Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0feb14dc-c94f-310d-b934-c3ef4ec3385f.roa
File:                     0feb14dc-c94f-310d-b934-c3ef4ec3385f.roa (raw, json)
Hash identifier:          UDEO3CQe/H9IE6aMnPuZPDUgxpvusS/AV/2UoGzStwE=
Subject key identifier:   45:31:8C:4C:33:AA:8C:B9:55:AC:E6:17:2E:7F:37:E3:63:F8:14:8B
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C19AD33871608EA0439C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0feb14dc-c94f-310d-b934-c3ef4ec3385f.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     14291
IP address blocks:        104.218.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:19:ad:33:87:16:08:ea:04:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=aa58ae24-14ca-48f3-b09c-633d45367e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:3e:2b:ac:df:c1:aa:5a:a5:b4:a4:c2:09:
                    f7:e2:bc:ed:e6:a6:c0:63:dd:8c:35:dc:37:22:98:
                    68:93:30:43:3a:6d:34:7a:d4:b3:0b:8d:80:85:da:
                    63:27:7c:dd:70:81:52:b8:58:11:92:e4:ab:c2:4d:
                    25:f8:c6:da:0d:27:75:22:48:44:63:d9:af:a9:81:
                    1c:b1:a0:8a:bd:75:3e:2d:30:d2:39:1b:fb:6a:5c:
                    a2:3e:a2:ea:46:cf:dc:82:79:67:c4:34:28:98:d3:
                    62:2b:5b:b5:46:ef:a0:59:f9:d3:29:36:28:e2:75:
                    56:48:28:46:d1:9b:b8:0a:35:54:33:be:ab:d0:89:
                    7f:e5:5e:90:47:f1:4d:f4:d4:74:00:ac:b6:5d:09:
                    72:4d:4e:8b:92:a7:60:11:a9:4b:3e:92:03:0c:f5:
                    55:5e:c0:28:61:b1:bf:72:02:36:55:64:8e:c6:89:
                    8e:74:bb:ce:47:dc:76:fa:75:a0:59:fc:59:6f:ed:
                    e7:74:96:2e:15:d2:13:66:be:aa:78:0d:ce:98:b5:
                    0a:e2:b7:fa:89:6d:f1:30:6e:9f:d8:a9:88:85:12:
                    3f:51:05:33:a6:10:5e:4b:97:7d:99:c9:73:32:24:
                    bf:15:e1:aa:92:20:8f:b4:33:f4:5a:45:a3:cc:af:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:8C:4C:33:AA:8C:B9:55:AC:E6:17:2E:7F:37:E3:63:F8:14:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0feb14dc-c94f-310d-b934-c3ef4ec3385f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:3e:48:59:bf:43:02:11:2e:fc:dd:66:19:92:ea:3f:b7:
         a7:1f:3d:00:b7:71:da:97:95:ba:3a:92:19:e7:99:0a:84:82:
         db:7a:73:e1:0f:ec:69:35:b1:43:89:d3:d6:72:f5:14:ec:d9:
         bf:b5:15:78:fe:f5:ef:a9:7f:70:25:8f:42:70:8c:e1:14:af:
         5f:10:e0:7e:03:4f:8c:41:df:62:1a:b0:5d:46:01:0b:39:18:
         ba:e9:f0:93:3b:be:12:94:97:8d:38:13:6d:7e:a0:52:a6:35:
         f9:36:1d:93:1b:ff:e3:98:b5:fa:bc:82:ac:68:fc:4e:dd:28:
         2a:50:d9:2e:f7:9e:d0:0e:63:49:47:55:f0:bd:ef:ae:31:11:
         34:66:ca:6d:5f:f3:06:0f:f8:3c:2c:9b:9e:28:cd:a8:37:f7:
         b2:a8:89:88:45:4f:c0:4a:f6:4c:a5:b8:a7:0d:2d:61:21:4c:
         2f:f1:b4:e2:58:19:75:f1:ca:f5:71:ce:e5:99:76:9f:0d:51:
         6c:60:b0:33:73:64:d4:17:aa:97:57:ef:23:6c:86:82:eb:e7:
         6d:4b:05:d6:39:aa:db:00:b9:3c:8a:c9:b9:06:9f:86:ba:11:
         51:4f:03:c8:48:27:0c:ea:29:f7:eb:e2:5f:b9:22:ac:0c:9c:
         e0:3c:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:11 2025 by rpki-client