Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44c433c5-83d2-38aa-8189-171f5b18a0d8.roa
File:                     44c433c5-83d2-38aa-8189-171f5b18a0d8.roa (raw, json)
Hash identifier:          HQN6P/xabM9VpB5u/B+6HOxv7m3yVvIvsuI8k+Zsbg8=
Subject key identifier:   EB:94:5C:6D:60:DC:2A:B3:B9:BD:EC:69:60:47:40:24:30:AD:D8:C5
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584A70CA3F6E54ABCAE2DFC0B600
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44c433c5-83d2-38aa-8189-171f5b18a0d8.roa
Signing time:             Mon 07 Jul 2025 15:18:48 +0000
ROA not before:           Mon 07 Jul 2025 15:18:48 +0000
ROA not after:            Sun 05 Oct 2025 15:18:48 +0000
asID:                     8069
IP address blocks:        13.104.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:ca:3f:6e:54:ab:ca:e2:df:c0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 15:18:48 2025 GMT
            Not After : Oct  5 15:18:48 2025 GMT
        Subject: CN=271224b6-78a7-41b9-8a58-a4e3d7cf4f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:96:ef:bd:9c:4d:d4:cc:69:a3:9b:b7:7e:
                    03:76:f4:c9:ab:83:0a:b0:ea:1c:04:7f:e5:17:c9:
                    62:a0:aa:89:e6:ec:23:7e:3b:75:60:86:15:3a:71:
                    ec:26:83:49:82:82:95:05:0d:26:55:81:58:3b:82:
                    2d:9c:c6:bf:83:dd:12:a5:05:e7:3e:df:47:d3:b0:
                    22:3f:b5:d6:1b:bf:d4:b2:a8:6b:71:a6:5b:54:39:
                    c6:93:d6:c2:a9:99:b1:52:f5:b1:0d:28:29:fe:6a:
                    73:76:51:fe:11:88:1a:4c:aa:92:96:4e:b3:a2:a6:
                    47:aa:5d:2a:74:24:b7:ed:2a:79:63:e3:e0:95:f0:
                    11:29:88:13:9f:03:89:e4:ea:4b:00:4a:e6:15:58:
                    d5:4b:3e:d4:35:84:8f:e2:ce:6d:05:36:61:11:97:
                    07:19:55:13:8d:f4:d6:a4:79:75:f5:08:5e:7f:ee:
                    89:f2:96:63:e0:39:a2:43:44:bc:9c:59:d0:10:84:
                    60:98:c5:a9:47:a6:a7:dd:14:6b:c8:17:67:f8:cc:
                    61:b3:0e:92:0f:3a:13:24:43:d3:d0:94:67:75:81:
                    f2:d0:1c:b4:ee:98:0d:e1:6b:09:e5:2f:19:6e:b3:
                    02:2d:a3:06:7c:1b:dd:0e:d1:95:93:48:6e:06:d1:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:94:5C:6D:60:DC:2A:B3:B9:BD:EC:69:60:47:40:24:30:AD:D8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44c433c5-83d2-38aa-8189-171f5b18a0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.104.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:99:3d:65:76:92:28:97:67:60:e5:3b:fa:b4:33:0b:c9:a4:
         ff:1f:4e:17:73:2f:7e:8b:68:f5:af:5b:3f:88:ed:ab:f1:a7:
         f4:61:a5:84:a2:06:9e:ab:3c:01:a4:2c:77:15:d6:27:1e:90:
         2f:1c:b6:67:b3:66:62:42:aa:83:cb:36:bb:dd:55:4f:c0:ff:
         6b:9e:c1:7f:48:21:3d:a6:99:c2:69:2b:72:af:b9:09:da:cc:
         9a:da:5e:62:79:7e:ef:8d:df:97:af:1a:a0:48:68:c9:23:4a:
         70:4d:cf:13:86:7e:e6:43:69:40:d4:d0:74:9a:fc:b8:43:f2:
         f3:6c:eb:3e:48:42:16:56:c4:03:b6:a2:72:e0:2f:c7:15:58:
         cb:91:bf:4c:f1:8a:3f:7f:2d:53:81:a6:b2:82:a9:1f:8f:cb:
         12:45:2f:d0:80:40:cb:80:94:e9:3f:53:2f:e8:4f:05:6a:25:
         9e:e9:cd:9b:51:42:a6:62:e4:7c:f5:70:32:a4:0d:46:c6:93:
         c8:0d:ff:af:2e:cc:fa:f9:59:fb:9e:e3:8e:89:13:a6:eb:ab:
         35:c3:5f:3d:4a:f3:e1:4f:fb:65:09:e6:f0:3e:d1:b6:8a:d2:
         67:99:a3:4f:26:b2:04:68:cf:d7:8c:06:e3:0e:8d:37:3d:b5:
         fd:3a:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:04:41 2025 by rpki-client