Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa
File:                     10f6258f-0624-366b-b770-20e51ad3c4d0.roa (raw, json)
Hash identifier:          LMzPW4S/qhLVUW9DXKR1Q6idE1rIBylGSQEvjpZsPUQ=
Subject key identifier:   13:34:9A:B0:28:B1:45:45:1A:37:A0:EC:37:0E:AF:01:26:3D:FE:39
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584AD7D105C07470F05907A30E00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     53730
IP address blocks:        104.238.248.0/24 maxlen: 24
                          104.238.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:05:c0:74:70:f0:59:07:a3:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=572f3c39-6097-4513-967a-5bd1239d793b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:10:53:02:50:14:4e:d8:97:e1:4f:46:78:
                    00:02:d7:b9:35:78:d6:c9:46:be:e6:73:12:ca:48:
                    6b:ca:bb:79:63:5b:c7:a6:66:c8:73:0d:60:ce:f9:
                    07:77:af:96:c9:21:f8:8e:6d:1d:2b:5f:73:22:df:
                    06:48:fd:88:b4:02:35:48:7f:84:d9:15:a8:61:95:
                    7f:81:60:b5:c9:87:d9:67:9c:77:14:a5:10:92:80:
                    07:67:df:2f:6a:52:da:14:72:59:78:21:2a:24:e7:
                    71:3c:41:31:a9:f0:8b:b5:78:d1:bf:1b:4b:3f:13:
                    4a:a0:f6:f8:5d:66:56:bb:73:21:27:84:54:c8:bf:
                    d9:d3:4a:c1:a3:27:cf:72:b1:ca:f8:28:66:c1:2a:
                    2a:a7:d5:d1:5c:42:e6:30:c7:9c:be:f7:46:7c:01:
                    5b:1f:bb:c1:e1:51:28:90:09:65:26:9f:4e:7f:3e:
                    4f:2a:98:87:17:9f:05:ef:7f:4d:c7:1e:84:36:56:
                    e5:0a:b3:5d:2f:b2:71:4d:1f:fd:10:fc:4b:49:dc:
                    0a:44:f4:a9:b7:c6:52:4f:1c:b8:60:6a:62:08:f7:
                    71:e8:88:bb:8d:01:cf:d7:e0:66:e5:b5:5e:f0:89:
                    ca:4b:59:c5:d8:bd:de:16:4e:d7:c5:1a:f3:9c:49:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:9A:B0:28:B1:45:45:1A:37:A0:EC:37:0E:AF:01:26:3D:FE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:02:6c:e2:a8:e6:ac:cc:dd:4f:79:e4:97:3c:fc:8a:26:ca:
         b2:7a:5f:c4:a9:cd:ec:cd:9e:12:6e:04:81:f9:dc:4a:ac:3b:
         a7:53:aa:4a:83:66:75:5c:d3:9c:1c:11:6b:dd:11:fc:7b:50:
         2d:72:e0:5c:4a:01:ad:f2:67:07:d7:ff:b4:d0:7b:82:3f:c6:
         6f:51:43:3c:16:87:88:e6:5e:e8:c5:16:04:c2:3a:4e:33:29:
         54:da:57:37:39:58:37:09:fc:56:9c:c6:ab:9c:36:24:e0:54:
         5a:07:b8:14:f7:bf:12:8b:ab:5e:ba:ff:80:3f:72:f4:98:d2:
         66:e2:a8:2c:d5:66:aa:60:3d:d5:8d:a9:03:12:dc:0c:58:68:
         61:b4:3f:ab:bf:9a:f6:a2:3a:c4:4c:b3:9a:25:69:30:ce:d5:
         38:c3:00:74:a2:1a:22:14:f2:89:81:10:62:bc:e9:c9:85:31:
         63:08:c3:c5:5c:01:91:27:c1:19:8c:e3:74:9b:25:69:96:b3:
         48:2d:fa:5f:bc:cd:9d:79:db:89:8f:38:cf:61:d7:93:1b:42:
         65:2e:6c:8f:17:8e:95:35:15:de:4c:70:76:ee:e8:91:e6:b6:
         a3:70:a4:bd:65:24:a5:33:53:c8:33:86:63:1a:1f:fa:59:68:
         f0:b4:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:58 2025 by rpki-client