Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
File:                     e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa (raw, json)
Hash identifier:          Y7u3NgW4uD6E2lUKIRe8p2Ey1jWDhjo6ok4vGiM1sSQ=
Subject key identifier:   03:99:8F:D9:48:0A:6A:E4:AE:B3:F9:0E:0F:FA:6B:11:D8:FC:B2:80
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5245A64B6B0776927C0580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        104.137.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:45:a6:4b:6b:07:76:92:7c:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=5b220d19-86f2-46e1-aaa3-d3357ad08597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:17:d1:09:4c:f4:38:9c:0d:7e:1b:b7:94:
                    b3:a3:4c:15:b5:41:bf:cd:43:2d:3d:a7:7a:d0:25:
                    12:57:16:e5:bd:05:c8:4e:93:29:31:3f:13:75:c1:
                    88:90:6a:a6:3c:32:05:2c:c4:99:62:ed:f4:f7:4c:
                    02:6a:ae:d8:fb:ae:41:da:35:ee:5b:0b:24:37:79:
                    ac:d0:5a:b5:06:42:a6:6c:ac:22:7e:3c:24:da:a8:
                    57:9c:5b:90:cc:9c:be:83:d5:61:c7:4f:0c:80:62:
                    93:77:92:9a:2a:2b:4b:66:66:59:70:0d:52:e6:15:
                    8b:3d:4c:1f:8c:e3:f6:9d:0f:5e:46:82:c7:06:24:
                    7e:b6:02:1b:bb:ae:ba:5b:5e:d1:d2:64:3b:f9:d0:
                    5c:89:90:17:60:be:a3:0b:c6:66:b0:ed:7b:ec:2c:
                    89:da:bf:3a:59:50:b0:c2:05:b9:ff:fb:b0:92:98:
                    8c:8a:8b:05:58:aa:9c:86:32:14:f6:f1:aa:5c:94:
                    c6:44:6e:75:67:89:d4:ce:b3:a2:48:33:c0:67:57:
                    90:41:c3:d0:04:13:16:21:27:9b:1b:85:10:3a:89:
                    e7:16:75:9a:6f:61:a3:81:0b:75:23:86:a7:4d:83:
                    40:dd:6f:34:6a:c9:64:59:67:34:fe:79:e5:dd:24:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:99:8F:D9:48:0A:6A:E4:AE:B3:F9:0E:0F:FA:6B:11:D8:FC:B2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:44:db:b9:f0:79:31:57:dd:e8:c5:a5:d1:2d:31:fa:a6:da:
         ae:04:80:5b:57:17:4d:fe:c2:3d:51:d6:d5:f3:8a:db:7e:9e:
         0b:1e:08:7d:e5:47:67:f1:d8:d5:65:cc:c0:fd:70:f5:c1:81:
         85:d5:a8:ef:6d:d7:ed:1c:5a:5a:5c:cc:06:12:21:f9:69:87:
         43:12:cd:35:0f:3e:9b:af:ae:2f:70:52:98:0b:81:f5:3a:0d:
         cf:c9:65:91:31:4d:10:79:5a:ee:4b:df:2c:6c:17:31:66:87:
         bd:04:17:05:53:7b:39:fb:bd:0a:dc:67:4e:27:81:f5:65:6e:
         10:b9:84:11:cf:1d:52:6f:ac:98:b5:69:57:07:93:5e:9f:03:
         b6:63:c7:8b:46:03:f5:71:38:54:68:1f:f1:bb:0a:62:09:28:
         aa:aa:a8:9f:45:2f:f6:cf:fa:45:f7:bf:fd:07:c9:23:e7:aa:
         61:01:fe:8c:f6:8e:18:fc:c4:72:ab:df:9b:d8:8a:a2:1d:e7:
         08:6d:e1:05:99:76:45:fc:7d:65:f7:2c:7e:ff:03:a9:bc:70:
         46:6c:06:50:ea:8b:66:7c:94:7b:4e:84:35:59:30:2e:b5:6d:
         14:6a:cb:46:d8:c0:cd:a8:5e:22:64:f6:6e:6d:ec:ec:8f:37:
         c2:7b:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:00:27 2025 by rpki-client