Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa
File:                     08dd8f01-f24b-30a6-8e14-4514805f2501.roa (raw, json)
Hash identifier:          ZcjExkAp8I6td8pz3DIV2JVyLs62s7zK498zYWyyzls=
Subject key identifier:   A4:B8:94:25:9A:EA:C1:73:8A:0E:6C:66:F9:75:EB:5B:54:11:49:0A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AC87652D2982556870D330900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        104.250.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:52:d2:98:25:56:87:0d:33:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=cf78b96e-c38c-48e3-a1fa-3bc413c43dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:a3:4b:aa:5f:d9:c6:45:21:bd:3f:2a:0e:
                    13:f1:ec:e5:93:18:0b:d2:ba:41:17:1e:d1:23:e9:
                    bc:39:06:28:52:ac:15:c5:9e:1c:34:bc:cb:c3:c1:
                    0e:ea:a6:8a:73:86:b6:01:d0:5e:55:fe:aa:31:10:
                    3e:c0:18:fa:e0:3a:50:92:29:e4:2b:9f:52:08:b6:
                    ff:da:1d:90:a3:cd:a4:6b:c7:00:ce:e2:a8:f0:9f:
                    e3:ec:64:a0:67:0e:51:01:b6:05:dd:54:e3:10:d1:
                    4d:c7:b0:3e:53:7d:b3:d1:8b:77:23:b0:71:f3:40:
                    4c:87:74:d6:f1:0e:2f:b2:c6:f8:75:dc:1d:54:53:
                    58:14:5f:2d:72:39:47:b1:64:55:a9:e9:f6:6f:5b:
                    23:af:b6:2b:88:fe:eb:ae:fa:0a:5e:ab:7f:04:15:
                    e4:8c:79:71:21:54:58:0e:3f:18:ee:b1:4e:d5:e8:
                    de:26:73:5c:59:f8:a4:3e:96:5f:a5:48:58:f4:a5:
                    84:6b:4a:f3:71:94:d7:53:ea:37:db:42:8d:8e:71:
                    1c:99:27:4d:3f:75:01:8c:ea:f6:cd:f4:bf:76:3f:
                    1b:f7:f7:71:6b:10:ce:a9:18:bc:bb:71:c9:90:63:
                    49:56:d2:c9:6f:09:e1:d3:c6:0c:76:b0:76:0c:27:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B8:94:25:9A:EA:C1:73:8A:0E:6C:66:F9:75:EB:5B:54:11:49:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:c7:f2:eb:00:e7:c1:b9:c8:76:4b:20:c0:ae:51:a5:7d:
         fd:4c:a3:c7:e7:14:aa:62:ae:24:72:85:18:8c:25:46:90:2c:
         bf:8e:7e:d0:f7:9e:da:b9:b9:85:dc:be:62:b6:00:50:48:a9:
         24:00:66:31:83:0e:b4:fb:8b:c5:f4:9d:2b:d8:f9:18:d2:90:
         48:89:e6:51:bd:74:19:48:0c:3b:a2:8f:d4:69:c4:ea:b0:17:
         40:05:51:a5:08:b5:49:65:17:5d:17:9c:d1:a7:f2:2e:12:64:
         b3:5d:3d:fe:2d:db:61:6a:df:f3:53:66:0f:8f:cf:47:b1:7e:
         d6:61:b0:86:f1:cc:1e:5b:a5:4b:2a:bc:de:9c:9f:2b:d9:f2:
         b9:d5:c3:30:be:05:39:cf:06:ea:e8:b1:29:c6:95:e2:bd:f4:
         6b:f2:23:38:7c:8c:60:6c:16:71:5f:24:af:f3:1b:27:55:19:
         ef:70:10:ec:9c:31:d6:8c:79:3a:a9:ba:a0:98:d6:00:e6:ff:
         17:07:b8:ca:53:ae:51:6c:3d:30:4d:fd:c1:5e:a7:1f:59:a9:
         2e:5d:da:44:fa:57:dd:92:ac:67:08:68:7d:17:6b:bc:7b:1e:
         18:76:68:48:d5:49:e4:76:0d:66:32:23:84:8f:9b:74:1c:3f:
         c7:bc:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:30 2025 by rpki-client