Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa
File:                     5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa (raw, json)
Hash identifier:          EWH+rBNyne6gUPDyyZ0WRku9V4y/ZK0Yf7jtPNBMLCY=
Subject key identifier:   C3:B2:78:CA:04:F0:24:06:46:9E:40:F3:A4:7D:DA:40:77:0F:82:11
Certificate issuer:       /CN=9b8beb75-f017-4d49-9a75-fbabc6a102e6
Certificate serial:       010D0C9F4328584B80B783A23CA5A95962DA7EB0
Authority key identifier: 3B:B9:62:38:67:E2:E7:BF:77:89:E5:C2:69:02:CC:7E:3B:4E:37:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     55066
IP address blocks:        104.194.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:83:a2:3c:a5:a9:59:62:da:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8beb75-f017-4d49-9a75-fbabc6a102e6
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=0043e0a3-b223-47c3-9908-a57879c70ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:ff:99:0e:ea:9f:59:ce:fd:90:fa:6f:63:
                    9a:f1:41:d1:60:63:3b:e7:73:88:b7:23:18:79:de:
                    30:78:34:85:eb:bc:44:83:d9:53:01:5f:b8:48:71:
                    1c:41:60:15:f7:b4:d3:93:95:90:39:1e:61:92:ec:
                    05:6b:c1:8c:1e:82:0a:90:27:91:b3:bc:45:2d:9c:
                    c1:0d:86:44:49:13:41:8c:22:77:23:fd:27:e2:39:
                    8b:e2:84:cc:dc:0a:31:18:8c:59:83:70:51:47:62:
                    3c:79:6e:4e:4f:86:98:5e:50:6f:50:b7:ea:97:9e:
                    d9:a1:d0:bc:f1:bd:64:bd:1d:14:1d:26:3d:db:0b:
                    95:a3:6c:ff:74:3b:df:00:ee:02:d1:da:c6:88:5c:
                    98:ee:d0:f8:0b:ce:0c:f5:0c:4b:fe:f1:56:86:fd:
                    5e:93:ac:39:77:25:f9:21:ba:04:d5:4f:65:c3:f1:
                    a8:51:28:25:fd:96:b7:a9:62:40:b6:04:7c:26:db:
                    41:8b:9a:fc:72:6b:ab:0e:e8:1a:bb:e5:f1:9a:82:
                    e5:1a:4c:6b:eb:46:24:6c:e3:fd:59:54:63:b6:1f:
                    fc:1f:cf:fb:5e:e5:97:ad:7b:37:6d:77:fd:fc:c0:
                    f0:15:36:44:13:27:bb:2b:ed:89:3d:e1:9e:45:74:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B2:78:CA:04:F0:24:06:46:9E:40:F3:A4:7D:DA:40:77:0F:82:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.crl

            X509v3 Authority Key Identifier:
                keyid:3B:B9:62:38:67:E2:E7:BF:77:89:E5:C2:69:02:CC:7E:3B:4E:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:73:35:d2:0c:7d:aa:66:57:f3:97:80:4a:46:27:b2:dc:9a:
         c2:a2:d7:39:9c:f8:05:c7:17:d1:55:b9:1a:5a:ba:f9:91:c1:
         3c:1b:4a:47:87:24:5f:bc:64:59:66:df:fd:cf:90:e4:57:82:
         86:54:f4:05:ed:66:cc:3a:4c:97:bf:74:55:46:0d:2e:61:ba:
         bb:67:34:39:eb:00:de:55:c4:0b:5c:d0:df:02:4f:c9:97:25:
         ff:ed:ba:b5:98:36:be:82:73:6f:dd:7b:4e:eb:b8:57:e1:be:
         83:c3:8a:43:a4:6e:b9:29:81:06:bf:78:7c:0d:a4:72:cd:0c:
         60:13:59:37:5a:82:1d:80:a3:27:c7:a3:22:84:d0:9f:0d:1e:
         61:ae:1a:ea:da:80:c7:ec:c9:61:0d:d6:a7:5a:52:b7:f3:6a:
         df:8b:3a:3a:ff:74:6f:e4:52:5e:aa:7f:be:d3:8a:41:62:97:
         1f:70:53:f2:25:e4:d5:7a:d5:95:71:3b:aa:0d:48:e7:5f:83:
         4f:aa:3b:25:40:f5:61:cc:e7:e8:4b:c4:de:ed:a3:38:88:b0:
         e9:7d:c8:b1:61:a5:ea:c2:ba:b7:83:4f:00:98:21:72:e9:61:
         48:e9:21:ad:cd:de:1e:75:b6:3e:27:e1:8d:73:cb:fd:59:c6:
         f2:af:60:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:03 2025 by rpki-client