Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa
File:                     b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa (raw, json)
Hash identifier:          bWF3jJtCBrREKzGST+hhByc0zABXGCqyfKYEgvtpCnQ=
Subject key identifier:   D0:2A:F4:4C:CD:C2:4F:20:F1:D3:76:BE:2F:6D:07:CB:27:58:3C:93
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B2331954C1FAA719E0427BC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        108.177.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:95:4c:1f:aa:71:9e:04:27:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=a9ca87da-8829-4433-b01f-d17d61607c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:08:6b:67:f7:e0:92:d2:99:7c:3b:ed:44:
                    8b:16:9d:cf:56:f6:e7:b4:40:07:dd:47:cd:73:53:
                    06:98:a8:4e:37:63:24:53:aa:14:d6:88:14:88:fb:
                    48:52:4e:09:d1:75:bf:12:9a:1b:90:ba:1e:b7:58:
                    0f:c6:8c:a0:90:af:65:3e:38:ee:5d:f3:ff:3d:36:
                    5b:df:d7:9b:3f:81:a9:e7:73:46:62:5f:25:1f:21:
                    5a:5d:e5:b0:5a:d9:e5:39:c6:8c:01:11:99:ff:8d:
                    88:56:a5:9c:83:4d:47:06:a5:a0:84:23:67:99:ec:
                    a2:91:ff:57:58:d8:c6:32:4f:64:b6:32:c3:e2:f9:
                    35:7d:fb:22:97:3b:69:83:5e:0c:90:65:2e:cd:f6:
                    d2:d5:9e:cf:9a:aa:e0:4f:f3:28:00:c9:0f:c3:fc:
                    04:4c:75:da:6d:98:25:77:44:fc:1d:7c:27:d9:62:
                    54:1f:1e:0b:c9:42:07:24:cd:de:b3:49:74:4f:fe:
                    c0:f4:57:35:11:3e:c4:ca:e4:ec:ca:73:29:9d:9d:
                    ed:ca:55:b1:e2:7a:7f:da:8d:c2:61:77:68:de:28:
                    dd:26:5e:fc:be:fc:50:19:32:70:be:86:e8:54:58:
                    87:9b:86:ee:0b:4b:e0:0b:e5:6e:20:25:90:a3:1f:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:F4:4C:CD:C2:4F:20:F1:D3:76:BE:2F:6D:07:CB:27:58:3C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4a7d40a-ddeb-3ca0-adae-d21c4c1a704a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:d9:f6:05:85:f3:5f:66:e1:44:74:16:d3:f6:26:a5:0d:
         55:9e:22:a0:bf:34:c0:d9:e9:bd:22:75:6d:5d:70:b0:dd:33:
         01:ba:1b:63:bd:19:b7:dd:0c:5d:85:d4:51:17:93:93:c5:db:
         e9:53:4b:a1:b3:e5:a8:34:44:14:b7:e6:58:10:fe:9a:8b:d5:
         5d:ad:93:27:e7:0d:2e:cc:0c:e5:3a:0d:10:e3:69:b5:34:6d:
         01:15:f4:5d:24:e9:e1:27:71:f4:9e:b9:24:64:8c:4f:e4:ba:
         75:db:b2:78:83:10:e5:f8:48:54:58:db:f2:ba:db:dd:47:df:
         ea:82:ef:5c:2f:6f:58:cb:90:5f:66:7c:ee:56:ed:e6:14:41:
         09:b0:1c:21:09:96:8c:b5:3f:a9:59:d8:30:a2:b0:88:f4:17:
         43:a1:2b:ad:f3:cc:85:1f:c3:1f:a7:08:bd:64:51:fb:29:ff:
         69:13:bc:31:1f:c8:14:0b:85:ff:8f:cc:24:bd:1e:84:d3:66:
         52:dc:fd:c4:a3:f6:2a:7d:a6:6f:76:98:99:6d:45:33:07:96:
         6e:58:b1:19:50:fb:84:f4:cd:4a:0f:90:65:7d:4d:08:ce:47:
         e2:89:65:9c:c8:9c:b4:99:41:61:91:a5:db:66:24:71:61:58:
         d1:49:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:39:58 2025 by rpki-client