Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/007d43ed-825a-3a20-866f-2271b4ef3c0d.roa
File:                     007d43ed-825a-3a20-866f-2271b4ef3c0d.roa (raw, json)
Hash identifier:          sPaNO4wgaVzkktnoK7GGHoJV3UZhtx0l+B+MnSKosTU=
Subject key identifier:   54:9C:6B:B6:D9:78:18:D8:CC:C5:47:EF:89:7E:88:4D:14:1F:18:A8
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584BC56022EFB4E1B152A36C4480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/007d43ed-825a-3a20-866f-2271b4ef3c0d.roa
Signing time:             Thu 06 Nov 2025 15:15:39 +0000
ROA not before:           Thu 06 Nov 2025 15:15:39 +0000
ROA not after:            Wed 04 Feb 2026 15:15:39 +0000
asID:                     40850
IP address blocks:        104.140.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:60:22:ef:b4:e1:b1:52:a3:6c:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Nov  6 15:15:39 2025 GMT
            Not After : Feb  4 15:15:39 2026 GMT
        Subject: CN=25e4d87f-0f61-4de5-a684-1763ea1d2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:bc:b7:fe:f1:37:8d:29:d6:f9:38:fd:f3:
                    44:b3:d9:44:9d:7e:12:4e:26:84:19:f2:29:57:87:
                    72:29:cb:56:fb:59:56:67:3b:89:0d:57:ec:1a:a8:
                    0d:ef:75:85:fa:a7:ab:de:15:fc:8d:da:b0:18:fe:
                    45:3a:3c:ec:45:a3:fc:80:71:73:d1:c6:41:d8:bb:
                    b1:af:36:49:f1:ba:08:c3:a7:05:c2:f6:25:8b:27:
                    bb:4c:3f:88:d5:65:c7:e4:09:61:21:67:de:08:9a:
                    7f:60:46:33:f5:51:1a:62:da:d7:aa:28:44:69:88:
                    3e:42:21:ee:6e:c4:14:2d:6a:52:ba:0a:d5:64:ed:
                    59:a3:16:0f:7f:ed:03:8c:5e:72:bd:5e:da:a3:6c:
                    e7:91:ae:42:81:a7:c8:f7:ef:3c:f4:5c:7f:e3:98:
                    bc:b6:ca:72:6f:a3:3a:6e:e2:b6:bd:b2:44:3f:ac:
                    65:70:16:b1:8c:9a:fb:1d:3d:4f:e3:7a:48:d9:49:
                    5d:99:ff:9b:6f:9a:48:1b:c0:3b:c0:94:b6:31:a9:
                    0f:19:32:9f:d5:37:4c:0c:11:c3:a3:da:1c:2e:5b:
                    40:56:42:90:16:33:44:de:de:8b:93:9a:57:3a:ea:
                    62:cf:e9:da:d6:74:1c:2b:2e:d3:47:e7:cc:e1:53:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:6B:B6:D9:78:18:D8:CC:C5:47:EF:89:7E:88:4D:14:1F:18:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/007d43ed-825a-3a20-866f-2271b4ef3c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:c4:d2:49:3d:78:6d:96:97:9e:b3:aa:40:f5:e0:64:6b:
         ab:de:ab:51:97:af:f7:2a:66:5b:1c:30:20:cd:6f:94:05:00:
         bd:52:f0:27:1e:d2:f6:3b:86:4f:e4:5b:b4:33:b0:4a:28:c4:
         29:82:c4:a9:4e:50:c4:8d:78:cc:65:86:9e:d8:c5:92:f7:00:
         c3:46:af:97:6f:ad:ed:39:40:f6:ba:e1:b7:0c:f4:cb:0d:39:
         21:04:02:bf:19:ec:ea:a1:a2:33:dd:05:63:e3:0a:8b:9c:de:
         2b:ec:0e:01:e0:c2:8e:62:4e:81:ad:57:7e:d0:96:64:2e:48:
         a5:96:25:fd:bf:87:12:c5:67:cf:d6:b4:48:f8:d0:17:f7:11:
         5e:c4:7e:51:fd:88:9b:6c:f9:23:92:05:12:1d:62:15:36:6b:
         34:9d:6f:d0:a8:5c:15:4c:ea:86:3f:60:cd:1e:0a:4e:1b:03:
         a6:20:22:d6:69:90:77:bd:51:c8:a2:06:fa:1b:86:de:e0:06:
         e3:e2:c9:86:ec:bc:56:33:e4:fb:8b:50:fd:6b:19:ab:7d:ad:
         d6:8f:3a:9c:6e:6f:24:d9:67:c9:6f:50:a5:3d:95:57:1a:61:
         54:b7:3e:08:5d:91:d9:70:f5:39:e4:75:9e:05:53:42:d6:60:
         a1:13:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 07:29:41 2025 by rpki-client