Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa
File:                     362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa (raw, json)
Hash identifier:          h0KuuID2plPfA2cRmoflwfzGhAWmz+dBFGvjHXHO++M=
Subject key identifier:   99:7F:34:9C:DA:1F:46:C2:6B:B0:D2:CB:00:E0:0B:8A:32:BE:EE:05
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFF72E15420B87244A8A80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa
Signing time:             Sun 03 Aug 2025 02:35:40 +0000
ROA not before:           Sun 03 Aug 2025 02:35:40 +0000
ROA not after:            Sat 01 Nov 2025 02:35:40 +0000
asID:                     22616
IP address blocks:        104.129.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:f7:2e:15:42:0b:87:24:4a:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:40 2025 GMT
            Not After : Nov  1 02:35:40 2025 GMT
        Subject: CN=86846f4e-ff89-48a7-a431-a07772065092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:e6:00:a9:58:45:ba:92:1c:0e:f2:58:fb:
                    c4:e8:5c:49:d2:f0:10:e3:97:99:8f:df:6e:0f:be:
                    cc:0a:d7:46:12:e2:d5:39:8b:ac:60:02:87:f9:64:
                    92:ea:f6:78:d0:e3:4c:aa:d2:6a:b4:bc:0a:3c:04:
                    5e:78:84:c4:22:fe:99:d1:46:16:ef:77:6c:61:0a:
                    a5:6e:2a:65:39:dd:a7:29:11:b9:3b:3a:3c:c6:65:
                    33:a8:8a:0c:50:10:14:c8:df:86:4f:ae:99:4f:de:
                    3e:ad:2f:3b:cb:b5:d2:98:43:02:74:40:3d:ac:c0:
                    4c:a1:a6:72:7f:4f:c0:7c:3c:c1:dd:13:e2:36:f4:
                    c8:a8:b7:68:a2:e0:f6:67:34:68:31:3e:44:be:5a:
                    db:72:f4:cc:9e:b2:33:6c:66:71:23:41:8e:28:c9:
                    7e:a7:c2:9d:df:6a:08:c2:e8:fa:da:59:8a:7d:3a:
                    8a:c2:39:9e:22:d1:ef:7b:48:af:6d:fd:0f:d8:3c:
                    5a:6c:50:f1:89:9f:c8:c1:ae:74:ac:b7:94:10:a4:
                    58:fb:1d:00:01:72:22:39:85:0a:a0:73:8c:a1:2a:
                    b3:44:1f:3b:19:a4:36:a4:c4:42:77:76:63:42:10:
                    b0:2d:9e:2c:6b:fb:a0:1c:f5:fb:fc:23:89:41:89:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7F:34:9C:DA:1F:46:C2:6B:B0:D2:CB:00:E0:0B:8A:32:BE:EE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:64:66:05:27:17:26:4e:8f:cb:1d:12:25:cf:fb:db:dd:97:
         96:68:f8:53:0f:3c:bd:89:cb:46:cf:5c:6f:f3:fd:86:4e:d2:
         a1:38:5a:33:6e:19:b5:68:b6:b8:8c:42:f7:94:a4:7c:d7:bf:
         2e:6c:18:a4:e8:f7:9a:28:eb:43:bc:d2:45:4a:09:b0:9b:9c:
         25:1a:71:76:90:2c:69:e1:e2:93:e5:f0:ea:b9:36:25:ae:4e:
         10:35:66:aa:92:6c:73:f5:be:1f:11:63:c4:be:e2:04:c7:4c:
         6f:70:38:08:6a:a5:72:96:36:4e:5c:6a:f8:6b:6b:2c:0c:ef:
         c7:d3:59:15:f6:1b:0c:8c:0b:2b:26:e1:9e:35:7e:33:af:7b:
         6c:83:24:85:90:c6:b1:77:97:53:69:ad:6b:a7:3e:9c:4c:68:
         61:f3:55:48:7e:ad:77:70:b5:3a:b1:0f:ff:e0:6e:3b:0f:0c:
         93:23:e2:f2:42:97:c2:8f:d3:16:a3:c7:6c:74:f0:0b:b7:69:
         14:b6:4c:c5:43:59:67:a2:ab:16:43:6c:fd:7c:0d:db:e6:d3:
         5c:93:b8:39:b6:9b:de:ce:d9:08:b7:b2:b2:93:80:73:28:96:
         3c:7d:d9:e3:55:77:ad:da:16:a2:fa:bb:10:50:d6:64:00:d1:
         d8:e4:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:14 2025 by rpki-client