Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa
File:                     b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa (raw, json)
Hash identifier:          MQTovi3h5PXcKyaVD+qZP5v8RH9hczkLI42bUuTjAAY=
Subject key identifier:   E6:A4:EB:8D:BE:7E:5C:9B:06:A8:E2:AF:C5:20:34:02:54:70:9A:04
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F4328584AADF11A87DF77A0272A4DFEC0
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     5511
IP address blocks:        104.193.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1a:87:df:77:a0:27:2a:4d:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=776ca641-1c98-42c4-bb32-64119728b047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:ae:c3:9d:fc:ed:96:2d:0d:12:92:45:a7:
                    2c:67:78:0b:dc:b9:a7:51:13:bc:ad:ae:f6:29:c7:
                    12:80:e7:fb:ac:ee:98:fb:28:6c:73:5b:72:0f:bf:
                    bf:35:e1:9a:9d:67:8d:b3:49:3b:3d:f5:c3:17:dd:
                    94:3c:9c:74:49:33:43:0f:a8:61:51:f0:a8:09:fe:
                    9e:2d:b7:15:3f:fa:48:9b:a8:bf:17:21:da:d2:b7:
                    56:0a:1e:0c:c8:09:1b:6e:45:fa:40:37:28:f8:2e:
                    3c:c0:54:01:63:13:1f:8b:8b:b4:9f:27:49:a6:27:
                    a1:85:2c:9a:dd:4c:16:70:22:14:71:8c:65:51:d4:
                    d0:6d:ee:4b:61:15:14:85:c5:7d:cd:e6:12:c7:ef:
                    cf:6c:67:03:ab:6f:03:7b:05:9f:39:d6:50:4d:1e:
                    7f:ec:5b:87:ad:7a:da:7b:ab:8b:a2:51:3a:59:b6:
                    84:93:89:08:5e:c3:3c:bd:e7:3b:d9:12:9c:2e:17:
                    37:b2:57:d4:cc:21:d9:b8:7b:23:fb:47:5a:6d:b9:
                    f7:58:3d:8e:c1:83:23:b8:7c:de:29:41:4e:e0:40:
                    a7:1a:b7:36:47:67:13:89:f6:8d:82:f0:9c:32:a2:
                    e3:33:d5:5c:98:38:48:c2:a6:31:50:f2:59:d8:12:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:EB:8D:BE:7E:5C:9B:06:A8:E2:AF:C5:20:34:02:54:70:9A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:d6:b3:08:31:46:e0:de:ff:2a:70:88:34:79:43:cb:6c:
         d9:76:bd:74:73:42:90:ed:24:cb:84:0a:f9:79:58:4f:90:fa:
         0f:bc:b5:6c:5e:91:b2:59:ec:b9:5a:63:b1:12:e7:8c:c8:2e:
         42:66:4a:fd:2e:0a:5b:5a:a8:25:07:f9:0e:63:23:d2:ae:41:
         d8:32:83:ed:02:a2:7a:38:48:68:4a:e0:14:16:04:21:e8:83:
         f7:5a:60:1d:49:9b:66:01:3b:aa:07:0d:81:bc:ec:24:6a:d4:
         64:1e:ca:e8:00:a1:bb:f0:42:ad:c3:b3:45:59:4f:d9:ff:0b:
         20:35:c9:88:85:b3:e3:af:9f:93:14:1c:69:63:98:b9:02:c5:
         69:b3:ef:52:45:10:02:cf:a9:5b:45:81:52:a6:14:96:da:10:
         f5:d7:18:63:3d:d4:15:cc:c0:77:54:8f:bd:98:cb:6a:3a:02:
         b3:5f:25:e8:fd:e2:cb:4c:76:29:a2:a1:0a:a8:10:67:0f:47:
         e7:64:35:d2:a5:16:55:ec:83:fd:86:15:40:76:50:65:ed:b7:
         23:b3:75:f7:ce:0a:a3:c6:a8:f0:d9:8b:cd:8e:1c:a5:c3:92:
         5e:51:e4:b0:44:dc:58:1b:27:40:5e:06:a2:e8:94:0a:40:2a:
         f1:16:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:03 2025 by rpki-client