Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
File:                     fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa (raw, json)
Hash identifier:          0YvWcBijm7msnkAxmPwFoGnNK7U+lNTCcFIY8hZD3z8=
Subject key identifier:   78:9E:CD:0C:30:2F:14:E8:E1:F5:B4:49:A8:27:C4:35:93:4A:24:41
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584B16A158FD5E0DE41554870EC0
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        172.85.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:58:fd:5e:0d:e4:15:54:87:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=16945468-3384-4987-9b62-177ad4a10921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:7f:39:6e:fa:f8:9a:d8:a4:1d:d4:ea:4d:
                    85:52:69:bd:31:d3:e2:bb:29:e7:2e:1d:5c:fc:a6:
                    bb:97:4c:77:da:71:25:ff:aa:68:07:37:33:6e:14:
                    6c:44:72:b1:20:bf:9c:68:06:e3:74:58:02:7a:5a:
                    ba:3a:5a:a4:33:a3:91:11:d2:b1:8e:52:c6:fc:28:
                    f2:c3:d0:50:83:36:be:cd:a5:ca:53:20:11:52:76:
                    66:d6:2d:9f:92:07:ba:cc:f3:6b:61:a1:9b:96:08:
                    94:32:9c:9b:77:44:6c:2e:fb:65:ff:a1:53:2d:83:
                    2b:22:e7:76:c2:2a:8c:dd:f9:00:59:9c:c2:51:40:
                    b9:31:a2:82:19:e7:30:dd:0f:74:fd:fb:21:17:ac:
                    f4:9f:13:c2:56:52:24:45:93:43:fe:50:5c:ec:56:
                    e7:24:47:39:5b:a9:22:9a:b6:51:63:4a:93:ad:c9:
                    71:a4:83:bc:83:1c:71:00:ea:74:b4:cf:2c:c3:40:
                    b8:19:6b:0d:61:d6:63:8e:cb:2b:d7:00:f5:31:17:
                    11:9e:2b:fb:4e:a0:ef:63:60:9e:9c:91:c4:e4:1d:
                    7b:3f:55:90:66:95:49:4e:fb:18:53:eb:b3:d8:88:
                    b9:6d:07:32:87:d9:ff:b8:03:1a:38:ec:8a:fe:a3:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:CD:0C:30:2F:14:E8:E1:F5:B4:49:A8:27:C4:35:93:4A:24:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:29:f2:b7:37:03:96:48:14:59:ac:32:d1:20:0c:50:f4:b5:
         fc:b3:85:54:62:74:6d:a3:8a:77:1f:4c:62:38:c8:34:c0:82:
         c4:44:98:48:ed:35:7d:a9:b7:1f:91:eb:3e:d6:59:27:6a:ef:
         3b:d2:34:65:6d:58:21:5c:c8:12:a0:d8:ba:c8:da:2a:e5:b1:
         0c:09:5b:3b:b6:9e:6a:79:a2:0b:7a:70:79:29:da:5e:a0:6a:
         13:fb:e3:4f:bf:39:dc:ab:72:aa:9d:70:b2:f0:40:3a:83:2f:
         1e:18:05:ea:24:48:6f:60:43:4d:43:af:c7:6c:95:ce:39:8c:
         58:5f:f3:e2:ce:33:ef:03:a7:95:ce:14:28:71:11:64:25:1a:
         d4:1a:f7:e7:39:58:d7:c9:25:8a:05:aa:3b:fb:ed:d5:f6:e6:
         cb:59:ab:f8:51:14:f3:76:99:40:47:8f:88:91:79:50:0d:ae:
         7c:08:2c:d5:e8:84:2d:26:bd:e1:fe:5c:ec:6f:40:83:ff:96:
         3d:11:96:ec:be:9a:06:c3:5a:96:39:89:1e:bc:61:be:a7:6e:
         31:38:45:e4:38:83:f5:e9:a9:da:41:e3:b2:fd:6d:48:82:75:
         a1:80:65:f5:d9:3b:95:c3:22:ff:3a:46:3f:4d:01:13:d7:6c:
         e7:f0:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:10:07 2025 by rpki-client