Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
File:                     91bfad80-6fe2-32cf-8016-16bf4b19a422.roa (raw, json)
Hash identifier:          fhpVR7zpV/ANc92Hd5isFTV8cGiEjW50nLItExLAH/8=
Subject key identifier:   9A:0E:BF:FC:E3:7A:4F:AA:4E:12:4E:18:B0:02:AD:5F:1C:E7:9D:AE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524571B7824CA7C72F2A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        104.137.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:45:71:b7:82:4c:a7:c7:2f:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=588c4bf6-1b07-4cec-86f6-4f078b0c0174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:90:06:6e:3a:9f:9b:3e:96:2b:2e:a1:2f:c4:
                    3a:04:03:65:01:91:e8:1c:a5:8f:26:4c:23:36:5e:
                    85:14:69:cd:4d:34:a9:d3:1f:d8:44:2d:c1:20:01:
                    77:58:39:77:03:f6:47:95:1f:5d:70:ef:ab:94:14:
                    3e:b0:21:a6:18:44:78:08:6a:d6:0a:7e:3e:e7:24:
                    05:92:12:d0:4d:9d:16:95:8c:dd:0e:73:25:3f:a2:
                    3e:c7:8c:f3:c0:fb:a4:0d:d1:d5:db:19:f4:6e:57:
                    b8:52:b7:32:bc:75:ec:3c:cc:8d:27:ac:e0:b2:3a:
                    73:2a:e5:53:e8:1e:1b:d9:9c:29:bd:db:07:66:ce:
                    23:89:4c:c2:d5:05:da:4c:40:4b:df:49:77:76:c1:
                    93:1a:7f:d9:19:e8:63:78:12:2d:2f:23:54:5d:aa:
                    42:7d:a4:52:65:3c:fa:0e:3c:d6:40:b0:9f:62:f0:
                    05:b5:ee:8d:0b:c3:d7:ae:7a:f9:5e:47:8e:e9:cf:
                    7f:b4:32:8b:6f:c1:64:54:89:ca:10:c0:90:1a:fb:
                    b5:bf:e5:d4:e2:99:b8:4f:40:6c:6a:a4:ab:74:d4:
                    4a:f9:eb:ad:b4:dc:ae:64:59:7e:a5:82:38:a1:e5:
                    d4:60:60:f3:7d:c1:94:66:8c:89:d2:32:c5:4a:2d:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:BF:FC:E3:7A:4F:AA:4E:12:4E:18:B0:02:AD:5F:1C:E7:9D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:37:35:93:2a:85:0b:1d:9c:20:53:3b:94:84:b4:dd:9d:
         c4:1b:8b:47:3e:7e:91:da:95:13:7e:f7:0b:fc:93:c5:b2:aa:
         90:8d:ba:5b:0e:2a:de:10:ed:eb:d5:cf:1a:87:e3:67:ed:9e:
         64:02:22:af:c9:d6:5d:e9:d9:24:93:00:9d:96:cc:57:23:f2:
         ba:12:a5:04:a6:f4:77:38:8e:4b:6f:60:8f:6d:97:cc:ce:a0:
         37:71:b3:78:fb:96:12:47:2f:36:53:72:ae:a1:11:32:c9:b1:
         b0:84:53:2b:6a:33:ce:ef:76:78:b2:5e:d6:65:f3:11:1b:bc:
         12:f3:20:64:a8:1f:94:97:6c:13:4d:a5:df:a3:b8:e1:b7:90:
         58:9e:ac:58:13:bb:d6:cd:a5:f3:63:29:f0:6a:89:76:7c:94:
         b1:26:20:b2:2a:0c:a8:a4:86:cc:73:40:35:eb:cd:74:a1:39:
         df:c1:33:30:70:91:3b:01:e0:44:50:ee:1a:64:fa:71:6a:5a:
         e2:26:09:d2:57:c1:73:b5:1a:80:dd:f5:74:60:c5:0d:ec:33:
         10:04:60:dd:ae:fc:e9:d6:5b:e1:b9:c0:44:ca:3a:60:1d:cd:
         9a:b8:6f:76:f4:6f:1a:e2:66:c7:3a:24:40:b6:2d:65:ec:8a:
         ee:96:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:06:46 2025 by rpki-client