Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6e60c5a2-c7c0-357f-9e02-2037474629e4.roa
File:                     6e60c5a2-c7c0-357f-9e02-2037474629e4.roa (raw, json)
Hash identifier:          JC+zwAfBjKyx3XAqHw/WY+4gR0y+B+zTOjLSiz+SNRc=
Subject key identifier:   F6:7E:C5:BC:67:06:4F:E3:1E:8B:9A:5E:50:86:51:14:AB:50:08:C4
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B5F372E4478CFF92813800560
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6e60c5a2-c7c0-357f-9e02-2037474629e4.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        104.237.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2e:44:78:cf:f9:28:13:80:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=faf9195a-f265-487f-b0d1-a1e7d73b746e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:1f:92:cf:f1:75:78:17:79:a1:fe:cd:33:
                    15:e1:bb:46:e2:6a:15:2d:e1:c2:9e:ce:a4:4a:be:
                    be:fb:73:88:4c:a0:9c:fe:9f:62:22:49:8e:e3:cb:
                    2f:6a:27:7b:05:5c:f3:0d:92:cb:59:f7:7e:e9:76:
                    99:b4:2a:90:00:99:70:7f:c1:00:da:a0:ac:ac:5b:
                    df:a8:52:fa:1c:5c:2c:5b:61:d5:b8:71:7c:43:ce:
                    2b:cb:5d:1e:d8:22:04:27:83:34:fe:6c:86:a8:4a:
                    e6:bd:31:1e:29:14:9c:62:68:fa:60:3d:27:9d:d9:
                    44:ad:a3:3a:20:61:43:0b:68:da:1c:83:27:3c:69:
                    f3:07:83:bf:b7:0e:1c:aa:de:b0:23:57:52:6b:5c:
                    f7:9c:c2:5b:e3:2c:d6:d4:ab:4d:20:2a:9a:30:67:
                    85:02:36:8f:6d:9d:e2:c9:50:a0:4b:db:38:dc:ff:
                    91:c4:84:ae:f5:1d:ce:e9:54:a1:c2:ec:27:0b:f4:
                    0e:1d:6a:1c:cd:e2:c9:b7:f8:6f:e7:13:3d:dd:8e:
                    4a:5c:a9:70:3b:b8:c7:08:f1:63:9c:1b:71:f8:07:
                    50:6e:8b:11:57:09:3d:58:ac:22:14:b5:18:d0:b3:
                    2f:ab:21:f1:52:47:11:24:6d:eb:6d:98:9a:0a:52:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7E:C5:BC:67:06:4F:E3:1E:8B:9A:5E:50:86:51:14:AB:50:08:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6e60c5a2-c7c0-357f-9e02-2037474629e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:60:da:e6:ed:c4:15:05:1e:fb:6f:84:10:3f:54:0d:6c:
         98:91:b9:00:ac:90:0b:49:ba:8c:55:5a:40:e3:7f:93:1a:fa:
         9b:ee:ce:62:ff:b3:a3:91:ae:2e:31:a0:8b:e6:92:38:af:c2:
         62:7b:7a:ef:7c:32:3f:f8:69:33:6f:7e:af:2b:98:ef:48:0a:
         3c:20:f5:75:e4:cd:86:24:9b:5c:4a:54:4a:36:bd:8c:0b:57:
         61:fe:57:5f:e8:af:02:6e:a1:3f:d6:b8:4a:e8:56:a3:3e:ef:
         aa:01:f2:ba:d5:ca:38:53:77:20:f2:fe:81:be:14:eb:78:49:
         2c:31:b0:e0:ce:28:24:33:8b:e1:8a:ae:4c:9c:66:6f:63:17:
         47:6f:7e:37:ff:96:53:14:0b:a1:62:3f:fc:17:dc:ee:bc:a3:
         b9:f0:76:f9:c2:ff:0d:78:2d:b7:d3:c2:ce:ab:eb:1d:94:96:
         08:6a:7e:d7:fe:29:ac:45:aa:c6:18:64:b1:ac:f8:63:b0:d0:
         96:8b:0d:81:fd:4d:18:fc:8e:de:0c:86:18:bd:9a:4c:a6:b9:
         8a:59:61:e1:99:15:5e:70:c5:40:6d:f2:63:7a:a7:ea:76:fd:
         37:22:ba:cb:4b:af:e1:c6:0c:06:14:36:77:66:67:aa:17:b7:
         b0:6b:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:43:50 2025 by rpki-client