Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
File:                     34164e83-730c-3084-85e5-2ac39df4113c.roa (raw, json)
Hash identifier:          80GZYwyMynvLMkHpC3+VkmgcYxMMfcQtEdIkK02Dahg=
Subject key identifier:   70:49:F8:5F:61:1C:58:BC:31:E1:2F:25:B7:20:94:8D:52:60:04:B7
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584B68FC9BCFA7493A6E98A11640
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     0
IP address blocks:        104.192.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:9b:cf:a7:49:3a:6e:98:a1:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=71d05d8c-5271-474d-98a0-4acbf8caa01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:a1:1a:16:f3:b4:be:1f:8b:6e:7d:a0:e6:
                    e2:da:18:82:3c:20:07:29:d2:b8:6e:78:1d:e6:93:
                    d3:61:42:2a:a9:12:5c:9a:6c:fb:a6:da:c1:1f:b4:
                    04:f3:69:a2:2d:75:a8:ef:f0:fe:fa:1d:d4:74:86:
                    7e:06:4e:92:87:d8:11:03:5f:1c:71:62:9a:61:a9:
                    b5:27:cf:5b:25:85:44:bc:89:7e:ca:59:5a:3f:08:
                    d5:c2:13:27:43:8e:76:38:91:bd:e0:6e:92:e2:0c:
                    85:77:14:87:e1:98:95:29:1d:4a:7e:96:00:57:df:
                    c5:62:25:9d:dc:49:4e:9f:59:00:01:06:db:2f:03:
                    d4:73:b2:18:d0:64:18:49:93:20:1a:36:63:10:30:
                    d5:ab:bf:76:e1:8e:90:23:f5:ba:70:0e:dd:95:ca:
                    3e:c4:59:3f:31:ff:ec:b9:f5:ae:a8:fa:71:ed:e4:
                    b2:05:03:2f:53:60:f3:77:52:5b:c0:db:6c:1d:3f:
                    a0:f3:9a:85:3b:a2:5c:cd:5e:18:56:71:33:b6:f4:
                    52:0d:fe:e2:95:e7:c7:ee:05:ea:9e:0c:e7:3c:6d:
                    9b:bc:dc:0b:20:66:0b:41:71:df:23:4a:23:ad:8a:
                    71:57:d6:8f:bf:32:08:75:e0:b7:4d:54:b8:2e:10:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:F8:5F:61:1C:58:BC:31:E1:2F:25:B7:20:94:8D:52:60:04:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:a3:fd:84:f3:0d:7d:84:e9:3a:b6:6c:81:06:db:ff:85:
         5c:54:c3:58:f4:0d:d5:95:19:a2:99:54:97:a3:a5:38:ae:51:
         f8:b1:b3:0c:ea:6d:a7:11:a1:12:d2:80:91:db:af:29:97:77:
         ca:74:12:48:3b:42:ac:51:80:bc:54:6c:24:f0:f0:e8:78:93:
         4c:8b:ba:cd:5e:bd:cb:ef:cd:10:73:bc:41:12:ca:ce:e9:cc:
         2a:a6:a1:a6:8a:7c:40:f0:37:61:01:21:41:2f:0b:7e:aa:42:
         a5:91:37:f1:2d:c9:10:d4:8f:58:5c:5d:5c:42:e6:ee:48:1c:
         fd:dc:cb:9f:01:a8:68:57:3e:b0:75:0e:1a:19:13:7a:50:c7:
         81:50:d7:0c:bb:10:db:c4:8c:ec:a0:4a:87:cb:fd:49:16:c3:
         e7:40:bb:7a:95:e4:d9:ee:8b:2f:0e:a7:17:52:ae:54:9e:ff:
         c4:77:df:66:23:6e:41:ab:40:69:04:92:1b:fa:6d:99:d8:38:
         15:58:54:72:ea:29:f5:c1:6c:6b:cc:73:7b:48:53:40:49:d3:
         4c:5c:42:9f:fa:08:db:80:75:ed:f4:b8:96:6f:98:0c:f2:cd:
         e1:e9:ee:eb:b0:3e:e4:65:20:71:53:cb:f0:f1:e8:ec:9c:d9:
         8f:65:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 06:18:16 2025 by rpki-client