Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/7378fc69-c276-3196-a961-c6229ae57f88.roa
File:                     7378fc69-c276-3196-a961-c6229ae57f88.roa (raw, json)
Hash identifier:          syGrUGkKozOd1ymhE/hLte7FQC29kVsMOCIQ2yPYmrM=
Subject key identifier:   F3:D8:18:13:A2:DB:2F:CB:BC:D9:25:39:01:49:22:9E:59:38:B7:FD
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584AB0BB7C62A36D19075F4CD800
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/7378fc69-c276-3196-a961-c6229ae57f88.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     26411
IP address blocks:        104.224.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7c:62:a3:6d:19:07:5f:4c:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=08cd70e6-bfb7-43b2-b55b-57fc2acecbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:57:e2:d1:34:90:53:28:ef:34:cb:d7:14:
                    f5:c8:3e:ce:71:89:b3:e5:52:f9:9f:f8:66:e4:40:
                    50:43:20:78:f6:72:66:ac:9b:06:fd:86:5b:89:84:
                    10:ab:d0:8e:3f:42:91:8f:39:e9:a9:23:d0:17:20:
                    9c:47:c5:be:f5:40:c0:70:e1:d2:66:af:a6:99:1d:
                    ce:34:ee:e1:49:56:4a:98:98:e4:33:35:2b:5d:9b:
                    d1:bb:30:2a:a3:1e:af:eb:35:2a:1c:5b:93:7e:74:
                    5e:93:ec:b7:ba:30:c0:bd:5b:28:12:61:fa:56:2d:
                    57:ba:54:df:a3:f9:02:a0:2f:50:d1:b6:e9:49:fb:
                    4e:84:68:8b:b5:72:b5:4b:e9:81:9b:f4:25:e2:a8:
                    26:37:43:e8:1c:02:47:f1:e2:46:4d:20:ce:c1:4a:
                    a1:f2:b9:91:3f:a5:a2:ce:5e:70:56:13:1c:62:9b:
                    f6:eb:98:67:37:1a:5a:fd:45:33:a6:35:b1:f2:a2:
                    73:16:c6:69:d4:95:44:09:9f:31:0b:df:7f:90:bc:
                    8f:8d:6d:6d:96:c4:f0:64:21:fc:32:4b:d3:80:ef:
                    01:be:c7:6a:8b:58:61:39:e4:33:e8:9b:31:e7:13:
                    e1:3e:ad:95:db:79:70:8b:7e:a6:02:ad:f1:9d:45:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:18:13:A2:DB:2F:CB:BC:D9:25:39:01:49:22:9E:59:38:B7:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/7378fc69-c276-3196-a961-c6229ae57f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:ab:53:0e:38:ce:1e:cf:59:4c:6e:20:69:7e:d3:18:4e:
         d6:6f:84:ff:1a:92:1a:db:f5:a0:2f:3b:b4:6c:ed:62:9e:4b:
         5b:62:30:d9:2b:3b:09:c4:6e:a5:97:b0:21:00:c7:64:6b:20:
         7f:d0:a4:1f:bb:7c:84:d8:e9:fe:50:4c:3c:c8:61:1d:47:0b:
         c8:a5:87:88:0e:1f:0f:9d:51:03:d0:9b:18:40:aa:33:82:30:
         db:22:e6:33:7f:b9:76:8b:cb:d7:8d:01:80:f1:d6:b2:c5:14:
         0d:fb:35:cd:ca:cc:95:4b:e6:86:fe:a0:9e:cf:b4:11:c1:ca:
         38:4e:f1:2d:0a:8c:0d:44:e9:f5:ca:3f:b6:06:f2:de:14:2e:
         fd:7f:cd:64:24:54:1b:e7:69:e8:33:63:98:5d:de:2b:23:92:
         d9:60:b4:04:58:78:5b:00:6a:45:ca:9c:ad:6a:a1:d8:76:e8:
         2c:eb:d4:c4:fa:a6:bf:53:38:5e:b7:d4:16:6c:3a:47:3f:04:
         fc:f0:5b:2d:4f:f3:45:b4:55:bb:38:7c:f7:3b:52:93:09:41:
         11:44:f8:12:e5:06:67:2d:95:96:55:de:23:16:f3:2f:ea:c1:
         f1:61:d5:9c:d2:f5:3c:e6:3e:2c:73:5f:73:e6:bf:c5:a5:b7:
         5e:f8:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:29 2025 by rpki-client