Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
File:                     dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa (raw, json)
Hash identifier:          5d41e+KONQQKHxEQtEtu4lplxNFVEoUgKaIfNlWujq0=
Subject key identifier:   AF:E0:BC:57:25:89:BF:46:28:60:A9:C8:91:40:26:F7:E8:58:CD:35
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584BB2F7CFCE87788B3127E943C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     23470
IP address blocks:        104.156.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:cf:ce:87:78:8b:31:27:e9:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e3ae4ba1-4766-494c-adc2-edb8df19a907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:67:35:83:a9:2c:ad:6a:8d:6e:88:66:8e:
                    24:28:c5:f2:14:7e:70:3b:e5:52:6a:1f:c8:6e:f5:
                    3b:c5:29:6c:13:92:f8:24:9a:fa:33:e0:79:92:d2:
                    e3:dc:ba:a5:bb:7a:d1:d0:37:78:ca:d4:22:ed:d1:
                    51:8e:81:e6:3c:c0:8e:4e:98:63:f5:65:10:5a:da:
                    db:05:94:12:c9:bd:47:a1:17:01:97:de:ad:e2:96:
                    27:0e:ce:f6:17:b8:b8:86:98:06:17:ab:4b:22:4d:
                    24:82:88:e3:5c:8a:91:52:b3:38:77:b3:67:12:b5:
                    52:0f:f0:d5:ce:04:bf:79:4c:54:ec:f2:33:06:a0:
                    48:76:14:cc:17:ec:ee:06:24:cb:0e:8e:04:02:29:
                    3a:f3:71:17:c9:d4:c3:98:f2:d0:24:7e:e7:98:d8:
                    9c:00:64:a7:5d:c2:f5:6f:b2:62:d5:c0:d8:f3:38:
                    29:b4:7f:8c:0c:14:98:b1:f8:6c:22:62:d7:3f:ec:
                    18:f2:81:59:72:22:1b:53:f8:b5:a5:29:07:c9:14:
                    1f:c6:55:2d:12:e8:7b:fd:b5:e9:5f:3f:47:ea:59:
                    80:19:00:92:a3:cb:b4:7b:1c:aa:dc:33:d1:d4:55:
                    b0:fc:5a:90:fd:13:d6:ce:70:a6:cf:5c:fb:d2:5c:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:BC:57:25:89:BF:46:28:60:A9:C8:91:40:26:F7:E8:58:CD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:53:0c:68:97:e3:5a:25:93:2e:77:e2:46:84:70:66:81:
         33:58:eb:00:c3:b6:10:88:9f:db:a8:a1:c7:14:c6:34:20:ed:
         6e:49:b1:13:10:61:44:76:89:c6:5f:6e:f7:71:ed:68:b2:c3:
         28:c0:c7:63:5d:16:2d:62:08:b5:7f:a8:83:30:b8:d8:cf:f5:
         c2:a9:23:62:c6:a4:33:a1:b0:17:85:be:6c:8b:3f:6d:ba:1e:
         e1:99:cd:83:ed:c0:12:2e:9e:42:73:c4:c4:a5:d0:2f:a2:23:
         f6:96:ce:93:4c:b7:df:4f:9e:08:12:ad:c7:be:31:3d:2a:cf:
         ac:5d:37:74:8c:a1:e5:44:d9:19:9b:38:e6:18:8d:b8:c5:e9:
         d7:f2:a7:ae:28:0b:b2:37:4f:21:fd:30:29:1a:c0:ba:69:79:
         d3:25:cf:6e:5b:a7:6d:44:f0:9b:d3:2e:a3:79:2e:d1:3d:10:
         a9:6d:dc:6e:51:5e:3f:12:f5:59:6e:57:bd:39:43:f2:cb:0c:
         3a:b0:7c:95:bb:97:16:81:70:13:03:5b:eb:24:89:37:be:11:
         3b:ad:d4:ed:cc:70:78:9e:10:ed:94:65:42:44:6f:e1:63:3e:
         32:52:05:6e:80:4b:4b:c8:39:b6:7c:2f:8c:72:27:29:00:d7:
         cb:50:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:44 2025 by rpki-client