Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4af64641-0b0e-3a33-ae5b-9fc53ea4ed7a.roa
File:                     4af64641-0b0e-3a33-ae5b-9fc53ea4ed7a.roa (raw, json)
Hash identifier:          xsN3DL+RPZvTX5lvOEJsriVePSRMpWeFRV5dJSTXDmY=
Subject key identifier:   D2:E0:75:9B:4E:F0:AD:8B:D5:FD:58:49:DA:3E:B8:24:21:FA:33:FB
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B63819F804922680F07B93380
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4af64641-0b0e-3a33-ae5b-9fc53ea4ed7a.roa
Signing time:             Thu 02 Oct 2025 13:53:54 +0000
ROA not before:           Thu 02 Oct 2025 13:53:54 +0000
ROA not after:            Wed 31 Dec 2025 14:53:54 +0000
asID:                     23473
IP address blocks:        104.145.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:81:9f:80:49:22:68:0f:07:b9:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 13:53:54 2025 GMT
            Not After : Dec 31 14:53:54 2025 GMT
        Subject: CN=849a3266-dafd-4f9b-915a-915075d7b99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:0d:f3:be:2d:6e:f2:f2:0d:c6:26:b1:5c:
                    d7:e8:d4:6e:c9:8e:93:ad:0d:b4:e6:1b:2a:c6:54:
                    27:a5:fd:da:40:ba:56:1b:02:35:59:7d:50:89:f5:
                    b7:f8:03:ca:ce:3a:bc:84:c7:bc:0e:b4:4b:1a:53:
                    24:5a:f4:7d:6d:10:b8:0f:cb:27:5a:87:fd:ce:1e:
                    a8:3a:5f:2f:a5:c9:fe:94:5b:41:f4:62:fb:9d:3c:
                    9e:46:cb:ce:34:83:ed:ae:b1:85:0e:0c:db:1d:42:
                    e8:04:5e:b9:c9:8d:4e:d3:0f:cc:9a:57:0a:b3:46:
                    5f:a5:a2:57:79:63:f9:2c:45:9c:bd:6d:64:4a:40:
                    3c:5d:9c:00:bb:9f:ed:6e:e2:a8:47:3f:74:e1:80:
                    be:c4:62:35:a7:8c:11:0d:32:fa:e4:11:3d:fe:65:
                    00:0f:8c:c8:9c:89:5f:56:d1:c7:c3:16:e8:58:94:
                    49:95:52:44:37:fc:6b:3f:9d:12:82:bf:6b:da:c4:
                    cf:da:b2:f8:fb:dc:78:f8:0a:c0:62:a7:6f:87:8f:
                    8b:e2:38:c2:16:b5:a5:3b:de:48:5e:11:55:de:e1:
                    f7:28:59:03:95:0c:ab:54:2c:ac:a8:7f:8e:13:ab:
                    3c:08:c6:bc:09:0e:e3:eb:79:e0:7a:d7:b0:66:08:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:75:9B:4E:F0:AD:8B:D5:FD:58:49:DA:3E:B8:24:21:FA:33:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4af64641-0b0e-3a33-ae5b-9fc53ea4ed7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:81:49:52:f9:6a:0a:7b:8c:83:a8:fc:c7:dc:60:64:3b:19:
         88:dc:6a:35:56:6f:fd:01:bf:66:2b:9c:e6:de:31:86:48:e0:
         80:54:09:1b:66:fd:6d:4e:f5:bd:dd:0d:f7:6d:cc:21:cd:c2:
         c9:6d:6b:18:73:e4:be:78:76:f1:4a:cd:46:21:21:be:5e:5b:
         31:8c:f4:29:0f:95:07:86:98:89:92:41:4e:33:c8:69:20:2f:
         0d:ab:7e:b3:48:8c:a1:9d:c5:8e:fe:ec:b2:5a:fa:86:71:95:
         77:3d:68:8a:79:03:8c:17:c0:ec:51:db:8e:0d:80:56:eb:04:
         ba:cf:bd:54:08:35:50:15:2a:7d:ed:64:e6:db:0f:1c:f2:6c:
         d6:8e:96:ce:1b:51:70:29:40:5f:99:e9:22:a0:54:b1:d7:1d:
         23:fe:a7:cc:37:f1:a1:dc:fd:25:f8:e5:a2:a4:c9:0b:ed:86:
         26:ba:25:a1:1c:0d:8b:49:4b:d9:4f:09:a6:7c:6d:4a:24:97:
         ff:3c:76:98:da:e1:57:09:0c:c1:67:fd:f3:a0:f1:5d:77:09:
         c4:e8:43:00:79:84:27:99:89:06:f8:59:b0:66:52:35:72:36:
         e6:65:ac:be:08:86:da:73:3c:82:3f:a8:2a:ef:e8:9a:5f:fe:
         74:ed:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:39 2025 by rpki-client