Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e4c8b02-7fb0-3ad4-a8a4-d4c444612ecb.roa
File:                     2e4c8b02-7fb0-3ad4-a8a4-d4c444612ecb.roa (raw, json)
Hash identifier:          Mf2hWNNtZ5gusAD3794HKx+bK7dnVGTB7THRL9226LE=
Subject key identifier:   C5:EF:42:05:1E:52:8B:67:F7:CB:DD:50:FC:FC:97:58:B5:8E:41:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EACFB0A9ACC06C1E8C4BB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e4c8b02-7fb0-3ad4-a8a4-d4c444612ecb.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     22394
IP address blocks:        174.41.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:fb:0a:9a:cc:06:c1:e8:c4:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=824d5b62-d7b2-46fe-8fc4-f6aada4d081e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:48:9e:c1:99:bf:dc:d4:a7:13:b1:a1:40:
                    66:90:b2:9b:91:05:88:5d:ad:95:83:af:be:24:fe:
                    f0:fb:17:bc:65:ff:77:39:b4:2d:51:4c:4b:e9:73:
                    91:01:71:a2:6e:48:50:27:7d:7d:d5:ab:35:d9:75:
                    5b:0f:eb:e4:07:2a:c1:ac:7b:ea:ce:50:94:43:e4:
                    b8:26:1a:81:2b:d8:d1:5d:0f:6d:63:dd:9b:f0:f1:
                    15:ee:6d:09:64:b3:83:15:0f:8c:c3:42:c6:7c:b0:
                    8c:01:4b:39:4c:ba:9c:1a:bb:e8:08:ea:40:10:31:
                    6e:00:ba:c2:40:a0:f7:e2:6d:d7:f7:6d:e3:aa:75:
                    72:d9:e5:61:dc:50:70:61:17:04:ac:fa:63:2d:b3:
                    c7:69:d1:b0:3f:cc:9d:bf:4a:52:26:81:51:2c:58:
                    ac:f1:0c:2c:1b:de:07:6e:3e:1d:03:0a:35:a8:c5:
                    c7:78:13:6c:1c:05:d6:fc:0a:ac:1e:f5:bc:47:01:
                    f1:b1:43:91:1e:c3:9e:ac:fd:1f:af:c1:70:b1:30:
                    81:0f:f6:36:95:1f:c2:d6:54:4c:f1:15:ef:27:08:
                    da:09:a7:31:bb:ad:77:14:6f:6a:01:5b:c3:71:30:
                    7a:0e:20:33:7e:ab:80:6c:2e:09:0c:5e:81:5f:88:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:42:05:1E:52:8B:67:F7:CB:DD:50:FC:FC:97:58:B5:8E:41:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e4c8b02-7fb0-3ad4-a8a4-d4c444612ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:6d:12:04:c8:27:44:58:0c:8e:7b:60:40:b3:35:70:91:
         7a:26:c8:36:ec:0d:7b:5f:b2:0b:5c:a6:95:2e:b0:6d:60:03:
         4a:af:95:27:f4:2e:be:5b:38:23:1b:2d:d3:12:dd:64:b6:c7:
         5a:be:f4:fa:d1:2d:6e:d8:62:6f:86:14:5c:3e:21:a5:a6:1c:
         0f:6d:a1:c3:2c:69:73:ba:d0:2e:ea:01:38:41:02:80:6d:1f:
         5e:46:f6:ba:c5:34:d7:f8:66:b7:39:5d:ff:60:ac:a0:be:09:
         05:26:83:49:7b:11:cb:24:ce:6e:7a:6a:07:fd:b8:85:14:19:
         b3:5b:bc:e7:55:d1:c4:c4:9b:7f:63:96:7b:d7:73:35:5d:32:
         b8:40:81:b8:d2:e2:b2:ba:c6:7a:ab:c5:3d:2e:b0:42:0f:7e:
         2e:db:c6:d8:7f:e5:b1:08:c8:d9:69:2d:8e:5e:46:07:67:35:
         16:96:33:fc:be:31:48:e0:fa:29:cb:de:6f:19:eb:ea:73:57:
         eb:7f:6c:c1:9f:3f:f2:51:f5:6a:a4:79:47:55:03:ec:92:95:
         f5:72:35:cc:83:ed:f2:28:a1:ef:e2:ba:0c:4f:e2:31:5e:e7:
         0b:cc:6c:21:d0:57:db:c9:bd:bc:50:c7:24:7a:77:90:bb:1c:
         c9:38:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:00 2025 by rpki-client