Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e641851f-5739-34f3-a6d6-4217a6085c8a.roa
File:                     e641851f-5739-34f3-a6d6-4217a6085c8a.roa (raw, json)
Hash identifier:          vEj377Uv+APEElUdtV0I1srlhyXWTezHf1C2Vqp0394=
Subject key identifier:   84:1F:1A:2E:C0:56:00:CF:94:AE:63:0F:23:D9:B0:2E:8D:A7:35:4F
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B5F37322743FC381FC5245D00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e641851f-5739-34f3-a6d6-4217a6085c8a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        104.237.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:32:27:43:fc:38:1f:c5:24:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=7d69233f-47cc-4c48-b48b-7f2b139bcd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:3e:19:62:e6:01:80:ac:3f:65:ca:c3:ec:
                    7d:7a:6d:1d:ff:f4:f9:83:db:f6:3e:90:3f:e6:c9:
                    5e:b9:ea:49:09:7f:2e:07:81:3c:e9:8a:f7:1f:3c:
                    7b:23:0a:7e:92:d5:37:f6:17:a3:6a:76:1f:5d:cf:
                    81:b7:f9:76:0a:35:d7:09:d4:54:80:ec:99:02:6f:
                    d5:73:15:5b:e5:b0:b8:2b:05:36:fb:9a:01:70:97:
                    80:ae:f9:a3:92:c7:b4:f5:10:00:15:b5:8a:7a:07:
                    17:1a:30:92:73:d4:e5:2d:6d:ab:61:86:d3:ce:41:
                    5b:bd:3f:64:27:72:1f:e1:44:cf:00:aa:ab:c7:83:
                    01:c7:f3:ae:86:13:0e:8b:e2:94:83:80:23:05:2c:
                    e8:d2:ef:16:36:09:c7:a2:de:1c:f9:c2:de:01:f8:
                    ee:f8:c4:b1:01:23:b7:1b:e0:df:19:5d:1a:0e:09:
                    f8:e3:b2:08:e5:d6:ec:00:5b:07:20:ba:d0:75:9d:
                    e7:cf:68:b7:2f:b1:4f:2a:e2:90:38:79:20:7c:b7:
                    8f:be:4c:46:9d:cf:ae:44:a0:02:49:1c:02:2e:92:
                    fc:ce:37:3a:49:41:fe:72:2f:65:24:5c:48:6e:91:
                    28:85:ce:ac:74:9a:fc:5f:ba:11:d8:0e:75:ab:9b:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:1A:2E:C0:56:00:CF:94:AE:63:0F:23:D9:B0:2E:8D:A7:35:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e641851f-5739-34f3-a6d6-4217a6085c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:61:91:30:99:72:d2:2f:25:f8:48:14:da:37:00:c3:08:
         14:4a:49:14:4e:0b:3a:02:91:84:17:56:6d:06:20:cc:a2:80:
         31:55:e3:43:61:9b:fb:70:3b:59:20:76:64:24:31:12:cf:42:
         df:20:c1:0d:f6:89:a5:f8:ec:c3:da:a7:37:5c:5c:db:00:f6:
         32:95:ca:06:5b:c1:2f:62:cf:56:bf:41:75:d8:32:ab:00:59:
         37:ec:7f:43:72:1b:76:a2:2e:65:ae:b9:93:eb:5d:3c:bb:55:
         b7:2e:d3:1b:62:04:1f:76:ce:21:f5:26:e4:e2:37:75:2a:84:
         87:f2:45:b6:ae:43:16:35:38:d6:fd:9a:29:2a:6e:a3:b1:17:
         24:45:54:1d:10:27:d3:9d:6e:e2:39:45:c2:66:08:09:f7:be:
         b7:20:da:00:8b:f6:83:34:c5:a3:23:94:0c:cb:05:f0:44:0b:
         d8:44:5f:bf:10:e9:f8:e8:82:6c:74:b8:17:1d:91:0a:55:42:
         68:bb:c7:61:22:2a:08:64:4f:17:a3:2e:e9:ff:a6:12:14:21:
         c9:85:26:ea:f8:ef:98:83:f3:4d:80:9d:dc:46:13:46:62:01:
         59:fe:bd:9b:f0:c6:05:b8:f4:8d:d1:06:33:6c:71:aa:1b:77:
         1b:9c:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:16 2025 by rpki-client