Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa
File:                     2610a058-f412-3ea2-9d2c-e62411e2b78b.roa (raw, json)
Hash identifier:          oNJGZ6BdT1ZY4/TZ5qxzCKIVFj2VUw6SdtpQzYm6ZZY=
Subject key identifier:   1F:2E:47:49:2F:DB:78:C5:D3:66:8B:B8:88:18:03:B9:FF:E1:91:D8
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F4328584B2FC19723657BEA96257C87C0
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     399250
IP address blocks:        104.224.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:97:23:65:7b:ea:96:25:7c:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=2dd7b8e7-d5f7-4b42-b768-cd795ec5f24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:c8:6a:1b:10:04:26:c4:01:87:55:50:6c:
                    23:e0:45:aa:a7:1d:f7:eb:d9:01:27:0a:97:ca:97:
                    64:de:5e:97:cf:70:6b:56:ba:35:61:3a:97:f7:da:
                    f0:31:0b:60:3e:2a:c7:1a:75:1e:ae:cf:31:00:63:
                    89:b0:62:2a:af:05:d2:ed:26:22:92:ba:53:ad:f4:
                    f1:af:46:e3:21:2a:08:ec:e4:68:36:d0:fb:34:62:
                    c0:01:c0:a0:fd:9b:ef:f5:8f:22:4d:21:44:68:86:
                    cf:96:a1:52:ab:1b:20:a9:e5:a9:10:b0:3b:c7:65:
                    d2:13:2f:b1:3b:b4:b4:a3:63:90:a8:ed:bd:24:8a:
                    71:58:ef:60:d5:2e:46:70:c8:2a:9c:1f:57:1c:1f:
                    5c:84:02:00:b2:50:ad:e1:39:f9:65:d5:6f:f5:9c:
                    c3:df:3e:25:bb:ba:54:87:86:49:a4:48:3e:77:36:
                    14:3f:76:a3:94:f3:d5:5f:f6:50:b4:2b:ef:ec:98:
                    84:ac:f6:12:8b:9a:ad:20:8a:57:68:45:90:56:9a:
                    2d:70:9c:b9:7a:5e:35:65:d7:7e:84:36:54:57:36:
                    28:05:ca:b0:3f:56:87:5e:c2:53:ad:c6:9d:7f:15:
                    69:41:f3:68:b5:4c:78:df:a7:82:62:e2:2c:b0:b5:
                    c2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2E:47:49:2F:DB:78:C5:D3:66:8B:B8:88:18:03:B9:FF:E1:91:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:60:7f:5a:34:49:73:28:7b:c9:e5:52:6f:19:e2:b5:cd:75:
         64:8e:55:f8:6a:c3:15:6f:a5:3b:0b:45:b2:0b:5f:f8:79:e1:
         1a:82:69:a2:d5:0d:53:a9:83:b2:c2:f2:be:17:c7:a2:c6:cd:
         7d:26:55:e7:86:0e:7a:fa:17:1c:ea:33:ad:7b:47:12:71:a3:
         3f:e2:1a:07:84:e5:4b:69:78:9f:63:e7:85:3f:47:b3:09:01:
         af:7d:b1:70:fc:3e:6b:1f:d8:0a:64:9d:c4:6c:f5:cf:b1:fc:
         d4:de:a1:f2:20:04:10:f7:d4:b1:cd:35:40:96:28:15:b5:13:
         7a:d2:98:f1:71:89:37:49:5f:19:50:e0:96:78:ad:4a:bf:d8:
         ba:42:58:a2:20:9d:71:32:2a:6f:2e:58:7e:d3:8f:74:22:73:
         e6:b7:2b:d7:e0:9a:b7:71:38:ae:b3:bf:cb:8e:29:8d:47:53:
         3d:05:e6:db:a0:73:0b:8b:62:2f:fe:7f:22:72:6e:d3:f9:f1:
         6b:51:da:4f:f2:4f:a2:ce:71:4d:05:99:00:f3:3d:48:10:f4:
         49:9e:65:f6:18:e2:92:a0:5b:f9:cd:d4:70:d1:9d:f8:34:cc:
         f0:6f:b9:b4:fd:fe:8b:f0:05:f4:1f:82:f1:2b:60:a0:44:7b:
         5f:a5:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:58:19 2025 by rpki-client