Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/75824587-e641-391b-83b7-af610267e2b8.roa
File:                     75824587-e641-391b-83b7-af610267e2b8.roa (raw, json)
Hash identifier:          4o6wrb9Nqy6KFg2S9dwcvKc8Gemlig+8nUWW3nADNfQ=
Subject key identifier:   0D:3E:72:07:86:3C:47:E3:2B:09:87:BB:A3:CC:88:87:F2:DA:AC:97
Certificate issuer:       /CN=b04e46d2-7952-4fd4-ae9f-045de0e84497
Certificate serial:       010D0C9F4328584AC876447E2C7D7B28DF1C24C0
Authority key identifier: F9:4D:A4:40:5C:D5:22:D0:43:E1:5F:4A:EB:D3:0C:1D:17:D5:03:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/75824587-e641-391b-83b7-af610267e2b8.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     31764
IP address blocks:        104.192.8.0/21 maxlen: 24
                          2606:6140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/b04e46d2-7952-4fd4-ae9f-045de0e84497.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/b04e46d2-7952-4fd4-ae9f-045de0e84497.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:44:7e:2c:7d:7b:28:df:1c:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04e46d2-7952-4fd4-ae9f-045de0e84497
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=84b23e3c-417c-4fe0-b0dd-ac26cb1e1e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:e1:16:98:6d:a1:a4:a6:93:a7:38:87:14:
                    6f:96:05:dd:3c:be:e6:4d:25:b5:7c:c0:dc:c9:99:
                    0b:90:14:fe:7b:95:09:fa:82:fa:8e:7a:e5:f6:f0:
                    d6:aa:c1:c5:53:0f:7f:56:4f:ee:6f:31:87:f8:ef:
                    ee:4c:2c:ca:e3:1c:6f:a6:42:01:79:8e:86:ec:04:
                    cc:44:d8:50:e5:89:f7:9c:29:a0:6e:ed:23:1f:8c:
                    5a:6f:61:87:a7:b5:f5:92:dc:7c:8e:3b:9b:0f:f6:
                    c7:ac:6b:ea:a4:e0:8b:bc:88:5b:8e:e0:4d:47:91:
                    e5:33:eb:9f:af:f0:df:86:96:0b:49:c9:92:1b:e0:
                    9c:42:03:80:1d:73:e1:2c:47:97:f4:bd:fb:ab:86:
                    a9:c8:11:77:8f:3b:df:b0:f0:77:6a:d4:29:a7:3b:
                    8f:b0:f1:57:73:dc:0f:94:21:0f:ba:55:df:94:0c:
                    e1:0d:1c:4b:ca:68:ff:61:e4:fd:50:dc:79:97:a9:
                    ec:39:6c:16:4b:9a:23:68:31:4d:de:8f:92:a0:80:
                    e0:cd:4f:0b:c6:07:14:9f:8d:ec:9f:c9:16:e4:07:
                    63:e3:c6:f6:da:67:45:83:29:c1:66:40:ca:b3:39:
                    8d:94:1b:de:e0:5a:1b:4c:52:28:f6:79:2f:e0:cb:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3E:72:07:86:3C:47:E3:2B:09:87:BB:A3:CC:88:87:F2:DA:AC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/75824587-e641-391b-83b7-af610267e2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/b04e46d2-7952-4fd4-ae9f-045de0e84497.crl

            X509v3 Authority Key Identifier:
                keyid:F9:4D:A4:40:5C:D5:22:D0:43:E1:5F:4A:EB:D3:0C:1D:17:D5:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.8.0/21
                IPv6:
                  2606:6140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:21:63:f3:38:ea:8e:78:f1:44:fc:ce:4d:15:76:51:a2:25:
         57:d3:14:40:84:5f:51:70:96:b2:d2:bb:5f:91:bc:1e:b5:38:
         20:54:af:06:a2:d8:e9:f4:14:69:99:77:a0:20:65:e7:a3:0b:
         92:16:63:05:31:7b:68:9f:2a:0d:7c:bc:11:36:88:49:ee:f1:
         7f:37:90:36:03:7e:02:7b:54:ab:04:13:d1:af:8f:f4:5e:3d:
         21:f0:e4:41:50:e0:2e:f0:a7:25:2a:0d:1f:fc:c2:dd:69:07:
         85:9a:d9:83:18:ef:e8:ac:92:f7:b8:9b:21:2c:86:d1:0b:ab:
         f5:c6:d5:d9:8b:db:46:de:53:9e:e5:ac:b3:41:42:91:2d:6e:
         09:6a:b1:87:4b:ae:93:05:e1:15:70:28:45:20:ff:a9:0c:fd:
         1d:4d:85:f3:3d:38:19:19:2e:13:3a:77:11:71:14:ae:4e:2b:
         c7:08:0e:cf:f7:a2:5a:cb:33:6c:aa:40:8b:b0:e4:9d:03:50:
         85:3b:dd:54:b3:fb:41:5f:36:a2:d5:c9:ce:52:f7:5a:00:88:
         a4:53:85:a4:a9:40:0e:21:a5:e9:f3:1d:4d:4a:9f:83:c6:8d:
         41:bd:48:2a:b1:c2:3c:96:4c:c5:a6:37:d9:fd:44:18:df:51:
         64:3b:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:47:44 2025 by rpki-client