Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa
File:                     87e18ed9-a210-3d88-b807-6e991937baa5.roa (raw, json)
Hash identifier:          vf0hN2qB8WT0PTG2bHB8f8eMNQ7ULqKSu2pdKtFCzVw=
Subject key identifier:   C4:2B:2B:87:AD:72:7E:6E:35:DA:52:AC:24:31:C0:40:EE:EC:99:8E
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B41E71D5D77784BDAE155C100
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398993
IP address blocks:        104.233.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:1d:5d:77:78:4b:da:e1:55:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=1092281c-5f2e-4d7e-8342-ef49c0ef3b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:3e:2c:f9:12:f2:30:31:41:eb:46:af:5d:
                    ff:35:2a:c6:78:e4:1e:f5:b2:7c:eb:30:09:35:41:
                    88:73:33:91:dd:29:01:93:06:b7:e1:33:8b:24:17:
                    67:45:4c:be:8a:82:00:ee:52:87:1d:05:e7:31:54:
                    1f:5e:43:c5:f9:57:b6:e4:ae:6f:f7:44:4f:8e:81:
                    96:e6:15:db:58:36:42:16:ea:bc:23:25:03:a6:8a:
                    2b:7e:ca:59:ef:96:04:e5:88:18:5b:38:95:0d:3d:
                    42:3a:bc:1e:7f:33:e1:53:a8:29:ee:5f:9b:00:11:
                    ac:68:ff:44:00:67:d2:3f:6d:8f:2c:50:57:0d:bd:
                    f4:e9:8f:58:93:27:1e:04:86:e8:a8:79:d2:14:ac:
                    1f:18:41:0a:ab:13:84:01:f9:7a:be:2d:28:d9:d0:
                    a6:0d:8f:6e:16:99:1b:af:7f:b0:1c:98:d7:24:d6:
                    ee:f7:17:7e:2c:f3:1b:49:01:b4:ce:e4:a0:7b:cf:
                    37:af:2b:85:f2:56:4c:ba:57:73:8b:bd:bc:61:25:
                    ea:1e:d3:7c:43:e8:10:13:32:f2:32:6a:d8:82:ae:
                    86:71:d9:21:d2:9a:08:1b:c7:e0:9b:1c:ca:68:66:
                    f9:eb:1a:53:f4:9e:74:93:53:d8:0f:a0:4c:cb:cc:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2B:2B:87:AD:72:7E:6E:35:DA:52:AC:24:31:C0:40:EE:EC:99:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:53:a0:66:85:f4:3a:fc:a3:ae:f7:bf:9d:db:e2:26:13:
         fd:04:ad:b5:e6:6d:20:8f:ca:88:0e:7d:9f:59:53:53:be:62:
         3f:87:b6:ae:3d:b6:24:5b:35:1b:d1:46:a0:c8:bf:18:9c:fb:
         b8:f4:6a:50:ac:b5:60:0b:f2:b0:7c:ef:d0:de:5f:6e:18:6e:
         c5:78:09:d9:74:50:34:3f:b7:dd:a2:c1:e6:4e:95:20:81:43:
         a1:e9:f2:14:8c:b9:76:1d:cc:21:6d:f4:67:1b:8e:e1:b5:1c:
         9d:a3:3c:9a:7f:b9:b9:49:f8:d7:f3:82:87:86:be:6e:31:65:
         7b:76:f6:72:25:f6:d7:fd:52:72:bd:b9:f7:5b:c0:c8:ae:24:
         1a:7b:ac:af:eb:4a:9c:c1:c3:4d:86:09:67:1a:64:7d:ac:05:
         85:b1:4d:e7:17:34:b4:64:a0:38:f1:e6:61:00:15:09:db:4a:
         2a:72:86:76:e2:62:2e:50:aa:36:d4:3f:50:00:1b:07:86:8d:
         f0:0f:76:00:c7:a6:41:52:9d:ac:44:dd:1a:47:b4:57:6f:d4:
         67:80:83:8c:75:05:f6:89:8f:32:22:cf:d1:10:5a:81:88:2d:
         e1:b9:1b:bd:6d:5d:74:06:e2:47:95:c5:83:a7:84:53:db:d9:
         f1:87:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:29:14 2025 by rpki-client