Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/262cfe51-ecd6-3481-9e48-9f3cf3500b13.roa
File:                     262cfe51-ecd6-3481-9e48-9f3cf3500b13.roa (raw, json)
Hash identifier:          6IL47I0lwRjW4fu9tDCRgdggxJLGY4yZhdYqTfGG9qM=
Subject key identifier:   D2:B2:74:1F:AB:15:03:FB:7D:E9:C1:73:33:59:D2:CE:0D:BA:27:CA
Certificate issuer:       /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322
Certificate serial:       010D0C9F4328584BA39D296DB0755FFD40AF1360
Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/262cfe51-ecd6-3481-9e48-9f3cf3500b13.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        104.243.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:29:6d:b0:75:5f:fd:40:af:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=ccd4d5bf-35e4-469a-869c-fd9aa445e6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:bf:3f:86:ab:e6:29:a4:c8:fd:25:83:3e:
                    ef:c6:ef:29:0f:80:ea:22:cd:30:f3:6c:20:b2:3a:
                    4c:4c:93:7f:02:f7:33:f4:b2:98:f2:ab:25:0d:c4:
                    fe:f4:6c:e4:c3:27:6e:e1:a3:aa:a5:f6:54:fd:7d:
                    10:c0:bf:96:75:c9:38:b1:41:85:7a:ef:0a:06:58:
                    8e:e0:2f:a8:05:24:d5:a9:24:b0:13:86:b1:9d:10:
                    87:32:36:c1:24:de:2e:90:89:1a:0b:82:a3:dc:ed:
                    d5:d8:4b:e1:bf:04:3d:ec:4f:77:44:f8:8b:35:03:
                    0c:62:52:1a:92:e0:54:3b:ce:4c:bf:f8:61:31:fd:
                    61:e2:93:ca:66:aa:b6:bd:b9:5e:96:d0:98:e4:5a:
                    59:0f:91:46:85:9e:66:a0:1d:3f:b4:27:39:e2:8c:
                    38:3c:f2:ce:c3:7b:c7:cb:c3:9e:09:7f:97:42:d5:
                    a8:7b:9e:06:b8:d5:e7:42:19:cc:ea:fb:10:54:34:
                    97:ce:d6:fa:41:8e:6c:3f:ef:7d:12:6a:2b:1f:64:
                    5c:4c:00:56:1e:2a:03:1d:65:1f:5c:08:4d:b8:72:
                    09:23:65:bd:08:18:08:28:fc:f7:50:2f:16:77:7c:
                    01:6e:4b:fa:03:db:f3:cc:e9:f8:be:f0:29:87:9f:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B2:74:1F:AB:15:03:FB:7D:E9:C1:73:33:59:D2:CE:0D:BA:27:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/262cfe51-ecd6-3481-9e48-9f3cf3500b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl

            X509v3 Authority Key Identifier:
                keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:14:0f:d8:0c:cf:61:fc:41:0e:b0:ec:a1:34:b4:9a:7c:32:
         03:4a:a4:2b:6a:d1:35:e7:8f:bd:f2:f4:ae:ae:42:54:85:b6:
         bf:46:c3:73:75:8b:fa:32:fb:cc:21:51:ed:0a:37:0f:ef:16:
         ce:b5:bb:e9:3c:76:7c:cc:a2:c2:af:e9:0d:41:25:b7:09:c5:
         8a:ca:3e:5c:79:0b:d2:be:19:93:cc:dd:61:fe:a5:1d:f8:fd:
         09:5a:d1:f9:0e:b0:88:84:8a:4f:d0:aa:92:1f:9b:19:74:9e:
         46:ad:51:44:dc:aa:b4:57:4c:84:b7:bb:07:27:2c:ea:54:63:
         3e:b7:41:d3:94:f8:ae:3c:57:bf:76:c8:46:1b:4e:95:59:6d:
         b0:34:83:03:27:10:6f:bb:fa:fa:fe:2c:11:7c:ca:bd:33:5a:
         ef:88:dc:0d:3b:1a:dc:0f:8b:ad:96:a8:d9:3e:8f:2b:1b:20:
         15:f2:91:05:42:92:a0:b2:22:25:f0:a3:8c:a1:85:10:b8:fa:
         5a:e2:5c:f3:92:c7:4f:3b:2f:b9:28:2d:dd:f1:5f:7d:4f:de:
         b3:43:ed:e1:99:d2:06:f0:ce:27:38:dc:f1:37:3e:d2:21:7f:
         fe:b7:12:ef:8d:4b:cd:3a:3a:ad:a4:c8:ed:9e:05:b4:79:53:
         b9:44:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:56:07 2025 by rpki-client