Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa
File:                     82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa (raw, json)
Hash identifier:          xyC+P6n6X4yNoyVEKrCHVsJEpBfl27/N9Nbz7/7y5LA=
Subject key identifier:   3D:DA:20:D0:F9:72:DF:39:D3:4D:3A:74:F9:28:62:6F:CC:82:6E:05
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584B583C7F84E759F587ED354E80
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     398852
IP address blocks:        104.243.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:7f:84:e7:59:f5:87:ed:35:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=6368deef-c07e-4454-a9db-961efc324374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:7f:76:f4:d8:de:85:ac:01:a7:87:4d:01:
                    f5:51:b8:86:b8:2b:04:3e:f7:cd:e9:69:f4:7a:4d:
                    99:a2:a2:34:27:74:2c:fc:ad:8f:41:77:82:c9:41:
                    6f:82:e5:c2:6d:87:81:f3:44:11:7e:50:9a:7f:4a:
                    79:d0:14:bb:b1:c3:50:10:bf:3d:4a:65:02:ae:a7:
                    50:bf:99:ab:2f:13:4e:6c:5d:2f:fe:53:6c:f2:9b:
                    20:35:71:89:7c:5f:f4:52:e0:c3:fc:61:18:98:82:
                    1f:0a:97:4e:e0:77:bd:5e:81:80:d3:30:d6:9c:c2:
                    49:b7:49:d3:e7:b4:00:ee:e2:03:b1:b1:9b:5e:28:
                    c2:1d:7f:d5:32:28:04:d7:27:3d:53:20:73:29:30:
                    cc:7c:4f:e5:68:33:42:5a:c7:97:81:26:ed:2f:77:
                    63:fa:a4:ab:f9:a3:96:6e:66:68:25:54:05:8c:ac:
                    ab:88:d0:cf:7f:b3:92:5e:fc:52:a4:e8:97:83:bf:
                    c2:2e:c1:a6:5c:6f:2a:6b:87:0e:51:a5:13:72:de:
                    32:ff:b1:d8:34:1a:30:8d:47:81:d0:77:78:f2:64:
                    65:1c:a8:b1:c4:af:87:13:9b:e0:11:96:c3:39:ca:
                    41:ed:0d:ef:9e:89:6b:06:87:c6:e7:2d:33:3d:7f:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:20:D0:F9:72:DF:39:D3:4D:3A:74:F9:28:62:6F:CC:82:6E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9e:a6:62:ab:50:f2:52:c5:eb:58:a2:f1:81:56:fb:7a:a7:
         ef:01:b6:08:2e:78:97:67:be:e6:1a:08:ab:3f:0c:5d:58:28:
         18:5b:95:2a:0e:e1:bc:4c:f8:59:a1:1a:d6:f7:c8:1e:7d:e3:
         8e:34:9b:41:4d:69:2b:37:71:76:5d:96:3d:05:1a:af:d4:30:
         6e:22:e1:90:7b:13:f1:85:06:70:ac:c5:f2:bb:66:69:df:94:
         14:b4:fc:f4:b0:50:83:32:f7:92:29:6b:e9:73:ab:cb:43:df:
         44:60:8e:c2:18:bc:3f:57:a4:53:48:6c:ea:f3:56:e6:52:2b:
         ea:c9:03:7e:72:39:20:34:b8:8f:09:bf:2c:a9:ec:3a:72:5c:
         5a:b8:16:c2:a9:12:ae:bb:85:c1:0b:77:7e:c6:18:6a:98:fd:
         2d:3b:d0:6a:02:2a:6a:a8:af:b4:8b:07:dc:11:0c:44:f8:e6:
         0e:b0:45:3b:11:14:b7:b4:8a:ad:13:d9:e7:0f:45:a4:ab:27:
         63:42:fa:70:61:7c:50:21:ac:7c:11:07:81:4e:b6:e0:4d:9f:
         0f:32:7a:cc:03:db:64:f0:5c:80:4f:82:4e:f4:3f:d2:1a:66:
         18:cd:38:d1:38:10:11:f6:c0:6d:41:59:30:f0:52:99:06:99:
         32:8e:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 11:58:46 2025 by rpki-client