Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
File:                     84cde4f4-6b3a-32b4-8547-230c540ead1d.roa (raw, json)
Hash identifier:          KgzuZVjHs/AwWhduY6tFuP07QP2+SxGFb/yMJUzsH6w=
Subject key identifier:   99:67:52:75:D1:99:D4:EB:1B:32:00:41:F9:19:D4:5F:99:0D:F8:08
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584B13D6C5B5F843977BBC7BF240
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     23470
IP address blocks:        104.238.204.0/24 maxlen: 24
                          104.238.205.0/24 maxlen: 24
                          104.238.206.0/24 maxlen: 24
                          104.238.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c5:b5:f8:43:97:7b:bc:7b:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=f8a2f463-ed39-4135-abf5-ff42313a02e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:98:95:6d:c3:81:8d:12:d3:ba:ef:07:77:
                    f5:4e:a4:8d:5c:d9:cf:4d:39:8b:cc:5b:31:5e:15:
                    f2:66:48:78:a5:58:dc:99:df:d3:34:d4:05:a4:34:
                    b4:ab:df:05:7c:05:0f:a0:96:09:8e:b9:28:80:77:
                    84:c4:23:52:07:a8:eb:58:49:bd:9c:a7:13:af:ef:
                    ef:db:36:cf:1e:6d:b2:ba:e7:96:82:31:5a:d2:28:
                    ac:20:1d:9a:65:ce:cc:36:ad:72:02:d5:91:80:bd:
                    e8:e9:8f:e0:c1:39:be:58:37:3e:69:b2:fe:a0:88:
                    f6:f9:86:c1:75:b1:e7:b2:80:db:05:c9:03:4e:32:
                    2b:9f:78:9a:55:65:68:8d:76:c6:65:fa:12:fc:e1:
                    05:24:5a:29:93:4d:6c:1b:f8:8d:7c:1e:1a:3a:91:
                    02:47:62:29:f8:85:b5:c7:39:de:d8:5e:79:e1:f1:
                    26:da:ad:d6:65:20:f4:fb:68:25:4b:c1:95:45:3c:
                    c8:8b:e1:22:6e:ec:20:84:8c:8f:b0:71:01:e3:d1:
                    60:e3:05:9c:1c:6d:7e:77:68:f8:ac:3c:82:62:1c:
                    94:31:e2:df:42:a7:78:7a:6b:95:51:57:0e:63:38:
                    a2:96:47:c2:dd:1b:e8:7b:91:9b:ba:f6:f7:9a:0a:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:52:75:D1:99:D4:EB:1B:32:00:41:F9:19:D4:5F:99:0D:F8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:57:77:e0:8e:cd:36:12:9b:80:d6:ed:29:98:a6:48:fd:
         1d:06:04:a2:44:98:ad:14:75:19:25:b9:fe:da:00:29:23:83:
         43:e7:f1:9c:43:f6:d1:a7:61:d2:d8:d0:a6:71:32:c1:61:b8:
         4f:73:48:a4:f3:42:ac:64:30:e3:98:85:b5:7a:54:38:0b:f7:
         28:fa:98:74:55:d1:4c:5f:86:6b:f5:31:7f:e8:59:77:87:66:
         71:e8:b7:95:10:fd:dc:84:1c:a6:d4:77:e3:13:43:0c:31:f8:
         e0:69:90:d9:c1:ce:cb:b1:2a:c9:70:41:a5:85:48:1d:f6:1c:
         a0:1b:27:a5:93:bf:01:00:e1:3a:11:9a:8e:be:63:dd:7a:04:
         da:37:f0:67:b9:0e:1a:06:5a:6d:16:5a:99:fe:92:20:4e:9d:
         91:9c:bd:db:5f:2e:93:44:20:67:3a:5e:e0:df:b5:e5:d8:c3:
         19:a5:f4:e8:6d:d2:f6:1e:2b:3a:01:74:22:38:8a:1e:f1:7b:
         fb:79:ff:42:3c:c2:0f:45:a9:ab:bb:ff:9f:25:df:f8:ad:90:
         0d:b7:f0:25:88:d6:11:c5:cb:df:e3:26:22:43:59:4f:cd:ff:
         a7:bc:66:2d:c2:37:eb:ec:36:99:23:f7:dc:70:57:f3:7c:80:
         10:d6:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:50 2025 by rpki-client