Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/0c800d95-53c3-3c16-aa3f-80e99df0796a.roa
File:                     0c800d95-53c3-3c16-aa3f-80e99df0796a.roa (raw, json)
Hash identifier:          HMjE1NipqUeaqd5abTrBolo0AY31Si36nQkGkEp49sY=
Subject key identifier:   CF:39:D6:88:69:AE:DC:02:E4:C7:56:76:81:E7:78:88:C9:83:31:74
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584B1806EE9D44B672F91CB33D00
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/0c800d95-53c3-3c16-aa3f-80e99df0796a.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     26658
IP address blocks:        104.243.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:ee:9d:44:b6:72:f9:1c:b3:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=352e8268-873e-43aa-b60f-3eaeb4ca5483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:68:74:54:fe:69:36:9d:a1:27:d6:fe:da:fb:
                    93:c5:a0:7b:bf:3f:d0:4d:92:d8:05:a9:5f:b4:80:
                    79:a0:17:23:3d:d0:9f:20:f1:6a:42:b8:ab:38:23:
                    2a:cc:16:db:aa:e5:d5:dc:a1:54:f0:d3:20:e5:54:
                    29:4f:8e:2b:2a:91:4f:b4:27:38:53:c1:ff:6d:59:
                    9c:45:1f:6a:14:77:11:12:00:b0:f6:ec:e9:74:d7:
                    d9:15:a1:78:30:c5:a7:ef:9b:91:0c:9c:12:ac:44:
                    dd:79:6d:60:98:ec:a3:a5:34:6e:c5:ff:b1:51:bd:
                    2a:7b:1c:1d:7d:e4:6e:c4:f4:4d:6c:3c:cd:28:43:
                    81:46:cb:2f:2c:0a:f3:f9:bd:a6:2b:68:75:5c:b2:
                    a6:ab:17:30:92:8e:27:31:6f:c9:de:db:3c:42:99:
                    e6:b0:fc:08:fd:a6:4b:1f:7f:fb:9e:62:c9:8e:b5:
                    10:26:88:ca:85:9d:34:39:f1:87:93:cd:72:8d:4a:
                    06:8d:59:d7:04:43:d1:72:67:f0:34:93:dd:96:7a:
                    7c:bb:ae:86:86:d3:be:98:79:13:22:63:ac:e4:79:
                    44:88:41:da:bf:c9:5c:7b:5c:25:2e:7f:0c:00:9e:
                    07:0c:8e:e8:22:78:50:d9:19:1a:75:79:10:5d:52:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:D6:88:69:AE:DC:02:E4:C7:56:76:81:E7:78:88:C9:83:31:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/0c800d95-53c3-3c16-aa3f-80e99df0796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:de:9f:21:6e:b1:84:1a:c1:f3:a5:ad:c2:1c:8a:a2:e6:
         bd:6e:00:4b:36:e2:b8:2e:f0:5d:61:d5:7e:99:db:9d:31:be:
         f8:ac:9a:bd:55:5f:0d:36:dc:4e:5f:a2:df:5c:cd:0f:a4:ef:
         e2:b8:26:fc:66:d8:e2:a9:23:56:49:51:c7:a5:86:a0:e8:0f:
         dd:18:8b:05:4c:67:47:f4:b7:8d:64:94:bd:ac:bc:62:11:09:
         9c:c9:e7:f8:ff:0c:c1:8d:45:14:79:2c:24:69:d5:db:a7:20:
         7f:36:f9:30:87:ba:72:ca:05:a9:e1:81:ac:90:d4:c3:b1:b0:
         20:9f:a1:1f:a3:bc:94:b4:80:e8:75:5b:87:f9:d0:b8:11:5a:
         ff:d1:49:c1:b8:6c:b1:5a:0f:15:d8:9a:b2:ec:17:2e:e8:a7:
         31:d2:f6:9c:fe:c8:c6:e7:05:3d:40:5e:5f:f1:d9:c3:90:7b:
         6a:63:66:e5:53:ce:39:03:8d:2c:c0:a8:51:45:d0:43:b7:8e:
         c3:0e:c7:5f:18:0f:3a:30:9d:80:e0:a8:8f:37:ae:fe:f8:56:
         c0:84:7b:9e:15:bc:b0:29:a5:66:74:bb:3f:c5:db:2c:a0:4e:
         a9:09:f7:87:bb:13:64:df:78:21:e7:85:1a:cf:2d:46:a0:3e:
         0e:3c:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:54:47 2025 by rpki-client