Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa
File:                     2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa (raw, json)
Hash identifier:          1hWq/Cq1rgaR8kMF0Ojv7Cox6qBobYpZv0nSckZB9N4=
Subject key identifier:   03:FF:75:20:96:9F:89:C3:5D:E0:2B:20:7E:BD:93:A3:71:05:9A:0A
Certificate issuer:       /CN=1d255e93-b2f2-458d-ad07-ca05486ed239
Certificate serial:       010D0C9F4328584B8BE22134F55376AA7CE80400
Authority key identifier: 41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        104.193.204.0/24 maxlen: 24
                          104.193.205.0/24 maxlen: 24
                          104.193.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:21:34:f5:53:76:aa:7c:e8:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d255e93-b2f2-458d-ad07-ca05486ed239
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=614751e7-41db-4667-98b4-ab2691acf0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:6f:37:5b:bd:ff:4a:3b:c6:cf:c5:ba:26:
                    37:e0:bb:2b:8a:af:68:e6:41:25:c7:ec:06:31:7d:
                    54:9f:be:1c:e2:54:4a:98:5e:84:13:1a:8a:ab:79:
                    f1:ab:85:9f:92:a4:51:55:dc:20:9c:05:f8:09:4d:
                    92:c3:73:57:c2:e6:ad:23:60:f9:73:1f:6a:a7:df:
                    4a:a2:7f:45:d6:ff:a4:b1:bd:06:27:d8:71:5b:5d:
                    3a:98:c0:d0:e7:46:7c:fc:a9:11:e8:0b:4e:4b:9a:
                    84:62:43:5a:aa:18:a6:3a:a4:e8:bb:14:7e:a3:b6:
                    4d:9d:49:3b:d1:af:89:cd:a1:3a:5b:82:69:4d:bd:
                    dd:d8:cc:24:82:af:25:fe:8f:ed:2f:f3:65:8d:63:
                    a0:7d:86:82:37:7c:0c:f0:75:0c:95:c0:17:63:1b:
                    8f:be:69:e9:06:98:70:56:24:03:a1:40:4f:d7:dc:
                    ce:db:e8:5b:63:d2:b8:de:c4:a4:7e:bf:79:ae:c2:
                    ac:d2:ad:18:a9:98:73:33:ca:8e:f8:a8:f9:07:10:
                    aa:98:99:7c:47:08:18:10:0d:ca:fe:f4:7c:e1:18:
                    58:5b:2c:05:76:88:a8:c8:82:e1:99:eb:af:84:85:
                    1f:6a:31:fc:f8:27:8f:7d:ba:2c:68:6e:db:36:10:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:75:20:96:9F:89:C3:5D:E0:2B:20:7E:BD:93:A3:71:05:9A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl

            X509v3 Authority Key Identifier:
                keyid:41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.204.0/23
                  104.193.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:fa:ca:6d:ca:a6:23:2d:0b:15:14:5a:0b:dc:88:4b:34:
         3b:22:ea:2e:e7:8f:92:0d:b5:12:9a:ab:82:39:57:a1:bf:d2:
         07:e9:4c:63:e8:07:41:cd:ad:b3:54:9c:b0:b0:23:37:63:09:
         67:f4:b4:fa:0e:60:c7:98:eb:af:73:fc:6a:6b:fd:fc:dc:17:
         55:ca:1f:e0:76:ad:75:ea:b7:d8:9d:58:05:e1:03:fe:de:98:
         b7:f1:79:9a:30:ff:e7:cd:f3:52:88:94:5c:f7:42:37:c7:73:
         e7:e4:6c:73:b0:22:c8:58:37:8f:d3:77:c1:3a:03:9a:4f:b7:
         db:7b:26:e6:32:f3:66:0f:c1:fa:e2:ca:fe:76:e7:7d:86:ad:
         fc:c0:0c:5b:c2:bc:7e:9c:f4:4e:8d:a1:e0:ea:e8:1d:84:25:
         79:fe:15:83:04:1a:e8:4b:e0:6d:95:50:b6:7a:78:12:76:80:
         92:48:18:da:e2:94:c7:5b:8f:e4:1e:bb:fc:31:3f:d3:05:e0:
         34:67:60:d2:95:8d:69:15:ce:4f:48:fa:c4:85:c9:15:31:19:
         3c:3f:de:7a:cb:4d:58:33:12:de:00:f6:01:05:bb:c1:b0:b1:
         d3:95:2a:4f:57:99:e4:28:b2:7a:5b:05:ea:84:92:f2:99:56:
         91:0d:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:38:10 2025 by rpki-client