Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa
File:                     10f6258f-0624-366b-b770-20e51ad3c4d0.roa (raw, json)
Hash identifier:          RlA0ZoZgCwLmQcmnm4QrstLfPLkC0W9CaSA252xiz+s=
Subject key identifier:   39:3B:A2:D5:DE:D1:C3:05:EE:69:47:DC:EC:CB:31:D7:D6:EF:7B:E4
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584BB88D07E3346BD4095E21DC00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     53730
IP address blocks:        104.238.248.0/24 maxlen: 24
                          104.238.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:07:e3:34:6b:d4:09:5e:21:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=ab116ad9-736e-4ca3-963b-c27ede6c2320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:89:9a:68:f2:63:1a:8c:c2:ac:8b:06:73:
                    82:41:00:ed:fa:04:a9:38:bc:c0:b1:da:9b:f0:b3:
                    c7:86:58:84:bc:b1:d9:99:64:62:40:1d:a6:a8:7a:
                    58:1a:81:6a:20:10:98:8c:12:6b:18:4c:2a:41:db:
                    6b:fb:7f:d4:e4:23:de:d3:45:07:70:f8:03:6c:d5:
                    ed:59:56:34:b7:64:26:2d:68:98:77:05:a9:04:8d:
                    a5:ab:a0:8e:46:ad:cf:f1:23:c2:d8:2a:c8:76:1f:
                    6b:47:48:99:b5:2b:c8:ad:d3:fc:88:fa:d5:da:73:
                    11:5c:f9:77:23:b4:2e:da:ad:4e:f4:2e:0f:a7:6d:
                    f8:69:98:17:95:1c:c9:0b:c6:85:8c:f1:5f:8c:4c:
                    ad:bf:60:21:a3:fc:5d:c6:ed:ac:fa:d2:93:da:7d:
                    5d:e7:09:dd:7c:85:1d:f6:91:7f:b5:52:0b:8e:15:
                    d8:e4:2a:16:88:4f:1d:2b:40:ae:35:73:1c:9f:b9:
                    77:7e:58:f6:c8:ef:12:7e:4a:7e:50:4e:fa:96:6f:
                    d6:bd:df:b7:03:08:54:1e:97:47:59:13:82:d8:2b:
                    6f:de:da:e6:03:c5:6f:be:6e:12:4d:86:16:bb:89:
                    e4:9a:ef:76:ab:04:36:34:e1:4d:ea:80:54:0d:5e:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3B:A2:D5:DE:D1:C3:05:EE:69:47:DC:EC:CB:31:D7:D6:EF:7B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:4c:3f:09:21:03:72:6a:0e:2c:14:c7:ad:a2:95:64:8c:99:
         16:46:61:5e:1b:ad:42:03:b7:79:93:84:a1:2b:f7:bc:dd:5d:
         46:a7:1d:0b:bf:6b:0f:1e:e0:d3:76:9b:0e:f3:bb:ff:37:e9:
         f3:95:b8:33:6f:65:d5:5f:22:c7:bd:0d:3a:12:c2:45:72:03:
         f2:14:53:19:85:23:e1:18:a3:8c:97:82:0f:72:e9:5d:31:0e:
         a8:5c:37:53:06:6f:d6:1c:60:b4:33:a2:a6:66:6e:85:61:b4:
         db:05:a5:80:3f:b3:59:ff:62:62:9c:ed:33:57:c1:40:43:65:
         77:93:92:75:5d:14:79:ab:8c:a7:b4:88:6b:78:fd:b5:db:35:
         86:33:17:ef:e1:1e:0a:93:ea:ab:20:35:10:50:49:4e:62:43:
         87:d0:05:b2:b4:4d:22:b2:26:e7:e5:bc:e5:ca:77:dd:58:05:
         63:f5:61:52:38:68:fe:e4:48:85:62:e7:ba:2b:f4:30:8b:cf:
         03:b8:91:34:d0:96:af:08:be:04:61:af:bc:6c:27:c3:6c:f2:
         7c:4d:b5:4c:de:83:de:0a:35:df:d7:cf:25:38:13:b6:50:f4:
         6a:c7:3a:2f:62:72:d6:fd:e9:0c:fe:75:fa:96:d8:4d:5f:70:
         d6:10:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:15:36 2025 by rpki-client