Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c9facc2e-5614-32bf-8d52-cb38eada18f5.roa
File:                     c9facc2e-5614-32bf-8d52-cb38eada18f5.roa (raw, json)
Hash identifier:          4a/mtgZXirmd6c3e3EnDLisXjhUxhCISltcozNlTg+A=
Subject key identifier:   C3:C8:51:CF:07:ED:66:E4:63:D4:A4:93:A8:4D:29:B6:43:98:3C:DC
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AC8765A0872ECE54521BCEB00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c9facc2e-5614-32bf-8d52-cb38eada18f5.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     14956
IP address blocks:        104.194.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5a:08:72:ec:e5:45:21:bc:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=defebf72-1ece-4103-b3aa-e19e19ebc4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:ca:22:c2:5b:14:ec:7b:d5:0f:f6:f0:7b:
                    67:ae:9b:3d:e1:4a:f8:97:ab:78:77:e1:bf:49:70:
                    43:c3:19:d1:02:63:e9:6f:d6:9c:29:84:07:d6:91:
                    3c:87:89:3c:de:99:e7:46:88:aa:e4:36:63:0d:91:
                    7a:c5:c4:60:e3:8d:71:ee:c9:89:25:f0:54:ca:ad:
                    66:7e:ab:a9:58:63:d8:37:f8:cb:ad:2c:a5:14:3e:
                    dd:8d:eb:fc:41:d1:01:c5:3b:3b:a6:32:29:06:62:
                    5f:81:42:33:35:5c:30:12:f5:dc:d8:eb:c4:29:ae:
                    f1:77:d9:4d:d0:3b:e1:4a:bd:95:e4:9d:0b:b2:1d:
                    29:78:aa:f8:a6:2c:d1:be:46:2b:57:ee:ed:0d:fe:
                    d2:fb:96:09:51:3b:14:70:27:44:6c:e2:a1:de:55:
                    82:07:7b:5b:1e:87:b4:9d:e4:31:f6:80:52:f4:f2:
                    60:78:0e:e9:68:3b:62:6e:c5:ef:7e:91:91:a1:1c:
                    3d:9e:6f:8a:2d:0c:71:df:d3:1d:7f:78:70:e0:dd:
                    b1:32:73:97:4f:c3:72:01:cb:80:7b:a3:f6:83:04:
                    76:1e:da:79:dd:18:58:31:f3:fd:ad:81:d9:68:e8:
                    80:50:c2:e9:4f:5b:e8:4b:8b:3e:0c:95:bc:6c:b5:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:51:CF:07:ED:66:E4:63:D4:A4:93:A8:4D:29:B6:43:98:3C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c9facc2e-5614-32bf-8d52-cb38eada18f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fd:f4:9c:55:66:71:26:58:c3:60:9b:09:25:5d:91:80:42:
         b7:ac:67:c3:6c:24:4c:64:0d:b5:7e:05:94:b5:88:3f:0e:a5:
         a2:d3:a7:42:2a:6d:80:2a:d1:97:ae:44:d1:87:11:ea:76:4e:
         f5:20:c5:63:44:f8:46:1a:97:33:37:7d:2f:58:a7:ba:a9:a7:
         bc:a7:f4:f4:75:b2:a3:4b:94:23:6b:32:7b:92:5c:84:22:3f:
         97:fc:72:bb:88:29:2f:04:23:e0:63:38:f4:d8:c5:fe:a7:21:
         bb:42:9c:23:39:bb:58:8a:84:fc:a7:4c:71:9a:be:65:9f:c6:
         94:0e:68:41:58:02:56:9e:f8:3c:c5:78:43:0e:67:c9:f1:ea:
         f8:1c:50:71:4d:23:53:70:68:08:9c:5e:38:58:50:6b:0c:35:
         47:91:80:5b:fa:37:a5:c0:e9:27:74:1f:73:d3:8c:1d:06:72:
         67:7e:fe:14:10:22:0b:2e:ce:38:ad:bb:11:96:83:d0:a4:1f:
         f1:0a:20:86:36:4c:da:73:14:87:3b:42:15:32:d2:07:08:0d:
         23:ca:33:9e:19:88:39:45:47:d3:87:e8:32:1b:86:92:e4:e0:
         3f:28:ed:80:f2:25:6c:62:06:6b:68:a6:28:f8:5d:7a:ad:d2:
         b3:4d:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:22:54 2025 by rpki-client