Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ffd58d8c-354c-35b3-bc66-78d17aa98c31.roa
File:                     ffd58d8c-354c-35b3-bc66-78d17aa98c31.roa (raw, json)
Hash identifier:          hpVvMVhPULZObxuX1eUe1uW9GnjrXsb1uapDXbaxjzQ=
Subject key identifier:   49:2C:70:B0:54:22:1B:67:D1:29:0D:34:80:D5:AB:0B:B4:19:9F:28
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AAB799D1B590CAE3ADD18EE80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ffd58d8c-354c-35b3-bc66-78d17aa98c31.roa
Signing time:             Mon 28 Jul 2025 15:49:02 +0000
ROA not before:           Mon 28 Jul 2025 15:49:02 +0000
ROA not after:            Sun 26 Oct 2025 15:49:02 +0000
asID:                     23473
IP address blocks:        104.145.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:79:9d:1b:59:0c:ae:3a:dd:18:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 28 15:49:02 2025 GMT
            Not After : Oct 26 15:49:02 2025 GMT
        Subject: CN=f48be011-70d6-4bd8-9516-4681cac46e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:83:0d:24:91:af:d4:ad:d7:ac:03:72:7e:
                    56:73:e6:d6:6a:5e:8a:29:bd:92:c4:ab:f7:b2:30:
                    6a:99:81:6b:1b:c8:2f:26:a6:41:dc:24:70:e5:e7:
                    5e:37:88:f6:e7:60:5f:09:5d:04:29:a9:55:1b:83:
                    a4:bb:1f:bf:d4:a1:eb:88:9f:97:85:f8:88:b4:42:
                    76:47:d0:9f:66:b9:05:9e:56:e7:2e:2e:67:9b:c3:
                    c8:0c:6d:d0:c1:8a:74:6e:c6:90:36:41:4c:bb:2f:
                    da:24:eb:82:04:de:39:cb:11:59:9d:d9:ae:12:d8:
                    48:59:55:47:8f:ac:f7:3f:25:5b:cd:54:09:19:a3:
                    c1:e3:9d:d9:5d:d6:1e:d5:1d:ec:24:8b:40:03:42:
                    35:47:80:eb:ce:69:af:94:c2:7f:0b:d3:08:ca:ba:
                    b7:cb:28:0a:fc:50:7c:32:f8:4f:55:22:70:a2:80:
                    ac:95:e1:a4:ba:e9:fa:58:81:6b:8b:2c:f3:35:96:
                    58:91:b3:93:26:fc:e6:46:27:16:21:c2:18:d7:43:
                    87:ae:c8:4c:cb:2b:93:35:47:54:a7:31:5d:86:b5:
                    ef:a9:7e:5d:43:df:09:dd:f5:1e:cf:8c:a7:23:a2:
                    3e:4d:06:5f:ac:e4:c6:f0:8d:90:47:95:a7:e2:b8:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:70:B0:54:22:1B:67:D1:29:0D:34:80:D5:AB:0B:B4:19:9F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ffd58d8c-354c-35b3-bc66-78d17aa98c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6c:ff:db:3d:e4:33:48:cf:e3:2b:76:f9:49:44:28:b8:47:
         c5:4a:a3:47:37:10:79:37:88:69:7f:6d:69:dd:b2:43:9a:c1:
         fd:13:56:3d:e9:6c:99:c4:73:7b:31:da:27:ac:b6:b0:68:30:
         99:a3:ee:22:d0:dc:90:a2:37:f3:9d:e6:72:19:bf:8f:60:d9:
         63:70:57:11:90:16:c6:0b:db:78:fb:7d:6f:11:20:97:da:98:
         c5:5c:ad:ee:08:18:fc:93:90:2e:db:0b:c0:4f:cf:19:58:9e:
         60:3d:d1:76:67:17:66:4e:ed:c5:09:58:1d:29:88:4c:42:06:
         ec:1e:94:b2:99:30:24:fd:6e:01:f8:a8:87:08:cf:4f:86:0e:
         f9:d1:8c:4a:ac:24:bb:ea:ae:2d:d4:2a:28:e8:7f:29:a4:f3:
         f2:22:18:b9:ee:e7:6d:9d:c3:8d:e0:5a:7d:93:a7:f9:53:71:
         fa:dd:40:fc:8a:c1:7b:ef:24:99:cb:ac:8b:12:5f:b9:53:6b:
         05:c2:06:07:7d:98:9b:a7:22:1a:e4:19:98:ec:46:c6:6a:d8:
         9b:cb:49:2e:b2:be:43:f1:f4:12:e0:b0:61:d2:85:a0:23:72:
         3a:ec:2d:5e:80:42:0b:3d:dc:fd:c8:4c:a4:0f:90:c0:38:99:
         06:56:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:53 2025 by rpki-client