Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa
File:                     c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa (raw, json)
Hash identifier:          +0E/IwNs5NuB4BqBg9gaKLFGa6d2IUvi5s1icq4IKcI=
Subject key identifier:   A1:F9:C8:0F:98:15:1F:C5:31:F0:D6:F8:30:97:09:4A:48:4C:86:6B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584B6201EBA561C4D98FCB20B980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     9009
IP address blocks:        104.251.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:eb:a5:61:c4:d9:8f:cb:20:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=03ec26c0-2f15-42c9-83b6-fea62cf85be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:45:48:ee:94:34:2a:4c:0e:e7:d8:de:ab:59:
                    be:5f:ce:13:6a:3c:d5:54:13:b9:4d:c2:ee:6a:fe:
                    cc:d1:d1:ed:f3:ab:77:f3:09:24:c5:27:68:7c:88:
                    3d:74:ca:e6:60:98:4a:21:1c:ee:d7:66:97:cb:c9:
                    aa:44:dc:23:d2:c3:17:70:26:af:4b:ef:22:da:64:
                    f1:25:ec:ef:5a:8d:ed:50:9d:f6:2c:4b:60:6d:44:
                    74:81:09:6f:1e:1b:74:99:f0:1d:d0:5e:6f:a9:87:
                    be:c5:15:19:13:a0:05:07:f8:b3:4b:a1:3f:2b:c7:
                    65:00:78:fd:63:ca:04:d7:9a:59:a9:55:e2:d1:98:
                    73:8e:d9:f7:31:fd:26:b0:66:55:39:18:bb:29:5c:
                    59:c6:78:d4:4c:d7:59:b1:d0:36:44:06:1e:ce:77:
                    3b:90:1f:dc:a4:87:1b:f3:2b:6a:26:84:12:23:74:
                    50:37:43:38:1f:4c:7b:01:67:f8:19:6d:14:98:12:
                    b7:7a:b5:72:ec:2f:8e:83:88:74:7e:10:0d:33:fd:
                    93:66:30:57:5d:fa:2b:63:a1:c1:cb:1c:a2:1c:bc:
                    ac:b3:29:35:5a:2e:5d:db:4d:fc:8b:3c:88:e2:d5:
                    2a:21:07:19:36:ce:30:0c:f8:5a:04:44:e7:05:76:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:C8:0F:98:15:1F:C5:31:F0:D6:F8:30:97:09:4A:48:4C:86:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:be:1c:a3:39:51:49:57:4c:b2:4b:13:fa:4d:76:f0:89:a6:
         2d:5e:71:0c:53:f7:7c:b6:be:e7:66:41:67:e5:53:e5:72:72:
         ee:a7:fb:59:18:86:72:ba:05:88:2f:52:9b:43:0d:37:7f:d9:
         67:f9:75:99:11:fc:af:46:58:ba:9e:ed:8a:40:52:ed:ec:28:
         bc:c5:4d:be:1a:73:25:06:f0:a0:7c:ed:d0:68:26:79:ac:e8:
         c6:76:fc:cb:ea:d8:0a:0f:22:2f:45:24:65:7b:05:d8:12:7a:
         b3:01:12:a5:d6:19:c5:6d:25:0f:5f:bf:03:c8:f2:97:21:eb:
         4b:6d:71:e2:73:62:d4:52:d0:f8:c7:f8:92:b7:bd:ef:6d:94:
         a4:fa:81:1c:ed:35:b0:6a:78:44:f3:8d:dd:27:49:50:f3:a1:
         d2:70:6f:6f:7b:d4:fd:b6:94:d1:3e:61:e3:46:a6:e1:40:6c:
         90:8e:1e:76:0a:8f:01:4d:11:91:04:c1:68:17:ea:dd:b4:29:
         31:eb:14:d5:a3:50:dd:90:7d:24:31:d0:67:d5:bf:ad:8e:9a:
         77:3b:a1:15:c7:c6:7c:1d:35:a2:d5:f9:d5:d4:55:01:ff:8c:
         4d:06:10:af:0f:34:00:15:61:2a:13:7c:83:31:a9:63:52:d8:
         08:14:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:30:08 2025 by rpki-client