Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa
File:                     86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa (raw, json)
Hash identifier:          JVz/LiOkz73ufdYhjI1OMPQWAOUbKtj0cs8q1OepVVk=
Subject key identifier:   3C:D2:CD:28:0C:8C:3D:43:A6:C5:78:8C:FD:88:C1:46:84:0D:2C:9E
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584B047C035725E313D78ACAC300
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     36231
IP address blocks:        104.152.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:03:57:25:e3:13:d7:8a:ca:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=4bc2b52d-6e63-400b-8756-b5aef8db7a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:4b:7f:b2:5c:37:87:4d:07:17:96:b5:dd:
                    a6:aa:57:ad:cd:5c:1b:55:b7:bb:dc:b9:db:21:fe:
                    e9:e2:78:7d:51:70:e4:c6:3f:fd:cc:ef:f5:f0:50:
                    ab:fc:b3:b4:b0:3c:1e:53:a9:80:a0:d6:1c:82:80:
                    2f:cd:db:5d:57:07:93:c1:18:3d:f5:07:29:75:c2:
                    9e:3e:cb:5b:ee:0e:e4:ca:09:ef:25:13:83:13:61:
                    a0:45:71:39:ff:e2:2c:9d:c2:59:58:f8:0a:2f:a7:
                    5a:f7:d1:97:ce:ab:da:62:ad:ba:36:10:00:95:86:
                    57:af:0d:32:e9:c8:ef:61:b1:a8:fb:d4:d4:74:9c:
                    6f:0c:93:c7:7a:63:62:31:a2:f1:ca:c5:24:9b:63:
                    60:4d:f0:b7:8f:58:21:79:80:1c:f9:fa:48:67:14:
                    27:81:e9:56:e0:e0:23:de:ae:ce:1b:a9:a1:27:5f:
                    bc:93:1c:e0:5e:61:a0:20:9c:9a:41:32:e6:f4:4a:
                    b8:37:d3:f0:a2:17:df:f6:f4:67:ce:d2:64:c5:b9:
                    cf:55:24:e1:66:7a:8b:0f:58:b3:65:ef:e9:5a:b7:
                    0d:9d:38:ea:8e:62:de:bc:e6:95:14:92:1e:df:25:
                    0c:51:dd:9e:8b:73:a9:37:42:e9:b3:bb:b5:4f:c7:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D2:CD:28:0C:8C:3D:43:A6:C5:78:8C:FD:88:C1:46:84:0D:2C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c9:6c:77:16:78:4f:85:f7:b9:48:dc:6c:50:32:0a:5b:a3:
         cb:00:bf:89:c7:91:ed:19:ad:d8:37:70:8e:2d:aa:5a:c5:27:
         e8:e8:e5:cb:e7:1c:61:4a:02:10:26:89:00:a3:f6:42:47:40:
         c5:4d:f1:79:c6:02:36:b2:74:e5:53:25:47:a7:9e:93:de:ee:
         09:d5:b6:cb:b2:76:4b:21:ac:22:da:05:fb:69:ac:4b:cc:44:
         05:02:39:a6:17:76:87:62:84:17:99:8c:86:0f:b5:4b:75:30:
         37:32:e8:f6:6b:4f:89:dc:73:8b:f1:2b:37:9d:6c:3f:e2:5c:
         52:4b:b4:ff:81:28:2f:ec:7b:03:27:b7:92:ee:6f:a5:c1:2c:
         0f:01:8c:33:b0:4c:01:e6:a5:29:ad:5a:af:62:80:1b:87:d0:
         89:e7:8c:8c:1d:b6:7d:91:3c:15:16:dc:a6:26:6a:3c:00:99:
         bd:64:74:9e:e6:31:e5:4c:b2:20:d4:bb:47:e7:a9:d1:f2:72:
         b0:4c:41:4d:90:88:aa:69:2c:8d:ac:98:42:fc:95:7b:44:3d:
         1a:9b:33:2b:b2:a1:46:df:9c:b1:b8:ce:b6:b2:a6:42:4c:7d:
         d2:21:6e:f3:68:89:8e:91:37:fa:9e:77:cd:17:6b:5b:86:db:
         06:98:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 12 00:25:08 2025 by rpki-client