Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
File:                     34164e83-730c-3084-85e5-2ac39df4113c.roa (raw, json)
Hash identifier:          Bv6rTBHDoohTEnY8XwHxn8RcKvTtfaP+45vkU8iJolE=
Subject key identifier:   92:33:6F:2D:FD:A6:BA:B4:00:F5:25:B7:C9:D0:5A:F2:3F:DC:72:9F
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584A88409EC04DFB39304049C740
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     0
IP address blocks:        104.192.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9e:c0:4d:fb:39:30:40:49:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=f55585cc-0984-4616-ad89-f5ca2adb9cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:8a:d7:75:ae:54:01:34:ae:d0:52:df:25:
                    55:e8:94:22:f2:c2:e4:d0:d6:8b:fe:b9:68:51:8d:
                    2f:43:e1:3b:8f:27:c6:93:c6:94:2b:bc:e9:e2:2b:
                    fe:40:e2:3e:ef:80:8e:41:e5:b1:b3:ca:20:12:9c:
                    3f:27:05:a8:05:35:45:f0:66:25:85:11:3d:5b:ec:
                    55:a0:94:a1:11:78:ff:ad:a5:1c:f2:b2:14:a0:79:
                    a0:9e:ed:4e:e8:52:8f:77:97:25:be:e1:01:b0:b2:
                    57:4d:04:4d:7d:a1:dc:4d:4f:ad:e3:eb:25:92:18:
                    e2:88:e3:39:77:48:e9:68:34:0f:aa:ff:d5:46:2e:
                    61:e7:cc:bb:11:df:c0:72:6e:f1:e8:a2:8d:2f:8a:
                    57:28:41:ff:da:5a:5e:50:b8:ed:a6:36:71:d9:60:
                    3c:4c:c5:40:58:9c:1f:5f:ac:de:50:2b:31:0a:fc:
                    3a:84:74:60:ee:67:0d:42:ea:30:f4:86:a2:0a:5e:
                    99:73:42:fd:7e:2f:6b:9b:f8:51:ab:5c:b9:7e:ef:
                    19:58:d6:25:55:39:1b:e2:14:2f:e1:4e:7e:1f:28:
                    85:b6:95:f0:d6:4f:1f:44:4a:9e:1f:af:24:1d:71:
                    41:09:f5:c4:bc:05:e1:c9:08:39:f4:8e:5d:0a:16:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:6F:2D:FD:A6:BA:B4:00:F5:25:B7:C9:D0:5A:F2:3F:DC:72:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:f4:7f:93:15:78:5a:6a:5f:f2:41:c2:03:d2:f7:9c:61:
         10:fb:91:11:3a:f6:2d:b7:6d:66:80:80:67:2c:31:b9:3d:13:
         65:02:b3:06:01:6d:e8:b7:95:11:78:f5:b5:93:fb:2d:77:ca:
         57:d6:84:bf:59:93:ec:f0:da:ee:30:99:00:47:36:59:be:ea:
         f8:b6:62:42:ca:35:42:08:c4:6b:fe:6a:42:76:30:fc:de:c5:
         b3:5e:93:36:1f:55:a7:c7:ca:75:09:32:2b:f8:1f:e5:9d:8e:
         a6:25:73:9c:e4:ba:d0:4d:df:ad:51:ff:7c:4a:e7:ee:eb:34:
         cf:a4:1f:12:a6:e3:4a:0a:a5:34:e3:82:95:b8:09:e1:61:4d:
         c9:3c:bc:69:cf:ec:82:37:6a:46:a4:54:18:62:4c:2d:8e:47:
         38:42:a5:80:a8:04:45:db:59:bd:98:99:39:a8:e7:8f:82:40:
         35:a4:6c:fe:91:ae:15:de:62:26:46:1a:00:6d:b3:4f:6a:67:
         a3:43:9e:50:e6:23:59:f9:bc:39:2f:cb:d6:98:c9:7c:9c:4e:
         6f:c5:37:93:c3:02:ea:0d:6c:68:ab:b7:8d:a5:cc:a1:2c:cd:
         5b:39:67:a0:d6:2d:55:42:7d:74:a5:68:19:31:72:fb:34:2a:
         f8:03:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:09 2025 by rpki-client