Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/869b015f-245e-39b5-a14b-be829d15c505.roa
File:                     869b015f-245e-39b5-a14b-be829d15c505.roa (raw, json)
Hash identifier:          l6tAg792OCENHxBjzAcZgxTyqujd+TYi/A4CXsnSDLQ=
Subject key identifier:   1F:F8:A1:B8:E3:30:E0:99:04:7E:55:68:A7:D8:5C:5D:20:8F:DF:9B
Certificate issuer:       /CN=c9b2f783-ae49-438b-a994-34e0ab78157d
Certificate serial:       010D0C9F4328584B0CDC1511320BCB1ACBCCAD00
Authority key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/869b015f-245e-39b5-a14b-be829d15c505.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     16628
IP address blocks:        104.171.144.0/20 maxlen: 24
                          104.237.224.0/19 maxlen: 24
                          107.181.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:15:11:32:0b:cb:1a:cb:cc:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b2f783-ae49-438b-a994-34e0ab78157d
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=394c7d32-097f-4e3e-9ad6-cd8b88d1d910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:bc:53:d7:23:a1:77:aa:eb:82:b7:ab:09:
                    20:8d:1a:60:fe:33:1c:eb:e6:2b:40:15:68:70:b9:
                    38:3b:3c:5a:5b:b9:36:1d:7a:a3:53:70:86:6c:0b:
                    b9:fd:db:48:b1:39:97:27:81:e4:ea:c4:ea:b9:51:
                    ee:09:45:26:08:cf:c2:9e:77:e9:a7:58:7c:78:aa:
                    a4:75:f1:d5:f2:20:c0:55:66:a0:04:47:02:0d:1c:
                    ac:90:ef:ec:fe:69:21:cc:c5:53:ef:4a:1b:e4:65:
                    0c:14:96:b7:54:2d:ed:bf:30:c9:a6:10:5f:00:57:
                    57:4f:a1:e6:4b:3a:b7:bb:80:78:f2:8d:81:2a:1b:
                    bc:4d:7c:79:82:0b:62:b1:db:85:91:23:08:b9:66:
                    6f:bb:60:dc:bb:4a:c6:b9:7d:87:d9:26:66:9a:43:
                    59:e4:d8:5a:91:4c:15:88:98:86:cb:a3:72:84:a5:
                    e7:61:cd:62:ee:b2:22:94:07:eb:68:01:bf:a4:73:
                    5d:1b:32:c3:7f:3d:c1:4f:9e:0d:6f:72:a2:88:9a:
                    db:6e:02:d6:74:ca:86:15:44:7b:c3:50:7d:95:81:
                    d0:65:a4:d2:60:f3:4a:c4:c7:bf:58:0b:c2:56:93:
                    86:92:05:16:6e:2b:48:4f:12:d1:0b:b3:5a:17:93:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F8:A1:B8:E3:30:E0:99:04:7E:55:68:A7:D8:5C:5D:20:8F:DF:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/869b015f-245e-39b5-a14b-be829d15c505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.144.0/20
                  104.237.224.0/19
                  107.181.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:b0:f3:ec:b5:1f:65:0d:be:d0:47:65:b7:12:60:0a:0f:
         ee:1d:07:cf:66:2e:d9:84:56:97:6f:15:b1:0a:f7:b8:7c:7e:
         9d:67:3d:65:93:fa:13:84:ee:06:1e:a5:41:0f:55:f8:f9:36:
         35:3e:f6:03:7d:c7:2f:a7:4d:03:5f:46:dc:61:71:d4:14:6b:
         53:e0:fa:27:a3:6e:31:49:2b:53:37:29:6c:27:7a:2c:b2:73:
         b0:5d:4e:3f:37:4e:95:05:02:45:d4:1f:55:1e:c3:01:87:31:
         e1:ad:85:09:e7:61:dd:52:3d:6d:b0:f5:4a:05:6b:cf:00:31:
         d7:80:75:d1:ec:71:44:22:98:0d:22:de:53:77:37:ce:57:f6:
         66:7c:1f:4c:1c:78:7e:74:d4:3d:ca:5b:e8:a8:a5:fe:b3:e0:
         9a:44:d1:9f:62:5b:be:f4:e3:84:88:a8:ec:a9:a1:8e:76:f6:
         fa:66:42:40:31:1a:aa:f4:02:48:c0:67:9a:e9:ae:3c:d2:fa:
         53:af:15:62:ee:a5:65:ce:4b:c4:e1:b6:4d:14:81:96:78:38:
         c5:fb:04:67:95:c7:bb:6b:55:df:23:5b:a4:e6:3d:8d:c3:d2:
         68:18:8f:17:8d:51:1b:4f:e5:65:f9:3a:51:c7:03:7e:01:27:
         82:59:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:04:25 2025 by rpki-client