Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa
File:                     8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa (raw, json)
Hash identifier:          ycLwjWNuj8r8S+Q9vm0g05BsDkPV8Kjq5MpmR/wnTjI=
Subject key identifier:   CC:52:77:CC:3C:C8:BC:EE:63:00:D0:DA:26:4D:49:B5:EC:31:D8:D9
Certificate issuer:       /CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
Certificate serial:       010D0C9F4328584AE891273A43D54FF2A981FC40
Authority key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     399321
IP address blocks:        104.224.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:27:3a:43:d5:4f:f2:a9:81:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=d02dfba8-9226-46be-93c8-626707d50ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:5d:05:e9:4a:1b:78:59:a6:f9:ee:81:b4:
                    83:6f:9a:55:19:a0:ef:0e:d4:35:72:e4:7c:1b:57:
                    a6:41:01:b7:fc:7b:ff:de:1a:e3:32:15:6a:d1:b0:
                    1a:24:92:21:b0:b5:c4:32:89:c2:b9:8d:d3:ae:4c:
                    2b:99:89:08:16:1c:79:ff:38:f9:ec:23:83:da:b1:
                    b4:96:5b:a6:0e:14:41:c4:aa:2b:2b:81:2d:05:08:
                    81:14:d2:b0:e6:11:59:4b:49:55:68:14:4c:11:bd:
                    d2:f3:9e:b1:b9:ea:84:3c:76:42:4c:9d:8d:6a:e0:
                    90:75:07:fb:4e:4a:c5:70:b3:a9:c8:94:ca:f1:b7:
                    0e:9f:98:d3:5e:d4:f1:c6:a5:9e:b6:b1:13:cb:9a:
                    9d:a8:df:d8:4f:e0:79:75:f4:cd:4b:96:b9:6e:11:
                    a7:4f:81:21:6f:f4:81:73:2f:0a:29:cc:c1:a0:94:
                    43:2c:6c:7a:5e:50:c0:7f:d1:6c:e6:be:53:3a:91:
                    31:f0:9f:8c:1a:ab:01:e7:c1:49:1c:b1:fc:8a:51:
                    67:8e:f1:43:c5:cf:cd:2b:a2:b3:bd:2b:9f:05:ce:
                    37:2a:c9:9a:fb:4f:a3:34:05:e0:c3:41:43:4f:83:
                    a2:1a:01:3c:2f:ee:fb:c8:45:0d:33:21:40:2d:cd:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:52:77:CC:3C:C8:BC:EE:63:00:D0:DA:26:4D:49:B5:EC:31:D8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:98:33:11:53:93:7d:08:ff:60:81:ee:aa:42:ee:fa:b8:f5:
         ba:94:5f:0b:f2:09:a2:99:8c:2f:af:2f:a1:84:8b:35:7d:2c:
         38:ee:24:31:be:34:cc:ee:a2:80:7b:21:0a:e9:80:ea:27:2c:
         58:60:26:11:d0:aa:0f:12:72:c6:b7:48:e0:10:d5:df:f7:7d:
         66:c6:1b:b8:7e:78:5c:fc:a5:10:0a:9f:d3:a6:40:33:40:d4:
         c7:8f:e6:35:6c:0a:a7:94:70:7b:3c:91:aa:c2:c1:50:e5:0a:
         06:af:c7:16:ab:af:14:cc:06:a7:3a:1c:2e:39:36:14:58:d1:
         b0:75:9f:35:74:1c:05:e6:71:d5:71:b7:b4:e0:80:c8:7c:0b:
         ee:64:ab:5b:74:d9:f9:18:e8:35:cc:db:c9:67:52:1f:dc:a6:
         5c:c5:39:5d:18:08:46:f3:91:3b:f5:72:15:f7:e8:9c:16:b4:
         96:28:2c:11:bf:e7:8e:53:15:6b:23:68:5e:4c:71:5c:8b:f1:
         0f:e8:fe:8e:ef:18:e7:b0:83:be:96:86:6b:22:df:7e:c9:d2:
         f1:78:3d:b1:54:10:a7:77:4b:a7:f1:19:b1:02:87:6f:e7:0d:
         af:2b:36:f7:40:ba:a4:94:c9:4f:23:29:38:0b:8a:93:07:1f:
         33:ea:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:18:46 2025 by rpki-client