Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/54133765-bf83-359d-956d-d7ed9f9e1826.roa
File:                     54133765-bf83-359d-956d-d7ed9f9e1826.roa (raw, json)
Hash identifier:          E24X8h1gWdDeOSxKqysxDka1Z/C0tGHhPOUJfMuPWyY=
Subject key identifier:   03:C5:16:B1:BF:23:4A:AE:D1:D7:9B:CA:12:61:C0:97:7F:9A:E7:CF
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F4328584B92DCE94224CFB32512D81180
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/54133765-bf83-359d-956d-d7ed9f9e1826.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     393891
IP address blocks:        104.232.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e9:42:24:cf:b3:25:12:d8:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0fd87744-dd14-4a5f-a3c5-34b6df8cee73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:95:4e:9c:cb:01:2c:b5:a3:ad:00:24:53:0d:
                    ec:80:3d:df:78:34:b5:1a:7d:96:2b:25:72:5b:d5:
                    cd:c5:03:0a:d8:68:e8:1a:cd:e2:9d:6e:47:b2:d2:
                    72:8a:fb:82:2e:63:9d:ac:ac:22:b2:a0:b5:46:88:
                    6f:7e:dd:3e:fd:66:bc:20:0a:58:e9:b3:c3:73:74:
                    ce:4f:d9:d2:fc:91:e1:ba:24:c9:b7:21:8a:8e:92:
                    e1:df:e2:61:f5:a3:47:cc:ef:fb:de:45:e9:46:ba:
                    6a:55:44:15:6d:cc:30:6c:da:0d:f6:0a:1c:d4:2c:
                    d2:88:bd:62:5c:9b:35:4a:1e:36:d7:d1:a3:37:f2:
                    22:47:75:6a:bb:d0:a7:49:69:30:a7:3a:c1:e4:08:
                    25:71:d5:5d:71:04:35:0f:49:08:30:da:ef:b2:32:
                    78:7c:02:e2:e0:94:7f:19:21:ff:30:36:f2:1d:ea:
                    ac:ac:3b:b0:cc:3d:d4:ee:64:c9:7d:a1:ea:10:09:
                    5b:de:d1:a6:dd:98:7b:f7:60:7f:f3:46:a8:9b:f1:
                    29:8e:7f:d7:e6:cf:2d:a2:c1:57:51:e3:8e:6b:94:
                    95:b0:8f:d7:13:df:7c:0a:a7:41:49:23:3a:02:74:
                    86:84:b7:a3:c8:b8:34:c3:fc:e0:e3:9f:a7:78:7b:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:16:B1:BF:23:4A:AE:D1:D7:9B:CA:12:61:C0:97:7F:9A:E7:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/54133765-bf83-359d-956d-d7ed9f9e1826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:79:d4:fd:cb:37:14:09:70:b5:70:7c:d4:24:1e:b5:1d:
         29:08:28:c5:c7:7c:4f:88:94:68:44:c3:ff:78:fa:90:d2:9f:
         31:29:57:cb:26:ba:59:7b:6f:1b:41:eb:cc:86:b6:be:66:c6:
         26:17:a2:00:64:fc:0a:26:9f:53:d9:d1:51:e4:49:10:43:14:
         0a:03:34:a8:c8:d5:a7:b2:c8:93:a4:2b:91:ae:5c:ad:e4:89:
         a0:05:30:17:61:fe:72:2e:6e:0b:5e:34:30:19:67:c3:4c:da:
         cd:bf:0a:ac:7d:87:de:d5:4e:27:05:ce:8f:ab:f9:3b:ec:c7:
         fb:a7:04:ca:07:44:7f:2d:14:7c:3b:20:da:1a:a7:cb:97:2e:
         c3:89:55:56:cb:fa:f0:8b:88:7f:a5:89:36:67:09:26:1e:b8:
         2e:95:6e:76:a0:2b:ff:e2:f1:96:0b:0e:a6:c0:48:79:e0:da:
         2f:4a:e2:25:a8:47:aa:41:62:a9:5f:cb:7e:ef:d8:e3:86:71:
         b3:af:35:25:e1:ec:9f:fa:c9:cc:94:b4:a7:92:1d:1f:79:90:
         ab:d7:07:16:85:5d:4f:93:e7:12:20:7c:65:2c:db:80:8a:16:
         c4:01:72:64:f3:db:1f:96:d8:26:c6:c5:c3:d3:59:7a:1d:da:
         33:e7:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:55 2025 by rpki-client