Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
File:                     11e8d12e-99be-3ca9-9f5d-648782b712c0.roa (raw, json)
Hash identifier:          InUHkmpqGIx2mvI9nfhMfv5XmSY+eH1fdBzlq8Q+cRo=
Subject key identifier:   33:FD:D1:85:F7:98:32:63:93:33:6A:E9:8D:F0:19:0E:2B:88:1E:B4
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584B1806EE693FE8517E0307AA00
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     26658
IP address blocks:        104.243.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:ee:69:3f:e8:51:7e:03:07:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=fd9e1388-570a-48d0-89e4-9e2beb556e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:b9:2f:d6:5d:39:4d:02:60:af:d6:0f:71:
                    63:5d:81:37:28:2d:28:66:c9:62:f4:24:40:94:d2:
                    13:66:a9:18:8a:ac:dc:22:b7:13:0e:fd:41:1d:24:
                    2e:94:ce:47:11:11:1d:a4:f0:17:94:66:a5:5e:01:
                    33:00:51:fa:24:f0:d9:7e:25:dd:e4:27:b4:b1:8f:
                    ee:6b:a9:73:60:82:8c:c9:f2:ff:13:f9:05:7a:04:
                    09:a0:55:47:0c:73:a3:ab:8b:61:27:94:ff:f9:37:
                    8a:46:cf:c0:59:f6:93:12:bd:97:52:ed:39:57:1a:
                    d4:30:ec:4e:09:b5:9c:cc:6e:e5:2d:37:16:6b:d3:
                    bf:ce:f6:d5:4c:a5:f3:f8:d7:ee:e2:dd:2c:0f:e2:
                    ee:76:06:19:00:2e:e9:c9:ce:b6:c3:bf:23:73:a9:
                    71:ee:a8:1f:28:f9:38:1c:13:ed:df:df:90:c4:24:
                    f9:84:47:05:ae:7f:f3:96:dc:3d:35:f1:2d:66:fe:
                    dc:23:b9:88:14:cf:80:46:73:87:09:d5:3f:d1:ad:
                    eb:d9:f2:66:e9:2c:0f:5d:aa:25:97:3b:b6:82:5b:
                    5f:a4:90:ef:97:8e:a9:44:a0:7f:68:33:45:b2:70:
                    39:73:01:b0:07:c2:de:12:7a:ee:da:e7:11:11:46:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:D1:85:F7:98:32:63:93:33:6A:E9:8D:F0:19:0E:2B:88:1E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:90:d8:67:87:db:b2:90:eb:01:a6:08:25:03:ff:13:b4:83:
         e2:d7:40:c7:54:24:ba:27:79:9f:62:4a:4c:94:e7:58:d4:f2:
         bb:cd:38:a1:bd:d4:f7:34:d8:aa:e4:55:20:55:32:36:ec:63:
         3f:55:1c:2d:77:32:5b:52:58:83:e2:49:5f:51:27:f4:19:d8:
         05:4c:2c:48:2a:b9:85:98:00:b3:6f:2b:08:38:3a:bb:21:a8:
         e6:5a:80:a6:60:f3:1e:ba:bf:ca:0a:d5:2b:22:cf:ae:63:49:
         15:bd:14:06:d4:75:d9:e7:fe:79:a9:79:98:5e:6c:5f:de:77:
         e2:c9:10:f9:cd:52:1a:0b:03:ab:b6:ee:f4:5c:7a:e7:96:2c:
         59:9c:34:5e:01:2f:cf:2d:03:b2:cf:5a:f2:fc:a6:51:1c:df:
         0d:80:47:34:2e:2c:da:7f:51:66:31:f3:ba:e6:9b:f4:42:87:
         d2:38:6f:04:e4:ee:15:eb:e8:64:7c:67:c7:3a:95:a5:fc:d8:
         9d:ea:10:8b:ff:06:82:b1:b9:74:b0:9e:63:ea:86:d1:18:25:
         d1:1c:dd:0c:bf:15:01:2e:f7:33:0d:1e:1c:da:38:a7:b7:57:
         c3:aa:a3:9d:86:69:6e:21:1a:d4:ed:e7:e3:5a:5d:fa:4d:f8:
         6f:2c:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:54:58 2025 by rpki-client