Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa
File:                     189d52ed-0a7d-31e4-bb88-da744d1b0794.roa (raw, json)
Hash identifier:          h46snW7MHLSvHrNgQMhq0wMo/GnUmpuYpYz4qWkYeM0=
Subject key identifier:   5F:1F:B8:AF:41:32:66:3B:16:DE:BD:8C:55:0B:C7:33:EC:4B:5E:6F
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584B398700EBC7EB0C7B1DB000D0
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     31942
IP address blocks:        104.37.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:00:eb:c7:eb:0c:7b:1d:b0:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=9cd4f3bf-3f4a-4bcf-9545-0cd3a9dd94e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:d5:e3:b1:29:19:34:65:ef:2e:c5:e5:38:
                    d9:25:4f:d1:e4:12:75:f5:53:6d:8f:16:32:b0:8c:
                    38:fd:90:79:cb:81:6b:94:ea:75:b7:52:cb:65:bb:
                    99:75:50:04:c1:c8:de:ba:6e:8a:a5:7b:df:3e:49:
                    0f:04:a1:36:2f:c3:87:6e:68:61:8b:de:c3:76:15:
                    9d:c1:f0:d8:c3:25:f8:9e:3c:be:b0:56:ff:f6:f8:
                    73:9f:49:7c:a1:a1:cb:f6:95:4e:fd:54:0a:ce:b9:
                    aa:39:da:0f:6f:25:ad:42:d1:18:ef:4e:a7:6c:90:
                    6f:60:79:ae:b5:5a:fd:49:87:85:e9:c7:d0:4e:f0:
                    b8:ea:c1:c7:4f:a8:7c:76:6a:a8:46:d7:bd:92:d9:
                    30:db:f4:38:17:7d:39:ed:1c:a0:1c:dd:1a:52:cc:
                    c3:6d:ed:d5:9b:ba:56:da:6d:b5:00:c5:b1:3c:eb:
                    8b:74:b9:05:ff:61:39:a9:d6:96:7d:e4:09:4f:9f:
                    69:c9:aa:a0:9c:c6:fc:71:05:26:f8:ae:55:54:e3:
                    6c:b7:c7:dd:f9:f1:51:f1:04:7a:68:7c:19:e7:93:
                    26:42:73:e4:cc:72:57:46:70:22:ea:e4:99:76:65:
                    2f:97:8f:d3:87:e1:08:9f:b6:05:9e:07:e1:4b:4a:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1F:B8:AF:41:32:66:3B:16:DE:BD:8C:55:0B:C7:33:EC:4B:5E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:46:d7:f6:54:bd:26:b2:13:67:1e:11:ce:fc:35:59:50:
         23:a4:10:3b:c2:1c:17:9c:61:7f:a6:c7:7e:c2:a9:a4:a8:8e:
         f7:e7:04:69:c8:bb:7e:78:ca:07:f4:4c:fc:a0:6b:ed:f5:53:
         07:4b:89:fb:9b:00:8c:ad:48:0f:3e:97:36:e2:fe:bc:85:4e:
         12:56:f8:c9:29:2a:41:28:ba:9a:66:83:66:a4:e9:52:04:f7:
         09:d6:cb:73:42:c9:7c:8c:4b:98:77:de:10:78:f6:67:da:88:
         ce:72:57:a0:8c:58:6f:ad:ff:ab:ed:b4:f7:2f:42:64:77:f2:
         bf:fe:d9:f3:94:58:54:67:15:4e:bf:9e:d7:11:2c:fb:74:fe:
         6b:80:a5:e5:89:e5:35:66:7f:cd:ab:75:8c:b9:1b:43:74:a9:
         c8:ee:07:dc:10:35:d9:a5:8a:67:86:72:68:f4:73:45:56:69:
         ed:72:0d:db:42:17:25:bd:bd:0b:41:f8:40:df:53:e5:b6:26:
         32:be:a5:f8:da:d5:f2:42:c2:1d:99:ff:b7:00:97:f9:f3:98:
         6f:f9:30:05:29:03:c1:a6:68:f8:d3:03:4a:9a:45:a5:fe:4b:
         2e:4a:c7:72:e7:2f:51:44:9d:4d:e4:c5:28:cf:5a:76:1e:e0:
         79:e7:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:55 2025 by rpki-client