Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa
File:                     05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa (raw, json)
Hash identifier:          fp5V4BP7fh4VHXkBmd+G4IWGTmGpv8DhZ16lJe9IzAs=
Subject key identifier:   BD:18:C4:E0:24:98:64:D6:1F:00:7E:CC:CD:F2:C9:C0:05:6B:B1:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B5F3736E9DDBF41630A995C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.198.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:36:e9:dd:bf:41:63:0a:99:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=b284db30-8f61-4b40-b0cf-739d2fb7cf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:2f:ba:08:b8:3c:e0:94:9e:65:de:9f:52:
                    48:a3:13:e9:f5:02:6f:dc:d4:40:0b:21:97:35:e2:
                    b2:53:b7:5b:eb:4d:84:87:f5:16:5f:2f:b3:51:cd:
                    bd:08:c1:63:b5:d2:fd:dc:bb:bf:2b:28:a3:33:ae:
                    11:ce:00:0a:8b:8f:d1:7a:ea:e0:57:ee:18:a6:3b:
                    5b:6a:22:2f:e0:6b:88:9e:17:e2:ff:0b:ce:a6:cc:
                    98:ca:a2:82:03:cc:7c:c5:ce:cd:8f:58:58:03:30:
                    f9:d9:e4:a0:cb:e8:85:da:95:57:17:8c:79:f1:c0:
                    9a:b5:0f:09:b6:06:49:95:01:c9:17:09:31:d9:83:
                    c7:08:8c:14:23:97:f1:ca:b6:aa:dd:4c:23:e0:3c:
                    27:b1:cc:d5:ef:b7:6d:8d:89:b1:b5:9c:7e:f2:82:
                    41:74:3a:31:c9:a3:33:6f:db:21:cc:f8:b8:c3:9e:
                    75:c1:cf:5f:85:13:1d:ae:80:53:ac:1b:a7:f1:57:
                    a0:75:18:ce:f1:2a:43:27:ef:98:66:93:59:c3:a1:
                    37:db:c4:93:c8:49:e4:a6:ac:da:64:a0:cb:6a:21:
                    80:13:f5:32:d9:4c:ca:6f:32:50:47:c4:f8:81:c1:
                    bf:83:34:bb:65:1f:41:13:6e:1a:77:33:75:aa:4a:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:18:C4:E0:24:98:64:D6:1F:00:7E:CC:CD:F2:C9:C0:05:6B:B1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:c9:32:49:ad:ca:48:20:6e:fb:6c:e2:9d:a7:93:18:d8:
         6a:59:09:99:be:75:6d:b2:52:4c:95:84:50:0f:b7:3a:19:fe:
         0b:44:34:85:d8:7d:8a:48:9f:d9:1d:8b:99:38:be:fc:c1:c7:
         44:0d:cc:0e:98:75:60:41:a3:aa:47:bf:0c:42:a7:7e:74:24:
         7a:bc:b6:80:ce:3d:26:d9:7e:8c:51:27:ec:84:6d:17:d7:da:
         23:95:56:fe:29:04:74:88:81:9e:b7:db:d0:4b:93:1c:69:54:
         0a:17:73:ed:0d:91:3f:ce:86:04:79:0f:ac:f6:b9:c4:bd:69:
         8a:50:d9:3e:c1:57:5b:a4:02:23:3e:74:2c:8c:fc:89:4f:30:
         b5:19:dc:25:b1:ab:17:55:35:88:45:53:0a:de:c2:e8:27:85:
         ea:27:b6:d9:ce:d3:54:bb:c6:e4:a9:70:77:0b:90:c2:3c:0e:
         13:84:0b:5f:f5:ba:ae:f1:0a:db:33:b1:a5:c7:57:df:e7:e4:
         2e:b8:ac:f5:cd:f1:68:1b:a2:be:19:1c:b2:3f:ab:14:fc:73:
         ac:e8:63:c2:fe:4f:8d:92:ac:9a:c1:14:07:a6:19:cd:a9:33:
         f0:9a:15:80:4a:17:b6:2f:47:10:01:6d:20:0a:eb:34:67:b2:
         db:36:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:59 2025 by rpki-client