Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/847db46f-b960-3052-9906-bb6edb9e8446.roa
File:                     847db46f-b960-3052-9906-bb6edb9e8446.roa (raw, json)
Hash identifier:          uS62jzdUdKWjWtNwlWvZSBERIsQp9czObUU9TNWtZ2c=
Subject key identifier:   39:36:B2:18:59:BD:35:CD:A9:78:0B:F4:7B:84:00:49:F0:81:D5:0C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3126ED85778AC5392D519740
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/847db46f-b960-3052-9906-bb6edb9e8446.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     23473
IP address blocks:        104.145.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:ed:85:77:8a:c5:39:2d:51:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=623d7c55-66d2-4e58-8bed-b01111c67bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:3c:85:0b:e0:1b:12:c9:5a:73:91:b6:c8:
                    42:e2:a5:f4:03:16:bf:ef:e9:b4:b1:e8:67:32:99:
                    3d:4c:0d:5b:33:d6:9b:95:f7:ef:2a:c0:37:57:9a:
                    de:93:b4:a9:15:31:c3:dc:16:d3:6e:27:7f:59:36:
                    44:1c:4c:7f:53:a5:14:1c:0f:dd:1b:91:c9:0f:78:
                    98:73:9c:fd:85:d6:f7:81:8a:72:1c:c7:21:66:5f:
                    eb:e9:93:ff:a4:31:dc:9c:5f:74:f1:5f:34:a7:55:
                    df:be:35:2c:85:d0:51:72:34:fb:18:00:d3:f2:46:
                    38:c6:fc:df:da:44:b8:ba:4f:7c:87:19:8b:20:8b:
                    e1:1f:9b:ff:a7:c8:ad:3f:53:16:ed:e3:53:1b:fc:
                    ff:6b:7f:b2:9e:e1:1b:85:9e:12:61:27:d9:f7:e4:
                    44:4b:67:06:f6:06:99:29:ec:2f:8c:86:b2:40:cc:
                    22:bf:b8:d3:bd:30:34:b7:2f:89:b6:1b:59:e0:5b:
                    45:4d:4d:41:4a:92:a9:62:f0:1c:95:69:cd:0a:4d:
                    90:08:51:a6:e7:2d:28:cf:df:2b:83:44:b5:b1:79:
                    ec:c5:bb:ee:b6:ab:eb:81:ee:22:cd:a7:32:5c:ba:
                    57:70:be:65:36:3c:b1:d6:7c:1d:33:ad:91:26:0a:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:36:B2:18:59:BD:35:CD:A9:78:0B:F4:7B:84:00:49:F0:81:D5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/847db46f-b960-3052-9906-bb6edb9e8446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:6c:e1:20:b8:9e:c8:3a:a3:87:2b:3b:47:da:6c:a6:ac:
         41:54:12:e1:0f:e1:dc:c7:f3:88:9c:36:ed:20:19:e7:a8:26:
         6f:f0:c0:7c:80:d0:49:05:06:70:8a:fb:c4:54:97:49:87:9f:
         9a:9b:0e:5c:2b:a9:44:63:82:45:98:0f:05:dc:bf:cb:a9:34:
         65:82:a8:c4:61:b4:9d:03:af:1a:de:a9:5b:fa:be:70:1e:5f:
         03:51:f8:f9:6a:6b:ad:37:f3:ab:49:b9:9b:e8:6e:72:4a:ed:
         40:89:62:75:c3:48:0a:80:30:53:ba:77:40:04:0e:19:26:da:
         bd:58:37:1c:3e:cd:70:19:c7:9b:a9:e9:5e:c2:ff:6c:c5:1a:
         6a:12:e0:aa:9d:49:5c:3d:21:e6:6f:5f:71:8c:64:82:ce:20:
         a5:c4:cd:24:af:27:c9:fa:f2:04:09:32:d1:1c:b6:bf:5e:e6:
         4c:02:21:32:7b:35:ea:0e:83:77:fa:d3:eb:7e:e4:87:c5:45:
         4f:11:c9:60:97:d3:36:97:89:32:24:dd:fa:33:36:ab:7e:63:
         d6:95:5a:e9:d2:92:30:b7:a1:64:d8:25:f2:ca:24:66:10:8a:
         06:eb:b7:82:ae:f2:de:63:26:2a:c2:80:0e:fb:67:28:99:02:
         bc:86:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:16 2025 by rpki-client