Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa
File:                     5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa (raw, json)
Hash identifier:          iEre91MrPb9kzmwJBMvffNeSL6QgYYFT24b6+mjrI3c=
Subject key identifier:   C5:E0:68:1C:DC:AE:92:8B:4E:8A:84:2E:8F:F3:07:A9:E9:90:FB:69
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B52A7728179D4206D6AC15000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     13335
IP address blocks:        104.29.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:72:81:79:d4:20:6d:6a:c1:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=0c41d56c-3dd0-41ea-827f-b3433be822f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:51:23:ac:41:22:03:12:b5:dc:c1:9e:35:
                    a5:34:53:8a:0a:e2:ad:0d:e0:cb:38:85:0f:71:a5:
                    e1:f6:c2:d8:be:5b:bf:92:6b:2d:1a:f2:48:e7:ec:
                    98:17:d8:c1:3a:70:9f:ad:5d:01:e3:0a:77:fa:c9:
                    be:9d:70:0f:3e:bc:b4:8e:67:03:2c:1a:e5:91:e1:
                    a6:06:c9:48:0c:8e:d0:25:73:fa:31:c9:44:13:3f:
                    85:de:df:aa:24:ca:3e:b1:73:c4:29:78:7c:48:f9:
                    1a:77:26:cb:14:a5:3e:75:46:fb:3c:cf:31:4a:e4:
                    8f:63:64:45:eb:7a:82:56:df:68:9c:26:a3:45:e4:
                    61:4e:dc:7a:45:55:7d:5e:84:b5:f1:5c:9a:16:98:
                    0b:c5:de:32:7d:84:8a:a8:b7:45:d9:e1:da:cd:95:
                    f8:bb:7b:06:28:d3:15:5e:5d:26:34:37:50:2e:80:
                    f4:01:67:4f:88:17:2c:79:04:c8:f4:2f:c2:4a:0b:
                    e5:a5:32:67:d5:78:cd:f9:62:4a:79:9f:ad:46:86:
                    f0:fc:53:a0:3c:14:28:e9:88:52:2d:0e:64:da:4a:
                    86:d0:d7:aa:72:4f:ad:87:4b:b7:25:59:87:12:f6:
                    8a:14:f2:ea:97:b6:3c:b3:cc:22:67:47:93:88:04:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:68:1C:DC:AE:92:8B:4E:8A:84:2E:8F:F3:07:A9:E9:90:FB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:08:f8:06:29:32:0a:ed:51:a0:6c:f6:6b:c7:a8:b3:4e:
         96:3e:d4:a7:00:3d:a5:e4:af:ef:1e:00:a5:f5:c1:35:05:f5:
         27:b3:2d:bd:86:3c:b9:f1:a6:d7:e1:16:2c:1e:f4:75:db:6d:
         1c:5e:c6:3c:3f:8d:9b:ef:8f:fd:6f:ab:90:6e:c4:88:93:c3:
         f2:5a:85:2a:8f:9d:fa:e0:88:08:db:8e:38:35:0f:84:a7:8f:
         e8:5c:7a:f4:d4:ed:3e:c6:6c:74:72:cc:74:9b:db:ae:13:9e:
         a5:7a:ba:69:30:fb:63:63:21:79:62:99:48:65:15:cb:ba:33:
         04:66:81:e8:37:5a:57:14:c8:80:e4:63:8b:c5:d2:e9:fe:c6:
         54:f3:e1:dc:eb:a8:64:3b:75:8b:c2:de:0d:be:a7:d3:1c:33:
         fc:cb:aa:60:b8:fa:91:22:99:d2:f4:99:ad:7c:4c:0c:5c:29:
         37:2a:29:c4:46:4c:40:04:05:e4:50:67:69:c7:49:f7:bd:ba:
         fc:64:bc:34:75:5b:36:1d:a6:a0:58:b7:ea:93:df:87:b0:e8:
         85:cb:e2:0e:fd:ab:48:36:b3:51:94:93:f5:3e:4e:94:33:aa:
         95:b6:85:01:f7:18:c8:30:39:84:e2:37:56:d2:07:50:ce:f9:
         a2:c9:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:04:35 2025 by rpki-client