Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa
File:                     89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa (raw, json)
Hash identifier:          HicbDhH3k26AhOWbMMWwrfsl2qd7Bf2no26WOtcqt+k=
Subject key identifier:   94:05:D1:29:4C:56:0B:ED:5C:1F:01:F6:65:7D:90:6C:11:F2:80:15
Certificate issuer:       /CN=f07b485c-efcf-472d-9a69-ff56ca77fb4c
Certificate serial:       010D0C9F4328584B3126EF6EFF15B6B76BFAAC80
Authority key identifier: 6B:59:7B:EB:0D:65:71:87:ED:8D:BB:A1:08:31:60:53:35:CA:A2:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     395945
IP address blocks:        104.36.72.0/22 maxlen: 23
                          2604:7840::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:ef:6e:ff:15:b6:b7:6b:fa:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07b485c-efcf-472d-9a69-ff56ca77fb4c
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=661c2b15-e6d2-4c52-90fa-65a6c943e8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ba:51:54:80:86:2f:35:0a:76:14:e7:2f:27:
                    36:a6:da:e7:d6:11:77:78:99:f1:f0:9b:0c:f2:0c:
                    29:0c:30:b4:f4:84:f5:37:82:4d:95:b8:0e:b3:e0:
                    9a:73:69:4f:14:d7:7b:d3:f1:c4:ac:94:50:29:75:
                    0f:73:47:e2:f4:1a:7f:f4:f1:3b:ce:85:31:b4:e5:
                    74:15:15:a3:bf:20:80:e6:6a:a2:c1:5b:17:08:d9:
                    3b:30:15:33:87:cf:61:46:8e:57:50:97:01:2c:b3:
                    b7:6c:aa:b9:74:75:d1:ff:42:01:aa:db:51:b1:49:
                    e3:02:94:51:9d:af:c9:9a:fa:e0:f0:b2:73:13:25:
                    22:dc:e9:d0:37:2e:e3:f2:4b:f6:be:32:4a:e8:54:
                    b0:23:44:90:b6:6a:5e:f6:10:48:de:75:d3:28:bb:
                    b5:61:ea:00:52:b3:cc:47:b0:a7:9f:8e:4a:14:07:
                    c2:e4:91:87:f8:2e:64:fa:de:c9:34:4d:1b:b9:2a:
                    37:21:b0:40:69:fb:d6:70:b7:85:74:1c:71:bb:0d:
                    33:53:1f:0a:d6:75:c3:f1:cb:59:07:38:47:60:66:
                    a5:c7:5f:59:ae:1f:c0:5d:03:37:df:0d:6e:b1:e2:
                    61:64:b9:65:d2:35:7b:75:7a:02:2a:46:d4:6e:14:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:D1:29:4C:56:0B:ED:5C:1F:01:F6:65:7D:90:6C:11:F2:80:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.crl

            X509v3 Authority Key Identifier:
                keyid:6B:59:7B:EB:0D:65:71:87:ED:8D:BB:A1:08:31:60:53:35:CA:A2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.72.0/22
                IPv6:
                  2604:7840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:95:9b:3b:cf:84:3d:b5:3e:f4:8a:f5:7e:7f:79:88:b1:
         6e:0e:40:89:65:3e:ac:75:34:13:9c:4a:04:f9:f9:48:30:de:
         52:40:a5:a1:36:16:86:8d:07:f5:bc:94:01:99:85:19:2e:2f:
         47:bd:7c:56:a4:2d:36:f2:b3:31:d6:c1:18:ff:aa:e5:a0:80:
         a0:de:4a:20:8e:52:1e:68:ea:a4:8e:49:9d:a1:49:59:6d:09:
         78:b1:86:43:69:9d:af:1d:5d:cb:80:34:3c:dd:a5:83:b3:b7:
         23:00:4c:ca:fb:a6:52:c3:e4:be:f6:49:f0:bb:2a:3b:50:d5:
         37:fe:51:6c:ba:fa:29:c4:93:da:70:29:11:6e:f2:62:b0:10:
         0e:60:01:2c:26:b4:56:ee:49:3b:57:56:d9:a9:f7:e3:6f:10:
         90:9d:4e:2d:73:98:84:68:0d:73:66:70:c1:51:40:03:8b:e4:
         3f:9f:18:e1:64:5e:5a:f3:35:27:65:2e:73:59:0e:eb:bf:9f:
         aa:1a:bc:47:52:a2:e3:ff:1f:4b:15:97:b5:87:65:10:6f:17:
         99:9d:7e:de:1f:63:40:dc:fe:aa:ba:e5:f7:a7:84:e6:ba:05:
         90:7b:c3:a0:d9:f1:df:78:f2:0d:a6:9c:5e:52:b5:6e:26:74:
         96:76:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:11:41 2025 by rpki-client