Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa
File:                     fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa (raw, json)
Hash identifier:          Hg5gJ/5q06Z42WthBBF1IWFE+R99qcmu+wwypLflApI=
Subject key identifier:   10:24:46:EC:1E:07:70:57:10:A1:F1:D2:A8:81:F3:8A:30:A6:63:B6
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A82AB3A63C2FCCAD891E68DC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     23473
IP address blocks:        104.145.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:3a:63:c2:fc:ca:d8:91:e6:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=4c68f464-ed1e-45d8-8abd-8ec17fb45363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:91:9a:fe:07:13:8f:8d:2c:7a:3f:bd:7a:
                    9d:5e:eb:b1:d9:7a:0f:83:3c:b7:64:1b:6e:81:54:
                    ca:51:27:f9:ed:5e:7a:2b:ee:55:bc:4c:f3:db:a2:
                    b7:27:cf:fb:93:54:c2:fc:2f:9a:79:6e:0e:7b:2a:
                    16:ac:37:89:c5:84:e3:92:73:aa:f7:0d:09:ff:5a:
                    df:e2:be:33:9b:fe:3c:a4:6c:49:84:a8:cb:8c:f3:
                    d3:ed:a1:23:63:53:73:e6:db:54:0d:21:ba:8f:18:
                    33:28:b6:4c:dc:1f:ec:fe:e0:58:b5:58:c1:99:7a:
                    ac:41:8a:06:82:f1:7f:2d:07:1d:3d:1c:cd:d7:90:
                    58:e1:43:41:6f:bc:46:6d:5e:2b:09:14:f6:39:6c:
                    ac:eb:99:3d:bc:f7:d1:fe:b3:b7:6c:66:32:6d:9f:
                    37:83:6c:1a:02:df:2d:b0:f0:30:f2:db:eb:bb:dd:
                    0a:9b:94:48:88:85:a0:15:35:39:54:60:12:7f:6b:
                    bf:b6:bc:ad:b4:81:3e:2b:51:bb:ed:eb:23:6d:b3:
                    05:b4:48:4f:8a:d6:f8:cc:76:51:f2:1b:b3:a9:6c:
                    6f:95:c9:da:3b:79:83:74:38:cb:b6:61:77:38:ea:
                    aa:d8:d0:c1:41:a6:46:4f:ab:fc:5d:5f:3b:00:41:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:24:46:EC:1E:07:70:57:10:A1:F1:D2:A8:81:F3:8A:30:A6:63:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:59:6c:f5:8a:c7:5a:8e:56:09:8d:18:70:fa:b5:5b:ac:
         0b:5a:e0:c6:fa:b4:0a:f6:9e:00:25:30:fa:16:9f:67:06:64:
         fa:ef:52:90:d1:d5:64:2c:dd:57:a0:f0:fa:d8:68:af:43:e2:
         36:8f:8a:84:19:6f:2c:3d:b7:dc:e3:6f:38:51:99:63:77:01:
         a5:d5:97:08:82:ec:b0:a3:02:4f:9b:57:90:7e:b1:8c:1c:16:
         13:c9:b3:0a:67:22:c5:d5:79:89:b2:45:7e:f1:c0:14:7c:cf:
         eb:8b:51:a7:9d:cd:ba:98:fb:11:04:e1:61:df:1e:4d:bb:1f:
         2c:fe:d5:72:5b:87:55:3f:35:92:d4:fa:a4:cc:84:c4:76:df:
         99:f9:fe:54:db:9a:d4:54:47:07:f1:6e:70:70:e8:04:48:cb:
         a3:9d:ac:f4:6b:69:27:11:d1:38:81:a7:6a:4b:c6:1d:9d:d5:
         9c:d6:1b:19:77:4e:34:ec:2f:03:a0:f2:72:09:d4:6e:e6:4d:
         d6:12:77:88:32:78:1c:f1:5e:c8:87:ab:2d:ad:82:a1:0c:a7:
         ed:0a:12:59:45:df:15:34:81:fa:03:00:e4:8e:cf:22:48:f3:
         4c:69:0a:74:8a:bc:d1:6f:c9:76:b4:c1:45:93:0c:29:af:75:
         d8:38:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:00:28 2025 by rpki-client