Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa
File:                     ea53e097-aa5e-3666-96a2-1268be35db5c.roa (raw, json)
Hash identifier:          4dvn5z1fTKtXIXZ/BTaA3UePve37ZypvdEntnv96fAQ=
Subject key identifier:   FD:A9:70:9C:6E:1E:6D:20:BE:F8:4A:C8:C3:DB:1A:17:44:FE:72:9B
Certificate issuer:       /CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754
Certificate serial:       010D0C9F4328584A8410F7ADC4206EC34D9B8A80
Authority key identifier: B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     399693
IP address blocks:        23.174.24.0/24 maxlen: 24
                          165.140.232.0/22 maxlen: 24
                          2602:fe87::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f7:ad:c4:20:6e:c3:4d:9b:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1edccb2f-ae71-4b13-929c-8c54b784df0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:95:50:3a:34:56:d8:1c:a7:fb:86:b0:c4:
                    77:60:d5:36:29:37:09:08:67:59:0f:20:94:16:52:
                    2d:11:6c:d9:75:ac:11:05:1f:25:85:ac:90:98:31:
                    b1:44:29:42:55:46:d3:6b:91:e2:31:6b:83:cd:9e:
                    68:87:0d:e0:aa:2f:19:89:2f:18:82:60:13:87:9a:
                    b7:61:c6:34:6d:6f:41:2a:0d:e0:53:c7:c9:03:2a:
                    f2:eb:80:e4:da:a4:05:18:a7:74:d6:e9:4e:dc:47:
                    fd:a4:84:2a:1c:9f:46:ca:94:bd:23:25:3a:bb:72:
                    08:23:26:ac:89:51:ce:0e:a2:f2:b1:da:a3:63:7a:
                    b7:c7:23:e2:4f:93:a3:06:67:31:9e:c1:61:32:f5:
                    e7:1f:a6:81:e7:21:02:11:54:56:62:ea:9e:37:6f:
                    5e:7d:ab:4d:1a:5a:f7:56:c7:7e:74:84:c2:a6:fd:
                    7b:b4:1f:dc:e7:2d:f1:fa:0b:2c:13:de:c8:11:5b:
                    d6:3a:20:77:85:ce:5c:bc:29:57:40:31:f6:a4:53:
                    f9:7a:97:e7:59:cc:d4:1a:5a:57:5c:0a:17:20:a4:
                    b0:02:8c:a8:f0:5b:b9:b4:7c:68:c9:b7:e0:71:7b:
                    58:30:d9:0f:9a:28:6c:6a:e6:c6:8c:fb:cf:cb:1b:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A9:70:9C:6E:1E:6D:20:BE:F8:4A:C8:C3:DB:1A:17:44:FE:72:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl

            X509v3 Authority Key Identifier:
                keyid:B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.24.0/24
                  165.140.232.0/22
                IPv6:
                  2602:fe87::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:0b:57:0f:d3:e3:00:f9:f1:51:94:11:af:05:0d:5b:79:
         5d:f3:f4:11:dd:48:fe:13:7d:5d:d0:5f:83:e9:05:3e:7b:48:
         0f:70:94:73:0f:ef:18:1a:d4:df:43:8e:ba:1c:2a:8e:aa:f3:
         1c:f8:16:7c:90:db:89:8d:78:49:a1:85:db:79:26:22:5f:de:
         dc:74:cd:30:0b:b5:53:43:8c:1d:46:8f:d3:52:7b:15:a2:b3:
         09:83:93:13:f3:b9:44:11:18:96:d1:58:21:02:ed:5f:a4:bb:
         73:8c:de:14:4e:78:e1:fa:df:a4:16:f3:fb:af:2e:02:b9:e1:
         52:8d:ea:b3:79:fa:00:c4:55:e8:61:d0:c6:ec:cc:da:57:d1:
         34:ac:fc:69:c0:e0:d6:ea:4a:e1:28:41:ee:24:e9:e6:65:16:
         32:3e:c2:8c:e5:01:05:90:6e:59:b4:c1:b9:24:02:e5:94:4c:
         ee:a2:2c:01:1a:e2:92:df:15:6b:6f:6c:b9:3a:f0:09:16:03:
         27:9c:9c:d5:cd:ac:d7:01:b2:8f:e4:03:ae:8d:96:c7:bb:01:
         1f:34:cf:f0:01:e9:fa:cd:f8:19:29:af:b5:c2:b6:a3:7e:1c:
         b8:2f:86:5c:bd:a4:e1:28:c5:a2:80:47:b4:ab:69:81:18:2e:
         02:1e:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:48 2025 by rpki-client