Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa
File:                     29ee82f2-26f5-3427-b2a3-e130b3600811.roa (raw, json)
Hash identifier:          TbOBBgavnS7vsvWebpVnYGju2n+dvzROC/m/NiR6G68=
Subject key identifier:   56:8F:3C:DE:45:F3:A2:9F:E3:F2:56:29:48:A4:D8:86:0B:F5:8C:AD
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F4328584B583C80AB426E8ED22B3F0780
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     14445
IP address blocks:        104.249.137.0/24 maxlen: 24
                          104.249.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:80:ab:42:6e:8e:d2:2b:3f:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=05d44eee-119b-4ef2-95d2-0142df34faf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:dc:e5:d4:6e:6d:f4:37:b5:53:43:3b:7d:
                    15:af:5a:84:81:16:6d:63:cd:87:a9:ee:64:d8:bc:
                    90:32:fe:a0:2b:db:79:56:1f:5a:f7:6f:be:f5:03:
                    76:fc:c4:d4:44:13:63:9e:d7:62:ef:11:ba:2d:72:
                    6b:40:46:92:14:e8:89:38:0d:a8:e7:d7:73:23:c1:
                    99:27:ef:22:6a:fa:8a:6e:d6:27:0d:80:5a:fc:1d:
                    fd:9c:1a:58:46:51:be:b7:d0:13:d5:b3:29:25:46:
                    6a:c4:65:c6:a4:11:01:f0:bd:bc:56:43:4e:a8:9a:
                    3f:d4:7f:6e:80:25:fc:08:53:4e:1a:b1:ac:54:75:
                    44:61:f6:8c:c5:e5:23:c6:3e:39:f0:1c:4b:a5:0a:
                    50:13:73:8c:93:5d:0c:07:39:64:5d:f9:22:1d:56:
                    92:25:d5:a6:ca:60:3c:93:35:98:04:c7:5d:22:af:
                    cc:e5:c1:9d:e0:93:b2:75:6b:5d:c0:c8:55:28:aa:
                    12:83:51:3a:d6:9c:3b:6c:1e:fd:7b:cf:8e:b4:0e:
                    3e:75:4c:a5:9f:e6:f6:3e:6e:60:b9:16:fa:f5:ed:
                    a6:69:91:82:02:b1:26:16:e2:8e:41:7a:b2:0f:6b:
                    ae:ff:22:5a:50:18:f4:00:70:67:47:2c:ee:08:24:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:3C:DE:45:F3:A2:9F:E3:F2:56:29:48:A4:D8:86:0B:F5:8C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.137.0-104.249.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:03:b4:f7:2e:78:ea:77:70:97:fe:1f:d6:62:30:ff:e0:
         bf:a6:1e:bd:03:44:1f:a8:b6:09:3d:ab:ff:9a:03:c1:a8:e5:
         ec:b5:5c:43:19:44:3f:a4:c5:e1:61:f6:17:88:4b:3c:c4:c7:
         da:db:ce:64:98:6c:02:0d:31:3e:00:44:69:13:bf:55:d4:b6:
         93:37:8b:74:7b:81:0d:f6:34:87:1d:53:1b:59:72:1e:11:bf:
         ad:67:82:7f:1f:de:af:50:81:99:5e:b8:09:83:c0:f7:fb:87:
         35:a9:b5:89:af:4f:9c:c4:95:67:b9:7f:78:bc:ab:16:60:b6:
         83:11:a9:ec:4b:23:f3:ae:5c:73:da:da:fe:07:9b:45:67:67:
         a8:53:86:0b:9a:ef:e1:2f:7e:61:f3:82:b5:48:ff:e3:b2:df:
         ac:a0:e3:84:58:17:70:86:d5:12:4a:fa:16:0c:51:85:c8:fb:
         3b:93:76:9c:46:e2:6f:10:3a:6c:04:2b:97:11:7f:aa:ed:00:
         99:d8:57:b8:2d:bf:d8:0e:af:3d:b4:13:00:34:21:fb:18:3e:
         b6:1a:0e:a1:ca:16:48:0d:f9:40:82:1b:2f:5e:92:c5:f2:ca:
         82:26:4b:06:9d:52:e3:ad:dc:e3:d9:15:71:cc:7f:9d:69:c7:
         06:a4:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 17:50:21 2025 by rpki-client