Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
File:                     6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa (raw, json)
Hash identifier:          pNRj/9Kk0zQosjEhGelLLqHMCE5dhI14co0aueafaXI=
Subject key identifier:   32:7B:67:18:67:97:1C:31:6D:32:C5:17:06:CD:75:2F:84:4B:FF:F5
Certificate issuer:       /CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
Certificate serial:       010D0C9F4328584B63673C598613A07358A32D40
Authority key identifier: 72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     27373
IP address blocks:        104.193.248.0/23 maxlen: 23
                          192.251.197.0/24 maxlen: 24
                          204.10.107.0/24 maxlen: 24
                          204.10.108.0/24 maxlen: 24
                          2602:fa37::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3c:59:86:13:a0:73:58:a3:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=399dddac-01c4-47e4-a7dd-8d7ba673e8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:08:87:de:1b:ec:8b:f8:73:12:66:f6:1c:
                    47:f0:a1:8d:75:35:2c:6b:65:84:d1:dc:79:87:4b:
                    c0:4b:6f:f5:88:d8:c8:54:54:cc:3d:f7:e6:03:2b:
                    f7:af:40:6b:8c:2f:40:a0:4d:25:5d:b9:01:4e:77:
                    34:71:7a:67:0b:9e:c0:51:ef:ec:70:a6:7f:63:9d:
                    ca:57:06:88:ea:a6:ad:57:50:3c:bf:66:5d:2a:04:
                    cc:58:73:c0:71:89:fb:1e:18:31:7c:c1:43:c4:49:
                    db:5d:d3:a3:a5:8a:15:47:19:22:8f:7c:74:56:ac:
                    b0:21:e8:35:c6:6d:5a:9e:6e:84:fb:f6:e4:e2:0e:
                    85:b6:0b:4e:49:e8:31:c6:32:50:b5:42:97:7f:65:
                    b9:6f:fd:1f:da:25:e5:8a:c2:7a:b9:77:39:87:f7:
                    04:67:05:0f:42:aa:63:b7:e5:62:11:44:30:3f:5f:
                    1d:45:60:cb:53:79:2c:f9:f0:46:06:d7:87:15:05:
                    f7:f7:d5:ce:a7:71:7f:b6:f7:23:4a:fd:11:e4:35:
                    cd:d3:24:18:cc:50:34:90:55:2c:ac:c2:d1:ca:99:
                    af:02:ac:58:6c:8e:18:9d:02:ee:41:ec:d8:0c:c1:
                    7d:86:84:c7:54:43:25:a5:8c:33:0c:a7:c8:c5:23:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:67:18:67:97:1C:31:6D:32:C5:17:06:CD:75:2F:84:4B:FF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl

            X509v3 Authority Key Identifier:
                keyid:72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.248.0/23
                  192.251.197.0/24
                  204.10.107.0-204.10.108.255
                IPv6:
                  2602:fa37::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:f1:9c:0a:64:9a:b6:a7:be:1c:bf:4d:15:a7:36:4d:86:
         0c:b3:1a:b2:e3:64:4f:54:e3:68:54:53:32:78:dc:21:bf:e7:
         5d:f7:28:8b:4d:fb:84:07:f2:71:3a:44:f2:3a:49:33:96:bc:
         75:d4:15:d4:64:d3:20:af:25:ad:4e:2c:e6:b5:fe:47:b5:ea:
         d5:72:bb:db:52:ab:d8:67:58:8f:c5:3f:1b:f3:73:b1:53:17:
         1c:4c:5b:8d:ac:12:d3:9a:e0:93:72:31:de:30:c4:56:87:f3:
         f9:31:f3:9d:39:e4:68:aa:46:b8:27:1e:8d:b2:09:87:c4:0d:
         87:26:d2:d7:b5:b6:85:bc:92:b7:dc:ea:91:de:14:e7:5b:ef:
         d9:5d:b9:68:1f:af:32:a5:cb:bf:fd:2d:46:41:63:52:14:f8:
         dc:f4:db:f7:e8:3d:ca:81:18:8f:38:c1:14:ef:f2:12:e0:0f:
         71:86:d3:35:1a:5a:1c:6f:46:5e:6f:99:19:e2:ae:35:50:a3:
         3f:58:a3:97:7a:f0:cb:d9:eb:3f:ec:44:35:e6:ec:71:fa:50:
         8a:88:c9:89:88:6e:18:e3:29:44:f0:30:58:0d:5d:9d:75:33:
         4c:6d:b4:10:69:74:8d:f9:5a:41:fd:a4:8d:3c:72:06:15:1f:
         50:0e:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:55:00 2025 by rpki-client