Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa
File:                     4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa (raw, json)
Hash identifier:          hF86i77R/sNPGaHgBZ7UyC/jLCg3wlXfDnNysnjYEBk=
Subject key identifier:   2A:00:4E:9B:EE:A3:17:D0:E5:CA:DE:56:D8:7C:94:18:78:83:A1:E3
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584BBFA5939A91C08F79D91DE580
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     142617
IP address blocks:        104.171.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:93:9a:91:c0:8f:79:d9:1d:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=0b1e8277-bcfc-4fb3-9c5b-6cc6931cff17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:23:a6:27:e1:0a:a2:1e:c0:18:47:98:fc:
                    ac:7c:6b:2c:c3:7f:c3:e6:24:ac:8b:09:82:15:07:
                    61:e8:fa:f7:0d:9e:52:3c:34:36:a7:47:fd:72:a6:
                    bc:da:9b:0d:8a:ee:94:4a:8a:a7:f4:42:9c:a5:79:
                    9d:12:da:c2:7b:02:b1:d7:23:b4:60:41:59:d4:b9:
                    c7:52:ef:e7:a8:02:e5:31:38:30:d8:55:33:08:33:
                    26:c7:fd:9e:d9:33:96:0d:bb:e0:ad:d0:45:f6:26:
                    04:e0:4f:6a:f6:c6:b1:69:98:a7:46:7f:10:ba:99:
                    30:08:7d:c9:a0:d8:58:8a:29:1d:cc:09:42:67:72:
                    45:1c:d3:72:cf:6b:31:9b:79:cc:79:11:42:4a:86:
                    76:ec:7e:50:ee:1f:a2:21:4c:95:94:7b:2a:ff:d2:
                    88:ee:de:33:45:58:b2:72:9f:87:ca:2c:80:44:ab:
                    1d:8b:65:f0:af:9f:48:02:85:2f:3f:2f:df:b3:fe:
                    9b:36:76:eb:f5:c7:c9:52:c6:72:89:59:09:e6:cc:
                    d8:5f:c4:6b:2b:d2:ee:d6:2a:af:6a:e8:de:23:52:
                    3a:ac:81:7e:0f:1e:a1:13:50:a9:12:11:f9:85:bf:
                    d4:b8:e2:64:80:54:f9:dd:0d:03:68:19:40:b5:28:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:00:4E:9B:EE:A3:17:D0:E5:CA:DE:56:D8:7C:94:18:78:83:A1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:56:b7:ec:9f:bb:ca:08:cd:a4:a7:2a:85:f3:9c:47:94:e7:
         a2:0b:3f:22:a5:c8:65:ab:0f:f1:5a:12:c5:dc:ac:cb:52:f6:
         83:9a:d1:97:a2:ac:c0:1c:45:eb:81:13:5b:b9:75:f0:a9:f6:
         42:b6:2f:10:f4:8c:ed:c1:7d:b2:06:4a:2f:a7:ee:f8:7e:34:
         5f:7f:94:7b:11:e0:fa:fb:c5:d4:cd:29:28:54:56:c0:63:51:
         d3:1a:75:bd:5e:01:60:32:94:d3:6a:69:50:05:b3:37:9f:b0:
         b5:37:79:ac:e3:22:b9:cb:b2:7f:ab:bc:23:70:1a:bd:00:f6:
         ad:81:fe:18:fd:a8:e8:0d:01:33:a9:4e:88:78:c2:38:da:01:
         b4:ef:e4:94:43:79:0e:01:14:a9:cd:46:f5:e7:84:b8:e9:09:
         02:f3:79:cf:1f:ad:31:5a:25:a0:dc:bb:d2:d1:56:4b:5f:49:
         0c:ad:00:32:1f:9d:b6:b9:b0:d6:7d:f0:f1:b9:6e:e6:51:d4:
         f9:cd:5d:7e:d7:26:90:70:32:9d:e9:24:e9:9a:0c:ed:61:29:
         b7:41:85:9e:1c:61:49:bd:40:b0:39:74:0e:3c:b8:5c:55:b2:
         8d:50:09:b7:f9:56:c3:c1:7b:37:9d:9a:27:e9:d3:0a:c1:8c:
         0a:5a:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:05:53 2025 by rpki-client