Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/f7d5f32d-e88b-3ee7-b60d-2ce328cae2a2.roa
File:                     f7d5f32d-e88b-3ee7-b60d-2ce328cae2a2.roa (raw, json)
Hash identifier:          lJMQxPwokZb/i2xYPLxVPLUNwRLSWqIEZfKxPPFn/SI=
Subject key identifier:   FF:27:01:DC:D2:F3:2B:1A:16:71:C5:5A:B9:29:20:79:5D:EB:F3:D2
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F4328584B12F24FE82C2AD33001F0D660
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/f7d5f32d-e88b-3ee7-b60d-2ce328cae2a2.roa
Signing time:             Wed 03 Sep 2025 17:20:29 +0000
ROA not before:           Wed 03 Sep 2025 17:20:29 +0000
ROA not after:            Tue 02 Dec 2025 18:20:29 +0000
asID:                     16589
IP address blocks:        104.245.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:f2:4f:e8:2c:2a:d3:30:01:f0:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: Sep  3 17:20:29 2025 GMT
            Not After : Dec  2 18:20:29 2025 GMT
        Subject: CN=606d4344-8304-4126-bc79-cee847b88060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:b0:98:2c:d3:34:59:5d:b2:14:b6:e7:26:
                    d9:69:61:0f:4f:16:da:fd:b7:5e:0b:fb:c4:5a:1c:
                    1d:f4:86:58:41:8e:3c:a7:ff:29:e4:66:83:30:8e:
                    f2:ae:f7:14:1f:46:91:ef:72:24:1e:ca:b9:a3:4e:
                    2e:38:34:ae:7a:6f:da:67:84:58:0f:09:f8:8d:15:
                    b0:65:82:e1:bb:36:4a:b5:9c:73:b9:2f:e9:c5:51:
                    3b:21:7f:df:7e:10:eb:fe:67:be:1d:86:6e:a7:b3:
                    39:28:8d:13:0a:c7:2c:b4:cc:0d:41:64:b1:28:b3:
                    a8:49:83:be:6b:d7:fc:92:16:0f:fa:69:b1:4a:e1:
                    6a:43:25:c8:ae:9a:bc:f8:e5:58:bb:30:f4:97:ec:
                    6e:c4:0c:4b:70:3e:db:f1:51:f6:05:2a:fa:9e:3a:
                    d5:01:df:56:a3:75:d0:1b:55:7e:13:53:6a:6b:bf:
                    7c:fc:ac:f6:46:b6:7f:2f:6a:fa:5b:44:e7:08:17:
                    44:a9:7d:14:af:eb:e0:b4:56:fd:ab:50:58:db:56:
                    90:16:d6:10:68:45:4b:2b:89:da:ea:fc:28:c3:5f:
                    f1:88:6f:2b:46:91:c0:d1:c0:36:65:1e:43:73:27:
                    00:59:24:a0:bf:ce:ca:8e:83:1e:29:1f:d3:50:99:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:27:01:DC:D2:F3:2B:1A:16:71:C5:5A:B9:29:20:79:5D:EB:F3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/f7d5f32d-e88b-3ee7-b60d-2ce328cae2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:0a:42:0f:ef:fc:df:c2:80:66:61:1f:24:42:eb:0c:04:
         84:f1:45:36:95:9c:75:a6:dd:f1:73:ae:08:ea:e3:e3:d7:86:
         57:ef:17:72:59:b0:61:d9:57:8a:2b:78:42:17:a2:94:28:42:
         16:d2:49:9d:12:ff:d9:ef:a2:5e:19:ca:6b:93:8e:44:7f:3a:
         b6:7a:be:0f:7d:f2:91:ab:3f:c8:68:57:77:26:55:3d:d4:51:
         8f:0f:52:da:6b:75:34:16:09:77:ea:fc:16:5b:d6:d8:87:37:
         4e:c9:45:01:7e:3e:04:3d:03:ed:22:7a:3a:5e:a6:fa:5e:55:
         33:75:fc:b5:2f:a6:ed:a6:58:f3:0a:7a:bc:ec:df:04:d5:24:
         66:ce:72:3e:2c:2b:b6:3b:72:15:ff:69:89:de:78:ab:d3:71:
         93:26:c3:2e:22:2f:62:d3:33:d1:ba:6c:ca:0f:94:af:1f:e6:
         d6:32:f6:1f:70:a5:71:e1:93:ca:ed:0f:1b:b3:51:e2:9b:88:
         a1:0b:7b:74:f8:96:0a:1f:b1:9f:5f:b1:93:b2:16:58:69:f0:
         ce:50:2e:06:88:12:8d:b7:e1:72:36:85:8c:27:c1:52:3d:fe:
         26:6b:ab:64:9e:2d:f2:50:6b:84:40:d0:66:d2:08:1c:33:9c:
         6a:59:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:22:11 2025 by rpki-client