Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa
File:                     3a434729-cac5-3196-b991-47e7685c7e69.roa (raw, json)
Hash identifier:          ILae5nslvrzrS7yBYidgrbFjNsL2NHd3BH7LbAzFkms=
Subject key identifier:   F9:CE:F6:55:C1:20:F0:B2:65:58:B7:20:29:13:6E:FC:21:CC:69:DC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B5F375F52C606CA9B0FBB2170
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        104.237.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:5f:52:c6:06:ca:9b:0f:bb:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=56d0d338-569c-4496-838f-ffb834e23f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:05:f8:4a:c3:4f:20:87:f0:9b:1e:25:ea:
                    b6:94:45:e2:f5:8d:e8:af:30:aa:85:89:f2:05:53:
                    13:c0:d6:52:2e:d0:7c:b8:c4:db:db:69:cb:a2:83:
                    6f:b9:ef:43:23:1f:04:b7:f5:aa:fd:15:51:f2:90:
                    9b:83:56:19:fe:55:95:a8:17:1d:d0:02:34:2f:21:
                    4e:f0:67:0d:df:f8:1d:a8:2c:0a:09:f2:14:a7:52:
                    ac:9c:7a:ad:9d:1f:0f:3c:75:f5:05:87:fe:6a:8a:
                    1a:7f:13:f4:39:6c:0b:c3:3e:cd:19:eb:f1:6b:ab:
                    4a:98:44:40:53:d8:e2:bf:b7:ef:62:1b:0a:49:44:
                    59:d6:4d:40:bb:49:95:be:58:f6:22:3d:bc:6d:8b:
                    4c:6d:bd:26:2a:a0:d3:26:31:3b:06:f7:59:8d:5f:
                    6e:70:b9:b4:08:0e:b1:5f:b0:74:79:9f:e4:3d:9a:
                    03:46:37:73:5c:3c:48:32:ea:2e:4a:78:24:66:1c:
                    7a:74:4f:0c:e8:20:76:4e:92:34:b8:73:68:ba:44:
                    0f:6a:d0:42:51:91:56:75:a8:19:52:53:12:f0:10:
                    2f:fb:27:bb:a3:75:aa:f0:88:7f:51:39:3a:30:4c:
                    60:43:c5:cb:76:44:ed:bf:92:26:72:50:d2:fe:5c:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:F6:55:C1:20:F0:B2:65:58:B7:20:29:13:6E:FC:21:CC:69:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:2b:62:a9:6a:6c:8f:dd:f0:f9:46:93:a8:47:61:f1:b6:
         f5:f3:ee:f4:b2:f5:91:50:91:79:c2:17:1d:9e:a5:22:1c:2a:
         97:65:4f:03:f2:e8:1a:4b:96:19:9b:af:90:5c:bb:78:55:13:
         98:00:5b:b4:52:72:d8:21:e5:ca:23:8c:0a:9f:71:47:b2:3e:
         26:60:de:7e:d6:5c:92:f6:fd:8a:45:4a:c0:3c:01:40:9f:97:
         7d:4e:34:fa:02:d6:41:9b:b6:c3:2d:be:bc:6f:b2:2f:be:a4:
         44:74:10:91:25:05:11:db:d1:69:31:c7:94:0d:bb:a9:d3:59:
         58:18:37:57:10:5c:df:7c:27:bd:93:4e:ad:82:59:a7:09:66:
         7a:03:22:f4:84:41:33:55:78:50:bf:28:a0:22:b8:66:b4:99:
         12:7d:4d:f6:6a:b2:cb:cb:a1:5b:d6:8d:e8:54:5f:90:33:1c:
         12:83:87:79:ec:a3:b4:74:7c:e1:32:43:7f:5d:65:ca:62:ed:
         21:c6:6f:c0:de:5d:22:97:22:82:a7:d4:d6:17:60:5e:f6:31:
         8d:bf:1a:77:58:e1:ea:c2:f0:6b:bb:c8:65:cd:e2:f0:57:bf:
         2f:fa:5b:54:69:8a:67:27:8d:88:fe:87:a0:58:d0:aa:e2:a6:
         bf:43:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:30 2025 by rpki-client