Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3116a23-684d-3398-8524-0c9bd10f42b4.roa
File:                     c3116a23-684d-3398-8524-0c9bd10f42b4.roa (raw, json)
Hash identifier:          YHaUBgnImTDCcDPlEFdy9z6ps3PCajTW5auY8/SgR6c=
Subject key identifier:   F7:0F:4F:0C:F3:4B:DF:D7:17:62:19:09:7F:3A:F3:B6:2B:37:CB:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EAD07B3DA3C68FDCAFC7800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3116a23-684d-3398-8524-0c9bd10f42b4.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     22394
IP address blocks:        174.41.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:07:b3:da:3c:68:fd:ca:fc:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=e4c70793-8e58-49ed-a251-9399513b0a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:38:61:84:85:ac:6e:77:c4:49:56:0f:01:
                    be:92:40:4e:c3:74:2c:64:55:ed:1a:aa:8b:42:0a:
                    01:69:75:8e:c6:dd:07:05:be:b3:32:0a:cf:76:b9:
                    15:35:5e:d6:88:38:6b:1b:b3:3a:04:70:2e:1a:41:
                    b7:f9:dc:93:e3:b2:5c:be:75:7b:8c:3b:9e:92:4f:
                    77:36:04:16:3b:30:7f:d1:02:4e:5f:4d:93:bd:78:
                    c7:1d:a8:59:ff:24:03:38:6c:53:8e:09:68:19:77:
                    d6:70:2f:0f:72:1f:da:7f:17:c2:42:ac:2d:db:a0:
                    57:1c:fb:9f:54:34:c6:1f:bc:53:bf:93:6a:79:c0:
                    f3:7b:5b:c7:46:fd:36:a7:c8:a9:f3:26:95:56:44:
                    79:cb:45:9f:87:81:f2:23:92:5c:94:79:e7:dc:cb:
                    db:cd:53:9f:f3:3c:a2:a2:ef:9e:f9:07:96:ca:d4:
                    7b:d6:44:2b:9f:1a:2e:3b:f4:9a:27:d0:96:ac:85:
                    8d:dc:d2:99:05:8a:6d:66:b7:be:12:a8:61:d2:d3:
                    a0:f7:61:5a:6a:ea:a2:2e:ae:b8:03:41:0f:95:65:
                    76:a8:41:58:7c:17:96:59:13:e7:05:69:58:0a:3b:
                    c8:06:69:b8:92:28:03:5b:5e:ed:5c:d7:56:ad:8a:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0F:4F:0C:F3:4B:DF:D7:17:62:19:09:7F:3A:F3:B6:2B:37:CB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3116a23-684d-3398-8524-0c9bd10f42b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:45:a8:9a:da:43:48:0d:fa:e8:06:e7:5d:54:29:c8:8d:
         11:8e:f1:e0:86:42:d5:36:8a:b2:ca:00:fe:ad:4f:55:c5:f8:
         95:ab:11:b1:de:f8:a9:98:fb:bc:f8:1b:13:8b:20:ec:ea:6d:
         49:9d:53:3b:a4:9c:5c:8b:17:3f:16:ec:06:bc:33:b8:c4:4b:
         6e:63:5d:92:2c:99:54:fd:ed:45:47:8a:f0:38:1f:24:35:9e:
         ff:c9:3b:2b:75:da:e3:37:d7:e8:f6:f8:82:55:5a:ab:3b:75:
         76:0f:a7:3d:e5:c1:0f:8c:ae:90:68:0c:ba:c6:f5:26:c6:b0:
         f2:37:db:74:cc:7e:aa:e4:ed:71:b0:bd:11:3f:eb:c1:fc:03:
         57:45:03:41:c9:15:a6:65:65:40:7a:97:51:25:d4:e2:b0:62:
         30:97:5a:5f:e6:d9:c8:31:f1:b7:3a:93:e5:61:3b:95:e2:ab:
         42:18:77:bc:78:ce:02:05:06:bb:e5:80:cd:87:1d:79:52:1f:
         a7:3e:df:32:5c:56:24:28:29:31:b7:77:0e:43:61:f8:46:ec:
         0c:89:45:7b:1c:96:f1:35:b7:6e:c2:26:05:34:77:96:55:25:
         e7:74:30:23:54:df:8e:2d:fe:60:77:74:3e:a2:e1:0a:96:8e:
         5b:9f:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:17 2025 by rpki-client