Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa
File:                     2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa (raw, json)
Hash identifier:          mWXu1eVJvPIyrdL5aTIgAq+rgkd+V78bWBnvMQhAfLc=
Subject key identifier:   69:6D:14:4E:EA:D9:B8:05:8F:E3:B1:85:0D:54:BB:82:4F:78:CD:68
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C1A1802805B8000F74100
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        104.251.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:1a:18:02:80:5b:80:00:f7:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=ae0dffcc-eadd-43c8-a496-1e6037a48072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:58:33:57:0e:f5:ac:ba:14:59:67:b1:0a:
                    0a:ac:43:bf:fe:00:63:21:db:0f:24:29:2c:90:5e:
                    b5:53:87:b9:89:64:05:10:3c:82:58:62:c7:14:66:
                    3d:fc:e7:2b:e6:80:cd:e7:2d:51:0f:b1:74:d7:f3:
                    71:39:e7:f6:75:64:d6:3f:12:6f:ae:fc:f2:f0:ae:
                    35:b9:b1:9b:63:34:fe:a0:ef:20:78:bc:70:eb:c7:
                    16:8b:0b:d4:c5:f9:2c:a4:b5:74:80:2b:2a:04:87:
                    8c:1f:99:ed:d8:41:eb:53:4a:f6:a7:c6:ce:b8:0e:
                    ec:18:93:d5:39:ed:07:5b:cd:4d:7e:5d:32:09:bd:
                    fb:50:b8:c7:a8:98:e5:2b:5e:06:11:fa:cb:ed:4b:
                    15:16:18:c9:73:78:bf:f8:b2:05:56:1c:3e:19:90:
                    8c:5b:6c:43:61:dd:de:6d:d7:7c:93:4e:f3:c4:5e:
                    cd:37:f1:45:c8:f9:92:00:0c:07:e3:68:60:fe:d1:
                    43:7d:7e:f9:46:7e:32:70:68:6b:8a:bf:20:f6:20:
                    52:8f:a4:d1:7c:a3:fa:7a:9e:87:a6:48:f0:b4:6b:
                    dc:a3:13:96:9d:5e:2d:f4:4b:8d:34:0c:8a:30:7d:
                    e8:fc:f0:4c:22:cb:27:5d:a3:d8:45:78:be:78:f4:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:14:4E:EA:D9:B8:05:8F:E3:B1:85:0D:54:BB:82:4F:78:CD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:78:37:da:61:25:7f:b8:4c:73:8e:98:6f:59:5b:b0:bb:6a:
         bd:b0:dc:a4:bb:8c:e7:d3:d8:2e:4c:8e:1b:06:d2:b9:11:1a:
         65:0a:b9:d8:bf:04:a4:77:8f:a7:7d:d2:ef:3b:f0:6b:9c:b4:
         8c:0e:a4:51:c5:cf:1d:0d:82:13:50:88:a9:78:9b:29:b0:22:
         a9:5d:b3:94:af:f2:54:c0:de:d2:03:09:33:e9:41:2e:5d:fa:
         69:dc:6d:04:29:fa:4f:ce:f4:a5:fa:c5:17:d5:fe:22:cf:84:
         db:31:1e:3e:81:be:9b:9b:84:f3:3e:15:80:79:e3:3e:8c:20:
         ce:7a:1f:d4:38:7e:86:bc:02:df:99:20:36:7d:c7:0e:35:c1:
         02:40:d6:2d:5e:c1:bd:77:83:d7:5d:5f:3e:7b:80:ff:29:ff:
         e6:27:5d:ff:dd:31:7d:1a:50:53:46:9b:a8:dd:9d:65:fa:3e:
         36:bb:0c:b5:a3:0d:3e:72:b3:a8:26:ba:67:3b:de:13:ae:80:
         c0:c1:bc:e0:ae:eb:07:d6:c2:87:13:72:fb:1a:8a:18:a2:9c:
         95:3f:47:b7:ee:c4:e5:4c:d2:c7:f4:83:e7:9c:76:66:95:1d:
         c9:5f:39:4c:22:02:a6:39:1b:25:37:e4:14:95:a3:fc:7b:27:
         74:e8:46:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:54 2025 by rpki-client