Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/d4b2e2cd-aab0-3666-b85d-b054db875f86.roa
File:                     d4b2e2cd-aab0-3666-b85d-b054db875f86.roa (raw, json)
Hash identifier:          harrJpou8jsAB/dGWEQe++gj7jSZ2/YPTMOje/I6Fgw=
Subject key identifier:   F4:BD:50:D2:E7:7F:23:26:F7:3B:FF:8F:77:6E:81:CA:7C:CE:0F:A9
Certificate issuer:       /CN=e751f735-1712-4284-af50-5bd135a0234b
Certificate serial:       010D0C9F4328584B21CC41174B1A1C8ED1D98498
Authority key identifier: C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/d4b2e2cd-aab0-3666-b85d-b054db875f86.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     8075
IP address blocks:        104.204.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:41:17:4b:1a:1c:8e:d1:d9:84:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e751f735-1712-4284-af50-5bd135a0234b
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=61b05be9-8c93-4b37-895a-604b16dfa8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:26:62:bb:1d:8d:8d:8b:fc:29:20:a6:49:
                    2f:83:cf:69:1c:cd:3b:20:f0:54:81:7d:8b:1e:1c:
                    f7:79:41:bf:20:25:20:58:f9:22:92:30:e2:36:1b:
                    36:25:47:94:2e:09:39:f7:32:01:8e:fb:fe:3d:4b:
                    bf:e4:64:a7:a0:80:7b:24:c2:f5:a0:95:2e:1f:b0:
                    84:f5:97:89:53:cb:e7:d7:fe:5d:09:20:d3:de:c8:
                    9e:dd:5d:44:1a:56:ec:ae:6c:45:54:1d:d2:c1:c9:
                    56:f3:58:18:26:29:48:11:46:a2:af:4d:77:6e:1d:
                    a3:30:32:12:52:77:9d:53:95:46:42:7e:0f:ce:8b:
                    5b:30:f0:81:58:35:ae:50:93:57:3f:bf:5f:86:76:
                    7f:84:32:26:ef:c9:8e:c2:d8:1c:d0:d7:49:4a:cd:
                    36:2d:b3:23:25:2a:d3:98:49:9e:52:70:44:5c:84:
                    8f:99:56:a2:ef:04:98:4f:25:5d:ee:bb:a2:b6:ee:
                    e0:d7:ef:8f:da:68:e6:3f:78:b7:20:13:8a:23:d0:
                    00:4f:cd:4c:ca:52:f8:5a:12:12:d5:b1:43:86:ea:
                    9e:95:d7:a8:0c:e2:ee:29:8c:62:e6:81:6c:b6:c1:
                    93:03:45:52:ce:a1:27:76:0e:35:b6:85:fb:3b:16:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:50:D2:E7:7F:23:26:F7:3B:FF:8F:77:6E:81:CA:7C:CE:0F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/d4b2e2cd-aab0-3666-b85d-b054db875f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b/e751f735-1712-4284-af50-5bd135a0234b.crl

            X509v3 Authority Key Identifier:
                keyid:C6:5C:8A:D8:B8:B2:4E:4C:1C:C3:54:5C:2F:D1:63:CF:40:68:B9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e751f735-1712-4284-af50-5bd135a0234b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:16:cb:e1:1a:24:20:f1:24:fc:8b:fc:71:72:e7:1c:90:e3:
         01:79:64:24:0a:4a:c0:34:df:75:e2:72:60:b2:ad:f0:93:d3:
         1b:5e:5a:d9:9d:c3:a2:9a:84:3e:e5:8d:03:d8:e8:1a:26:51:
         31:60:2f:cf:0d:57:a4:ce:b9:3e:c3:5d:e2:a4:f5:07:71:d5:
         ba:84:00:bd:57:72:33:9f:39:aa:0b:39:ec:f1:db:fb:63:f0:
         a4:a4:ac:37:0c:f7:34:b1:22:a0:68:90:6c:ec:80:bd:6f:7e:
         ff:bd:cd:ce:6c:ec:9d:ab:36:bf:f3:47:09:10:53:80:25:42:
         43:84:5c:9c:f6:45:b5:bc:f5:7c:a0:05:0a:2d:f3:61:bd:a9:
         ab:0c:f9:d6:7b:1f:f4:78:a5:32:40:58:be:ab:bf:b6:b1:35:
         2b:65:f9:b1:ec:ce:37:fa:b8:9e:c3:93:3a:f9:fc:2c:f2:67:
         b4:c1:29:20:76:25:b6:79:e9:ce:3c:39:94:16:80:99:78:37:
         f9:64:78:b9:38:a7:99:18:f5:45:01:70:56:45:70:d0:d1:83:
         1f:c8:64:3f:5b:09:c7:b3:19:00:ad:e1:3e:dd:9f:49:66:ac:
         8f:75:ee:c9:aa:6f:d1:ff:8c:6d:84:ae:de:8f:11:14:ea:55:
         39:60:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:15 2025 by rpki-client