Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc1b18f6-48ef-3fe8-ae1e-bd5fca9abf22.roa
File:                     bc1b18f6-48ef-3fe8-ae1e-bd5fca9abf22.roa (raw, json)
Hash identifier:          3kx3sZooAXmR+R6/uMizC4pkB1C34vMtt5ZuDWLG1ys=
Subject key identifier:   4E:B5:19:C6:36:FF:07:47:6F:88:A5:10:73:43:13:BA:CA:66:77:4D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1F88E514CD5296F4505A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc1b18f6-48ef-3fe8-ae1e-bd5fca9abf22.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        104.196.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f8:8e:51:4c:d5:29:6f:45:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=cfef1cdb-cc4b-4911-bbe9-0a0493c811ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:e0:48:20:bd:96:6c:9a:3c:44:0f:d4:22:
                    af:7a:29:03:a2:91:2d:98:49:a0:9a:3d:10:3e:02:
                    35:13:6a:6a:79:7e:06:16:30:42:a7:03:25:a4:f4:
                    1f:ff:9a:d7:81:a5:73:a1:10:7f:a7:a1:fa:89:ec:
                    bd:bb:11:69:d1:e4:cd:73:7c:b3:6d:5f:66:36:42:
                    ff:d2:2e:98:ce:58:95:6c:45:de:b6:26:4b:9d:74:
                    76:5e:90:9e:a1:fa:72:00:ef:bf:aa:81:2f:59:7e:
                    2a:3e:0c:ad:0b:64:49:68:e2:a4:2d:ee:f8:e4:d3:
                    1b:6e:68:83:09:d7:f2:eb:bf:89:ab:72:fc:a7:98:
                    bd:a7:75:74:46:ba:80:62:bb:0d:b7:d3:e9:c0:4c:
                    5a:ce:55:e0:ef:d1:85:b3:6c:88:ee:68:e3:f5:2f:
                    2d:c5:7a:15:10:09:77:95:56:e7:49:17:d8:f6:2d:
                    6b:7a:03:87:61:a6:12:15:f7:da:a2:09:a8:1b:7d:
                    a6:f1:37:fe:b9:75:ad:ff:93:10:c8:5b:5a:16:9c:
                    27:4b:68:d6:a2:ca:fb:fb:a2:b9:85:52:33:76:f0:
                    8c:87:af:d1:6a:82:67:7d:a2:db:78:2b:f2:47:75:
                    a1:eb:8f:88:f2:88:f1:5f:d4:28:46:45:eb:be:7f:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B5:19:C6:36:FF:07:47:6F:88:A5:10:73:43:13:BA:CA:66:77:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc1b18f6-48ef-3fe8-ae1e-bd5fca9abf22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:74:35:25:7d:88:be:b9:09:e5:8a:ea:34:cc:16:be:68:67:
         48:58:b9:54:06:6c:e6:83:07:ff:b1:95:31:bb:c6:08:4d:2c:
         c6:2f:57:e3:c3:4d:1f:8a:d7:88:99:64:29:a4:5b:2c:f8:b2:
         ed:a3:be:7e:05:50:05:f7:7c:23:0d:c6:4d:ac:a6:e2:ce:be:
         37:55:4a:08:cb:25:95:ad:50:09:5a:70:9c:93:d2:18:80:6f:
         4f:b6:9a:0c:f3:f8:8b:32:b0:24:be:ea:9e:1d:27:c1:0e:9d:
         7b:6c:c8:14:39:e3:59:d1:3e:91:92:bf:aa:36:48:32:d5:c7:
         b1:5d:ba:b8:41:9e:81:f2:06:d6:4e:77:8a:3b:12:fe:f2:8e:
         ff:43:9a:e6:e4:65:01:c4:35:e7:94:70:b6:56:02:97:65:db:
         72:83:dd:34:47:d4:bd:07:19:77:23:d8:94:c7:cb:cf:ec:5f:
         b3:af:ba:16:32:f1:64:db:7f:fa:71:8d:78:31:a2:5c:d8:bf:
         01:c6:01:ba:02:9f:c3:05:de:7d:c2:0c:7b:eb:48:8c:56:62:
         b2:ef:0f:ca:12:1a:b9:ef:04:a5:e5:6f:19:33:24:01:ab:16:
         35:ab:46:be:7f:13:ac:ff:2e:de:c5:9e:87:e7:ab:9a:4f:dc:
         65:4f:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:37:08 2025 by rpki-client