f:85:89:76:af:fc:ea:76:3f:c0:
                    88:58:4f:3b:53:21:86:26:51:75:53:fb:dc:c0:69:
                    be:56:14:07:ac:04:9e:6e:bc:35:f4:39:83:89:5b:
                    ad:46:e5:90:91:d8:a5:6b:92:8a:b9:18:54:9f:c5:
                    1c:4e:92:fc:b5:5b:ef:06:a6:14:2f:ab:5b:e2:5d:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:1C:5C:3A:03:BD:FB:EA:AB:6F:2D:39:86:50:71:2A:32:E0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:ee:4a:11:66:ae:1e:34:98:c1:ae:c3:d2:15:5b:25:1d:
         61:69:24:ae:27:04:38:f6:da:b8:a4:3b:48:35:27:b6:7b:92:
         b0:09:15:6d:b4:77:cd:f2:61:74:4d:96:4f:e7:d2:01:28:96:
         ba:e1:b4:04:80:18:d4:b6:d1:72:80:8c:34:a1:67:66:28:81:
         05:29:b4:ab:6f:15:f0:56:f9:de:49:c2:54:34:1c:11:a8:fc:
         f4:40:59:d6:cc:46:d6:0c:8f:31:c1:ab:d4:d7:cb:42:1b:64:
         6a:b0:b2:90:5b:fe:f9:4b:95:e9:96:ef:f1:89:0c:63:a4:82:
         70:a3:60:38:81:3d:62:ba:76:a3:71:23:8f:20:52:cd:bf:ef:
         8c:77:36:53:0f:29:a5:b8:15:cb:f5:d4:cd:59:13:a3:b3:38:
         c2:a2:08:1f:87:1f:72:12:31:6a:de:58:38:99:13:31:51:f4:
         14:21:33:71:3b:c4:05:91:f5:7e:96:a3:c4:b0:d2:b1:e9:a6:
         18:1a:85:a8:e9:97:52:e4:f9:50:cd:5c:34:83:0f:fb:c8:1e:
         9e:e9:b4:7c:9d:25:84:66:7f:41:62:f1:ef:a7:e3:dd:30:f4:
         cd:4f:0f:2c:9a:f8:e0:ec:ec:5f:54:2d:f7:0b:53:66:13:9f:
         9d:92:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:58:17 2025 by rpki-client