Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/5051351e-2e52-3d41-a589-919b3151337c.roa
File:                     5051351e-2e52-3d41-a589-919b3151337c.roa (raw, json)
Hash identifier:          szxbCw1vPsfwsKDJpUb1aZ8GJwUnC1gQigOvnG4Bbjw=
Subject key identifier:   26:51:BC:01:05:A9:09:E6:F0:88:81:67:2C:BD:A0:A2:FB:54:1F:36
Certificate issuer:       /CN=1d255e93-b2f2-458d-ad07-ca05486ed239
Certificate serial:       010D0C9F4328584B80B75FF3D866413F7B601CC0
Authority key identifier: 41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/5051351e-2e52-3d41-a589-919b3151337c.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     63196
IP address blocks:        104.193.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5f:f3:d8:66:41:3f:7b:60:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d255e93-b2f2-458d-ad07-ca05486ed239
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=2dc14143-144f-4530-b724-4101e6848d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:59:d7:d8:41:77:14:f6:ea:f4:50:08:c3:
                    6a:ab:af:b2:35:ab:fd:90:52:bf:2f:b5:d1:58:8f:
                    d9:57:d2:d9:40:ae:d0:71:60:79:2e:98:50:08:98:
                    e8:f1:15:79:f8:0b:77:65:89:cf:d5:f4:6a:b8:af:
                    28:99:43:bb:55:5d:1c:a8:01:c7:48:d4:37:2f:68:
                    a2:28:45:3a:db:c8:4e:0b:1e:b6:64:20:be:1f:e4:
                    d4:33:32:7f:94:90:d4:0a:f4:94:8d:bb:10:85:e3:
                    80:57:99:88:5c:fc:82:50:b6:9c:c8:68:28:18:29:
                    9c:30:0c:d8:01:a5:26:41:62:57:79:28:79:59:e3:
                    43:42:ea:45:a2:32:92:4f:46:c0:80:56:b6:2c:a8:
                    6f:23:22:02:f7:9c:ea:a9:bb:96:54:1e:5e:0c:b7:
                    d5:56:4b:c1:43:75:9c:d5:ed:cb:3b:f1:40:a2:f9:
                    a9:89:ae:dd:84:cc:bb:da:be:13:63:19:64:f0:b1:
                    3a:18:fe:40:85:a4:dc:7a:31:cd:50:e6:f4:b6:23:
                    9c:08:d5:18:8a:cb:15:fe:05:a3:34:b1:6a:38:6f:
                    25:db:9e:75:cb:10:b3:1c:5f:d6:9e:f9:d0:0f:0e:
                    3f:ce:7d:21:b8:de:eb:58:1b:fd:a5:f2:25:7b:a5:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:51:BC:01:05:A9:09:E6:F0:88:81:67:2C:BD:A0:A2:FB:54:1F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/5051351e-2e52-3d41-a589-919b3151337c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl

            X509v3 Authority Key Identifier:
                keyid:41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:22:14:d7:4c:67:ab:df:8b:36:dc:de:39:23:55:4b:b0:8a:
         19:5e:4c:75:67:eb:3b:cd:28:48:d5:f5:bb:00:e3:ea:d4:44:
         1a:77:79:95:87:d1:2e:f5:b9:96:dd:17:2c:03:51:a6:7c:12:
         5b:57:d3:b5:b3:af:58:09:a2:de:33:68:c1:5d:c3:09:0b:f3:
         3c:a0:76:2e:58:07:b4:b7:f4:55:a7:d9:c5:75:72:8e:10:8f:
         e6:fb:37:f3:de:22:49:d5:ba:23:3e:e1:60:ae:e0:86:d2:15:
         89:18:bb:34:00:19:2f:5f:16:85:40:2c:4a:56:30:80:9f:bc:
         c4:7a:b6:9c:45:7b:78:40:1f:24:e1:82:eb:74:9c:74:62:6d:
         26:bb:36:45:5c:97:da:e3:bf:f2:19:24:d5:b7:06:57:ba:d0:
         ac:9d:d3:04:a2:ba:a7:ec:f4:74:87:7a:1e:be:f0:8c:e6:68:
         ea:78:c5:54:fc:6c:66:77:43:de:eb:31:80:9d:2f:f3:78:23:
         83:25:97:4a:cf:ec:cc:91:5d:a2:f4:da:32:ed:21:dd:b9:76:
         d5:cf:44:33:e7:a8:b0:42:44:f4:b2:02:4d:60:89:77:f6:d2:
         66:4a:b4:4f:e2:62:08:55:27:db:16:7f:05:ad:f8:9b:61:88:
         fc:8b:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:38:18 2025 by rpki-client