Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87ccfa52-8728-3304-a6b3-8365164b5596.roa
File:                     87ccfa52-8728-3304-a6b3-8365164b5596.roa (raw, json)
Hash identifier:          RLM4Td74hRuGLKffY4dFjPOuucqAyxovFYuw4Ooq1d0=
Subject key identifier:   35:5E:45:5A:9E:D8:5A:05:1E:23:5F:2E:BB:69:C9:18:1F:26:A7:99
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A7E7B983125CE5F33EE7E2540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87ccfa52-8728-3304-a6b3-8365164b5596.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        104.198.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:98:31:25:ce:5f:33:ee:7e:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=14d728d3-f4e2-4d6a-a6be-1ab77496ad63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:e8:7c:ec:eb:a4:b9:04:6e:f7:59:da:b0:
                    cb:94:bf:f5:47:0b:63:66:49:f5:a5:ac:26:f2:89:
                    2d:13:b3:25:ac:47:f3:7a:c5:ae:59:12:3d:4e:17:
                    af:96:00:c3:3f:2b:8a:27:08:d6:b0:a4:4f:f1:7f:
                    4d:23:8d:99:87:c4:11:5e:cb:9f:91:19:45:9c:5b:
                    50:31:8b:11:da:c1:82:09:16:d1:0d:11:93:6a:d0:
                    dc:b9:b5:40:e3:bb:2c:f1:30:44:77:a4:b5:2f:88:
                    c8:04:e4:8b:f1:fb:cd:a1:d0:09:4b:09:b2:1f:bb:
                    0a:f0:f1:a5:9b:13:0d:bc:e4:57:82:56:08:4a:85:
                    a4:b6:e5:14:7d:ef:20:f6:6b:12:75:fc:a4:bd:62:
                    a7:21:5f:5b:f4:98:cf:2f:bb:6f:04:88:e7:6b:48:
                    38:13:93:bd:ef:cc:eb:24:06:52:ea:45:22:53:da:
                    cd:86:62:9f:c4:51:bb:6b:8a:e4:df:89:95:0c:e6:
                    d6:c3:ab:a1:f2:17:55:ba:6f:f5:25:4b:63:b7:50:
                    cd:ed:19:59:c1:9a:db:6e:f2:46:d4:82:9f:4b:3c:
                    15:2b:86:f6:66:a7:4e:19:85:b1:12:a2:0f:a8:ff:
                    3c:aa:fa:e2:54:bd:33:0e:e5:36:f3:ea:02:6e:8b:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:45:5A:9E:D8:5A:05:1E:23:5F:2E:BB:69:C9:18:1F:26:A7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87ccfa52-8728-3304-a6b3-8365164b5596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:43:b3:3e:ac:69:9f:fb:7e:eb:4f:e4:9c:38:83:39:b4:c3:
         49:05:a8:1a:29:62:e1:00:77:5d:6f:94:4e:60:df:ba:dd:02:
         d1:ea:11:4d:4a:21:4c:6c:03:48:61:97:5f:1c:26:c8:30:06:
         66:91:c6:01:e2:c0:bb:83:50:61:75:f8:98:25:62:bd:d6:f8:
         db:07:69:48:9c:82:d5:48:f2:6a:7b:97:e5:1f:03:8a:5c:32:
         d8:21:fa:15:a0:42:be:eb:70:ad:1a:15:e0:4a:59:c9:df:f3:
         d4:29:48:0c:05:0c:ce:29:8c:16:9d:a7:8f:ec:d5:2f:8a:41:
         ee:87:0c:fc:db:e3:5f:65:28:f1:81:66:ef:b5:69:da:86:eb:
         ff:20:24:c7:6f:a4:ae:9f:19:0e:de:73:65:2d:98:15:4b:5e:
         8b:7b:99:8b:d9:68:a8:93:b0:b6:9a:fe:25:da:6f:e6:db:63:
         e0:1d:b0:c9:e9:a8:05:f3:f6:f9:39:ed:71:72:97:03:10:c0:
         5c:ac:c6:7f:86:97:13:5f:15:6f:be:12:ec:5c:1d:15:47:98:
         03:2b:a9:ec:b8:21:6a:15:2c:20:91:3f:a4:43:da:3a:94:7b:
         d0:79:2c:2d:cc:3f:d8:70:25:a0:9b:1d:ee:18:3a:44:1d:94:
         69:15:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:36:20 2025 by rpki-client