Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87bb468a-e32c-3c1c-bbf9-281bb54c1a36.roa
File:                     87bb468a-e32c-3c1c-bbf9-281bb54c1a36.roa (raw, json)
Hash identifier:          /9ZxQYSfitpUa92OoxcuWw0lMHj0tfDYnqMZPampTPs=
Subject key identifier:   52:BA:74:E4:41:9F:C5:20:80:90:AD:4E:33:79:EB:5B:04:66:CF:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B5F3745B585779508D4A85C10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87bb468a-e32c-3c1c-bbf9-281bb54c1a36.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396982
IP address blocks:        104.154.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:45:b5:85:77:95:08:d4:a8:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=7954127c-f60c-42e6-b9b6-aaacd9793442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:fc:45:d2:b0:aa:64:43:f0:0c:a6:43:07:
                    b2:e5:83:70:d1:06:62:c7:46:ac:b3:02:db:b5:04:
                    8f:53:3f:4c:3d:28:0d:4f:1e:07:b1:25:a7:3b:c8:
                    6f:c1:16:38:1a:fa:61:1a:de:90:ea:60:eb:0c:85:
                    6c:a7:48:68:a7:47:7d:aa:d0:b2:d9:26:ac:e2:6d:
                    52:fc:c3:ea:d9:14:56:6d:08:eb:ba:a9:82:07:ac:
                    6b:4d:3b:f0:30:91:3b:6d:9d:74:c2:fd:07:be:49:
                    dc:ac:55:cf:97:03:f8:88:29:45:8d:0f:df:56:4b:
                    99:86:e4:ba:50:f9:ab:e6:76:53:0c:5a:fb:d9:c0:
                    ab:f2:6d:c2:14:f1:9b:69:1b:7b:c0:ab:22:ba:8a:
                    70:16:05:71:fd:83:74:47:f8:d0:0f:eb:1b:40:1d:
                    99:f9:16:9f:3d:08:58:74:aa:90:09:81:3c:f0:97:
                    06:dd:16:0f:53:72:3c:48:19:de:a9:e5:c3:14:ae:
                    b4:d7:3a:57:5f:ce:ce:bc:73:4a:7c:37:ae:4f:a0:
                    ee:dd:bc:df:ea:3e:13:c0:ca:a1:67:81:d7:a0:61:
                    cd:62:e9:d3:f1:8f:6b:89:0f:1e:1c:4d:e3:bc:7d:
                    dc:ab:92:be:56:c9:6a:55:fb:3f:4f:5e:26:cb:df:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BA:74:E4:41:9F:C5:20:80:90:AD:4E:33:79:EB:5B:04:66:CF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87bb468a-e32c-3c1c-bbf9-281bb54c1a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:e9:8a:85:79:a5:f8:7f:cf:7d:6b:5e:cd:72:37:dc:23:
         a7:ee:99:fd:7f:c8:4d:1a:eb:71:59:bb:9d:8d:76:74:ab:a9:
         dd:46:24:58:15:02:89:13:42:e4:81:46:da:30:c1:a6:d3:da:
         e3:33:a5:12:c5:ff:c3:de:1d:9a:a1:7f:f3:91:a1:0f:22:9a:
         04:39:0c:bb:13:a1:e6:b6:54:97:5e:58:1f:9e:ae:f8:53:0d:
         43:d9:27:ab:ee:32:d3:9c:33:de:8a:51:67:a7:fd:b1:6e:18:
         a5:d5:12:55:4d:e4:72:e1:bd:b4:4e:06:b8:7c:57:22:d6:14:
         1b:69:86:ba:23:2c:1e:cf:5e:3b:3e:4f:12:83:c5:98:c3:57:
         66:02:01:46:46:f8:ea:df:3c:06:e1:74:05:f0:be:96:d3:31:
         39:38:30:fe:c1:5c:71:fc:ec:0d:19:8a:c7:d8:9d:77:d8:0d:
         0b:66:1d:4b:70:f6:9f:2c:23:87:31:4b:15:d5:21:1d:58:07:
         02:d4:65:50:24:15:e3:95:5f:37:99:9d:93:34:35:04:7c:41:
         45:ab:9a:77:0a:d0:2f:a2:58:46:48:cc:f8:24:9b:a8:c9:48:
         d7:91:ce:06:21:de:c4:9a:97:03:f3:c3:89:c7:cd:23:18:9d:
         a5:bf:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:43 2025 by rpki-client