Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/871776d6-8507-3b6c-a93b-b90644f4daf2.roa
File:                     871776d6-8507-3b6c-a93b-b90644f4daf2.roa (raw, json)
Hash identifier:          rBB0HM2eI265ANcA3co1ScvcGLON39PfMQHX0syhcCc=
Subject key identifier:   44:A0:70:72:69:22:42:89:F3:82:10:6F:37:2C:10:7F:7F:BD:8F:B0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584BB88D237815287AE285B04380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/871776d6-8507-3b6c-a93b-b90644f4daf2.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     7018
IP address blocks:        104.244.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:23:78:15:28:7a:e2:85:b0:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=91ae56f0-78dd-43f7-857f-26c4c54649b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:f9:3c:48:6b:16:f3:9c:2b:b2:93:3b:79:
                    28:d5:16:5b:68:ab:5f:ab:de:2a:c1:af:89:0d:ac:
                    cc:ba:2e:d7:cf:b6:a8:38:2f:87:88:f6:50:e6:72:
                    f3:52:02:f5:8f:48:37:52:18:24:78:df:0b:00:ac:
                    19:78:d2:55:04:cf:8d:45:f7:3c:33:24:88:e7:20:
                    93:8c:b6:d5:c4:f2:2c:5f:ff:7a:af:2d:72:10:b8:
                    8e:92:36:70:3a:3d:c5:ba:ef:59:95:59:e9:e0:1c:
                    87:15:39:af:0d:1e:fe:1f:7b:49:d7:c8:92:6f:f7:
                    38:7d:51:b7:20:48:3c:94:cc:ce:00:e6:0a:ae:fb:
                    ca:f6:f0:e5:ae:23:ec:f6:76:0b:03:b4:87:ec:74:
                    14:cb:3d:b6:b6:9f:08:9f:0e:2e:cd:16:f8:4a:65:
                    d7:2c:ed:c9:d5:ad:01:0c:dc:70:d8:e8:be:f8:f8:
                    ff:e3:fa:2a:fe:1b:e1:03:51:e7:34:5d:e1:ad:67:
                    40:d5:96:0b:cb:0a:e1:46:67:db:a1:1f:bb:5e:dd:
                    d9:2b:f8:e0:d5:93:0f:7d:83:bb:b9:16:71:d6:ae:
                    39:b4:b2:92:7b:18:dd:07:72:07:af:c7:3d:cf:88:
                    33:ad:41:40:6e:fa:69:83:c9:97:b4:9b:2e:b9:d0:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A0:70:72:69:22:42:89:F3:82:10:6F:37:2C:10:7F:7F:BD:8F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/871776d6-8507-3b6c-a93b-b90644f4daf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:34:6a:cb:b4:5e:1f:63:82:05:fe:47:e6:72:56:40:39:da:
         ba:12:5d:df:f6:ba:0d:ab:32:61:6c:0d:e7:c8:c1:3d:99:87:
         95:6c:73:4d:ec:f7:fd:b0:60:db:94:79:ee:d6:92:eb:20:70:
         b9:22:18:81:9c:ff:33:7a:0f:08:c1:08:a7:25:17:5e:de:3c:
         60:c4:36:4d:93:b6:df:72:9d:d1:c2:60:0d:6e:8b:19:5f:44:
         0a:7c:dd:75:fc:94:dc:c7:c6:ee:e8:49:62:f3:72:37:99:c6:
         d2:6b:74:e6:3d:c5:5f:40:ac:a8:92:e4:43:46:6c:3a:7b:53:
         25:81:59:17:43:6e:da:84:39:6b:54:2e:2b:ab:cb:4b:d6:bf:
         b8:fb:66:c9:7a:2b:dd:74:7d:74:61:ed:d7:2f:cd:b8:9a:f7:
         3f:ab:c7:da:37:a6:4b:55:f5:cd:62:f8:dd:cd:29:87:f3:4d:
         04:38:fa:d7:da:0d:1e:63:76:c7:a7:24:59:b0:9f:10:ce:d1:
         fb:30:1b:31:dd:d3:70:5a:fa:ab:5c:90:b3:4d:f0:03:37:da:
         4a:7a:36:77:4c:d0:a1:81:06:bb:40:47:a7:85:55:07:30:bc:
         62:ac:5c:5a:63:eb:aa:53:0e:5c:55:63:16:3a:03:03:3d:6f:
         f8:30:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:06 2025 by rpki-client