Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa
File:                     550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa (raw, json)
Hash identifier:          bSKUIKHOETwXkmwVVQg4XnZjOmzcF+Bo6F+M4poVqhA=
Subject key identifier:   A0:A5:7D:C5:6E:7C:85:79:CC:11:68:15:BC:5B:A5:0E:2F:EF:55:C2
Certificate issuer:       /CN=e20d7b51-a205-4e55-9426-e473f80b2544
Certificate serial:       010D0C9F4328584B9E07992009C244AC1C9DC380
Authority key identifier: 98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     397736
IP address blocks:        23.174.16.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:99:20:09:c2:44:ac:1c:9d:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20d7b51-a205-4e55-9426-e473f80b2544
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=84e3509d-5d28-40c0-84cb-d43cd12a62df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:0e:f9:59:96:12:d7:66:1a:18:e0:26:2f:
                    8b:08:1f:72:2c:e2:0a:33:ec:e5:37:44:b7:95:df:
                    d7:cb:42:87:b6:13:57:7c:43:08:2a:73:7c:fd:eb:
                    00:2c:48:7c:d1:b3:4d:1c:a2:0c:11:e6:f8:a0:d7:
                    18:65:ea:0e:a5:45:2a:33:54:b0:dc:93:ac:98:24:
                    74:1b:17:ad:b0:f1:19:ce:4e:c8:ac:34:a4:01:dd:
                    ae:98:34:e2:d4:36:66:d9:3d:a4:ce:dc:e4:99:21:
                    a1:9e:b6:58:e0:78:4a:5d:d8:da:b6:ac:9d:b8:81:
                    60:81:ae:25:b2:a6:59:8d:85:46:e2:7e:7a:f2:22:
                    c7:a9:e2:78:1a:28:1d:5d:79:c2:f4:d6:37:18:45:
                    5e:c0:01:59:5f:2b:5a:3e:02:c6:9e:d1:a8:25:82:
                    54:52:01:84:b5:fa:67:bf:ef:36:15:da:8e:d9:a0:
                    1b:bf:13:04:18:0e:f2:8e:42:c1:65:2f:6e:54:16:
                    9f:d5:97:8a:f0:0c:6a:42:4a:de:e6:df:58:ee:30:
                    a8:04:65:e2:23:dc:d8:32:57:e8:66:48:03:15:a6:
                    b1:ff:b2:9b:84:d6:1a:92:70:5d:f3:f1:51:f6:f6:
                    f9:48:61:57:f2:d9:db:7f:21:16:57:d8:86:63:05:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:7D:C5:6E:7C:85:79:CC:11:68:15:BC:5B:A5:0E:2F:EF:55:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl

            X509v3 Authority Key Identifier:
                keyid:98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:78:80:82:d5:95:26:22:36:a6:fb:2d:65:52:32:f6:d5:79:
         bc:83:c6:37:f2:14:80:61:85:70:06:03:67:ae:65:f5:e8:5f:
         19:74:dd:a7:fc:e7:0e:fa:96:93:88:32:9d:63:3a:cf:ea:5b:
         18:e7:58:58:f9:53:6f:e2:cc:3d:48:dd:28:4d:2b:72:86:c7:
         1e:fa:e0:48:45:e3:b9:63:f3:5f:ae:b1:4f:46:21:73:26:b7:
         bf:98:bf:4f:96:dd:07:9c:bc:98:21:a0:7e:48:98:4e:39:46:
         08:cb:56:bc:d7:fe:28:df:a0:3f:4f:fc:c2:5f:b3:5f:08:1f:
         1d:3a:b3:ef:59:3b:fe:bf:29:76:9d:f4:03:ef:b1:5d:95:78:
         49:1b:60:cd:a9:ff:ea:a4:2d:f2:11:53:2f:5e:f2:d9:79:88:
         3c:6c:2f:aa:e8:76:02:d0:54:a9:15:e6:72:b4:1d:b5:c6:14:
         d6:d7:76:df:99:7f:14:b0:fe:94:cf:35:d2:55:ac:a6:3e:cd:
         a7:ff:f9:fb:d4:7f:f0:2d:2c:6f:f4:49:f4:97:bb:64:9f:a1:
         27:5f:11:2e:ce:fd:e3:3a:c7:9d:6d:4e:2e:d4:bd:b7:16:26:
         66:3b:17:23:a2:d8:26:a4:21:cd:3a:56:de:63:1f:83:fa:9b:
         64:41:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:55 2025 by rpki-client