Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/507ec26e-379b-3643-a147-8bdf8b8b79aa.roa
File:                     507ec26e-379b-3643-a147-8bdf8b8b79aa.roa (raw, json)
Hash identifier:          GKWYrUHtWPl9uYJBLKg5g2ORJDYUc3hIRujq0GO+T1A=
Subject key identifier:   4B:8E:E6:FB:1F:D5:7D:2C:5F:60:53:F3:9D:3F:78:48:F7:7A:40:CD
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584ACB40E84D38C92C321B94BC80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/507ec26e-379b-3643-a147-8bdf8b8b79aa.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     19437
IP address blocks:        104.254.239.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e8:4d:38:c9:2c:32:1b:94:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=a2613e65-1215-4dc2-8238-e7a8de08078c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:c8:92:21:5a:29:8b:d6:e3:ba:f6:d4:d0:
                    35:b7:87:a9:41:4b:ca:fe:f6:56:0c:d6:0e:e2:6c:
                    2c:51:62:59:26:29:42:3a:7d:80:c9:d1:27:ed:3c:
                    42:f0:d9:25:9c:ef:d9:81:f1:86:08:f1:51:d2:47:
                    68:4c:d0:27:4b:65:c3:99:48:43:24:00:57:06:35:
                    ce:04:32:59:d9:e1:a2:be:58:39:81:55:42:3f:8e:
                    c9:4b:f6:dc:1a:ed:74:6d:94:23:0f:50:a6:ab:23:
                    3d:9e:b5:27:02:25:88:24:89:60:79:25:11:20:2e:
                    60:98:ae:78:eb:ad:dd:b3:00:85:45:45:f4:48:77:
                    5b:1d:9a:70:10:28:87:21:b5:3c:22:e0:e4:a1:92:
                    e2:6d:b5:a8:da:96:9c:8d:a0:26:66:5f:98:02:95:
                    50:37:f3:34:d6:d9:fe:0e:04:0e:88:71:c3:b8:eb:
                    10:13:75:cd:93:c7:6b:d0:7a:b3:2c:a7:38:99:4a:
                    fe:2a:17:c9:a7:62:9c:29:ec:5c:bf:3e:6b:ce:5e:
                    d4:6e:70:5b:df:f0:ed:5f:ec:16:fe:82:03:ed:1c:
                    cd:77:04:43:73:ae:db:a0:da:79:c5:81:9d:00:74:
                    25:34:ac:75:ec:cf:cf:df:6e:26:6c:4e:fe:00:c5:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8E:E6:FB:1F:D5:7D:2C:5F:60:53:F3:9D:3F:78:48:F7:7A:40:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/507ec26e-379b-3643-a147-8bdf8b8b79aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:05:29:16:1c:bb:a3:20:46:23:58:79:69:b5:5d:76:5f:cd:
         e1:5a:d9:ae:3b:e9:90:4b:fc:f5:46:22:9e:ca:84:ea:58:dd:
         16:9a:1d:a4:5f:6b:36:75:d0:0e:99:cb:07:69:a7:91:6d:ad:
         7b:80:2d:b7:3a:ee:49:7c:05:48:8a:b2:48:f3:24:0d:71:ce:
         45:e6:ee:65:39:79:aa:ea:25:4b:93:2a:a3:da:83:b8:2a:53:
         9f:df:70:c4:e0:bb:cd:35:f8:c3:80:00:5b:71:4e:a6:fc:0c:
         c2:25:41:7f:3e:4d:f8:e1:64:aa:8c:c6:e2:d5:64:1b:49:13:
         11:2e:ee:47:b1:fa:e4:03:bc:b1:87:a2:da:9f:a0:81:ed:39:
         25:a5:7f:de:87:1d:6c:e8:a1:ca:3f:c7:86:b9:c0:7a:98:9d:
         73:e7:62:ce:22:a6:80:c1:a5:51:a9:5a:6e:e3:14:e4:d3:a7:
         0e:00:fc:e4:0e:39:22:ed:ad:39:3f:99:a0:80:df:be:54:cf:
         08:69:9c:53:f5:cd:59:bf:be:86:98:04:87:df:36:3d:96:a3:
         83:79:8b:ab:a0:2a:34:ad:80:b8:b5:9c:fe:c9:4c:b9:a8:76:
         61:db:e4:99:0b:34:23:e7:12:b7:f0:6d:c1:bb:af:d0:9f:36:
         37:45:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:52 2025 by rpki-client