Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa
File:                     c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa (raw, json)
Hash identifier:          bkxJFCmDXkdxbxjQ/n4XDGJZGiXU0qf9U48Ve5CcDV4=
Subject key identifier:   06:65:A8:56:B1:82:B5:AA:1B:67:94:43:E2:5A:9D:63:61:34:01:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF7EBE2A343315BCF63EF1B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     4761
IP address blocks:        104.106.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e2:a3:43:31:5b:cf:63:ef:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=9d7f24c2-a195-4f6e-875b-2b8fe549e45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:5f:6e:38:35:8e:75:13:e0:8f:db:ae:e4:
                    8f:db:78:33:39:c3:b6:f2:eb:59:c6:ca:87:70:c0:
                    ea:5b:11:3d:79:d5:a5:ee:fa:01:02:d2:d3:4b:6b:
                    b1:d1:1e:86:c7:c3:16:ce:a4:c4:e8:09:f6:e6:38:
                    dd:8c:81:86:93:95:cf:29:a9:a9:6f:dd:d4:c7:58:
                    d8:be:72:3e:d1:51:ce:8c:3f:f0:60:c7:3d:81:ee:
                    a5:3b:e6:9c:64:54:32:24:79:61:a2:97:98:aa:8d:
                    60:20:ba:49:84:74:c3:8b:ce:58:c3:c6:8a:64:fb:
                    a9:58:de:93:6e:f2:ca:76:1b:d4:7c:89:de:c0:c1:
                    90:e9:ad:79:67:9f:2d:28:41:e0:78:97:ae:03:a6:
                    f3:f4:a9:43:1c:55:e0:2a:a7:61:9b:2e:d9:79:cc:
                    3c:7b:84:51:dc:5d:b5:64:81:8a:95:7d:14:e1:ae:
                    f1:03:8c:4a:9a:88:ea:dd:80:0b:1a:0c:b9:40:18:
                    5f:a9:0a:16:c1:d8:74:26:3d:70:94:2e:61:ac:a4:
                    1e:5b:fc:41:0d:4c:6a:5d:c6:ec:e5:d6:74:ed:e4:
                    02:72:ad:d6:1a:bf:ee:0b:a8:5a:e8:8c:a1:92:7f:
                    1e:ee:be:7b:63:cb:ef:8d:23:67:39:44:d9:d1:21:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:A8:56:B1:82:B5:AA:1B:67:94:43:E2:5A:9D:63:61:34:01:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.106.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:57:5a:9f:b3:fc:eb:99:f1:9d:39:a9:a1:88:20:1b:23:35:
         57:3a:db:6f:5c:35:a8:f7:6e:26:e5:8c:7f:13:5a:03:f0:3d:
         ed:5c:09:a1:23:93:53:44:ee:52:7a:72:6b:64:aa:02:8e:33:
         16:c1:22:e8:06:c2:4f:e8:30:d0:a5:97:8e:a0:15:2d:c0:7e:
         ed:f0:b0:41:d2:c5:1e:97:ce:00:65:a2:9f:f7:f5:c3:b6:07:
         1d:b3:10:fe:f0:4b:49:f4:9c:1a:83:05:d5:07:cb:82:22:42:
         0e:ac:1c:48:d3:bd:5a:e9:50:e0:ad:80:f1:3a:ae:bb:50:32:
         cf:88:09:52:c9:af:a9:63:51:74:da:99:65:08:c8:71:20:6d:
         87:4e:6f:65:a9:06:78:c4:9e:ab:fd:cf:b7:0e:05:1b:69:80:
         ec:a2:dc:17:13:b2:bc:d9:f0:31:88:cd:e1:8c:e4:35:f1:1e:
         90:bc:fc:3a:98:d3:7c:3b:ef:a6:f5:29:4a:e4:21:4f:b0:d9:
         bc:8d:fc:cd:f7:6e:24:f6:50:12:1f:57:74:97:ce:f8:7a:52:
         75:43:f8:3b:3e:1f:b1:99:11:e5:66:08:e8:6d:58:96:ae:85:
         e0:4a:7e:18:24:58:8c:d7:85:fc:5e:92:12:3f:09:54:38:09:
         4b:a6:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:18:03 2025 by rpki-client