Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa
File:                     5846edab-0650-3c94-acc8-bcb993d9bf61.roa (raw, json)
Hash identifier:          egH8/MOA9Vi8SSSzEHJXvxYNk3mW0RQJ2/4xb8KluF4=
Subject key identifier:   F1:66:F0:ED:7F:2A:06:55:D3:9C:ED:31:7B:AE:D3:9A:8B:49:F7:42
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584AD7D151A32AB0A6C0E97AC740
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     40676
IP address blocks:        104.238.248.0/24 maxlen: 24
                          104.238.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:51:a3:2a:b0:a6:c0:e9:7a:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=27ae3ea7-51cb-4857-ab5a-57829b0213e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:d9:64:69:9b:3c:85:cf:c1:08:1f:bc:1d:
                    ae:27:15:53:82:c6:c4:5d:68:87:f7:fc:d2:a1:38:
                    f8:42:bd:45:be:e4:31:0b:6e:d7:a7:85:41:79:92:
                    ff:ae:0f:4b:ac:05:c5:bb:0e:29:f8:bb:34:88:c4:
                    68:b6:b5:cc:fa:8d:48:4a:b3:2e:83:02:0c:b0:cf:
                    97:77:f6:ba:71:14:47:cd:03:59:0b:b0:a7:b4:cd:
                    71:ba:10:57:fd:37:d0:5b:1f:fe:df:f3:49:dd:57:
                    b2:00:2e:be:d6:1c:12:da:83:07:a9:18:7f:cb:14:
                    35:f1:87:fa:5f:a6:84:55:d6:63:9d:80:5b:bb:f4:
                    6a:88:74:f9:dd:cf:7a:05:c3:ab:86:91:a3:c3:8b:
                    7c:75:71:98:c1:d8:8a:f7:00:38:c8:eb:bb:2a:fb:
                    d5:c7:79:aa:12:f1:4f:44:c5:8b:7e:21:e5:3c:6e:
                    3b:02:4b:bb:6d:bc:a9:3d:a3:98:a6:b4:91:3a:c7:
                    84:69:f0:3a:89:16:94:0a:6b:11:23:33:8e:8e:90:
                    1a:21:a8:3d:c6:e6:fd:f9:3d:dc:19:ab:30:02:f4:
                    e8:00:0b:e2:ab:42:13:db:76:94:b2:f4:4b:89:14:
                    cb:e6:e5:ac:46:17:32:c1:48:35:0d:d1:7e:1d:93:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:66:F0:ED:7F:2A:06:55:D3:9C:ED:31:7B:AE:D3:9A:8B:49:F7:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3f:3a:81:7e:57:bd:fb:4d:0a:c4:30:00:5b:22:41:2a:e0:
         a6:ba:8b:9e:a2:b6:10:d3:e9:2d:63:25:8e:c1:53:6b:e6:97:
         72:66:8c:80:a5:bd:b7:c6:7c:3f:9a:02:61:ae:bd:41:d7:ac:
         81:a1:5b:75:0c:63:4b:80:84:da:dd:a9:c9:6c:c4:f1:4b:4b:
         49:fd:a0:66:06:77:a4:bc:82:66:4a:77:e8:46:dd:5f:13:83:
         70:2f:ad:d1:f2:77:e9:6a:04:b3:36:5c:64:51:ed:3f:bb:df:
         bc:36:0b:1d:eb:87:90:20:e8:bd:25:0b:a3:28:d9:64:8f:05:
         a0:e8:82:34:ee:99:75:00:be:2c:de:c8:ef:8b:d2:6c:66:c7:
         2c:a7:46:17:89:0d:ba:28:ce:74:8b:4e:c9:a4:89:c2:9a:c3:
         f5:48:9f:c1:ef:19:91:e3:f0:41:fc:25:47:62:7c:8c:7b:f2:
         92:9e:05:2b:2a:93:54:9f:84:52:d0:62:00:4e:80:b8:9b:fd:
         87:fb:ff:d8:f0:c1:76:47:7c:8b:6b:e9:3a:2d:ef:0f:ec:12:
         ee:21:9b:af:33:27:0c:cb:00:fa:9d:28:26:25:27:b2:b0:cb:
         ce:52:1b:52:f0:b8:ac:e6:ab:26:c6:c8:25:61:8e:ba:ae:56:
         57:6b:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:59 2025 by rpki-client