Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac1ecaa9-ea83-3530-a04a-4c07245d0cb5.roa
File:                     ac1ecaa9-ea83-3530-a04a-4c07245d0cb5.roa (raw, json)
Hash identifier:          eAe/gyFjDJNfZ6O0lewU4v3G5V23mCd1mduQ8liSz/A=
Subject key identifier:   DE:3A:3B:0F:28:CA:1C:D6:A6:BA:A7:53:E5:C4:E1:71:0F:13:54:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF521631A63F9A6F4BA666480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac1ecaa9-ea83-3530-a04a-4c07245d0cb5.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        104.103.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:63:1a:63:f9:a6:f4:ba:66:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=ea720451-7478-4ffa-96f1-b0755c57b85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:f6:88:96:ce:46:b9:ad:8f:ba:db:88:f4:
                    91:31:af:de:a4:86:bf:ae:05:d0:8b:83:94:cb:03:
                    db:a9:c8:b5:62:27:24:21:ee:d0:8c:d1:f4:f2:c0:
                    1f:68:9d:e0:4a:f0:36:85:2b:26:57:d8:56:94:72:
                    c9:9e:46:25:7c:79:0e:57:c5:e1:8b:c6:68:30:58:
                    4c:ba:e9:30:2f:50:8b:1b:00:f8:3f:4e:64:ba:2f:
                    88:10:13:14:97:b1:c9:32:a3:d4:4c:8b:b9:b3:7f:
                    cc:81:79:39:b9:a4:19:eb:22:80:0a:ee:e9:0d:59:
                    b5:30:c2:f8:2c:41:81:49:9e:90:73:1e:bd:4c:02:
                    96:b0:e2:4f:37:e3:b8:86:e3:24:cf:81:89:0a:33:
                    3c:7e:89:69:30:fe:cd:92:0e:b7:7a:c8:6e:63:54:
                    ab:d3:ca:b4:55:18:04:bf:f4:42:4d:21:8d:4c:f3:
                    60:33:e6:38:d1:3d:cf:1d:dd:ea:57:b6:0a:17:9b:
                    1d:db:50:40:ff:21:d3:d7:a2:1a:bc:12:71:05:5e:
                    e2:ac:17:02:ea:b2:7e:60:a4:dc:5e:6d:26:ae:e5:
                    3e:c5:e5:e0:57:ef:a7:19:13:38:01:4b:0f:63:1b:
                    bc:86:08:82:d9:84:83:1f:8a:13:66:1c:ff:db:90:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:3B:0F:28:CA:1C:D6:A6:BA:A7:53:E5:C4:E1:71:0F:13:54:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac1ecaa9-ea83-3530-a04a-4c07245d0cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.103.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:95:c9:ab:63:6a:1b:bd:ba:54:21:75:01:0a:75:84:27:
         be:e3:d8:30:0e:34:b9:68:cd:13:ae:79:8e:78:2e:dc:54:6b:
         cc:ce:d2:fd:77:33:bd:b6:2d:ba:6f:7d:04:fd:bc:a2:27:bb:
         97:24:3c:e7:56:08:ff:eb:a6:00:9f:36:14:3d:dd:16:00:56:
         17:54:88:3b:be:ea:e5:df:8e:a5:70:ba:6a:f6:11:54:00:43:
         7c:20:8e:10:33:bf:34:6e:1d:a6:f2:01:4d:e5:40:8c:90:fc:
         1a:b0:a8:4c:11:99:3f:28:cc:63:4f:a5:d4:e4:d7:aa:63:34:
         2f:26:6f:98:19:92:b3:92:a9:d0:36:3b:37:79:29:fb:cb:de:
         18:c6:32:1f:d7:39:fc:3a:e1:a9:37:77:04:33:cb:f6:d8:18:
         b7:24:ea:24:b4:12:19:8f:6e:55:cf:29:1a:89:88:66:53:15:
         96:43:20:8b:60:f4:42:2f:21:44:d9:b4:96:1e:cd:b7:f9:55:
         c0:2f:e4:e2:8c:c1:9a:8b:bf:8c:84:71:39:1e:1d:9d:01:c4:
         92:57:63:8a:f3:d6:2e:5f:11:d2:1d:78:ce:7c:f7:7f:db:7d:
         80:c2:09:fa:2b:b7:87:2f:85:eb:3b:3d:9d:ab:9e:ee:20:ac:
         06:d1:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:07:43 2025 by rpki-client