Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa
File:                     7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa (raw, json)
Hash identifier:          y9Tw9E44Zq31BElWlBUEGZyQykqh+McB30/Cp8SJ9/I=
Subject key identifier:   89:F1:F6:01:30:51:38:D9:E8:66:0D:39:78:1D:0A:23:CE:9E:57:14
Certificate issuer:       /CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb
Certificate serial:       010D0C9F4328584B715CB033B4455535DDD55800
Authority key identifier: A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        104.219.162.0/24 maxlen: 24
                          104.219.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b0:33:b4:45:55:35:dd:d5:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=e0419a19-aeae-4e29-ba73-9f2453bffcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:1d:b6:c1:c4:aa:b4:a3:99:02:03:af:fb:
                    9b:33:0c:7f:67:e3:46:4a:12:0c:d0:a3:b9:22:d5:
                    a8:77:77:38:eb:31:50:30:ae:a3:40:b5:38:ae:e3:
                    ee:6f:0a:e4:8e:ca:4b:2c:d8:a2:a8:58:2c:21:b0:
                    05:84:d5:89:e8:b8:43:76:66:57:3a:8f:d5:bd:7a:
                    9e:7f:eb:1a:7d:40:e9:fb:3a:bf:d7:e5:0d:8f:b7:
                    89:72:71:b1:4b:01:97:c6:5e:be:c9:eb:00:72:3f:
                    db:7a:af:0d:4c:60:2d:6d:1b:02:ff:d8:b9:5a:e6:
                    ec:a4:b8:0a:6f:b8:dd:9d:e2:77:35:6a:61:7f:0a:
                    b3:1e:3e:76:e4:c1:53:b5:80:9c:c6:4c:0b:44:ed:
                    9e:f7:46:63:b5:24:41:0a:54:9f:cc:f3:57:9b:78:
                    23:3b:cd:15:0e:fa:a3:47:0d:88:44:24:b9:92:2d:
                    5a:fa:da:0c:59:56:f1:b9:28:10:24:b3:18:e8:03:
                    f8:75:9f:1a:50:74:98:b4:c2:24:05:bc:47:ad:9a:
                    95:08:f0:a2:50:30:e4:4a:37:9f:4a:f2:82:53:bf:
                    74:df:13:a6:5a:41:41:8a:b7:ef:6f:3c:0c:a0:c6:
                    18:35:c5:24:60:a2:97:1b:9e:4e:62:64:84:52:e8:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F1:F6:01:30:51:38:D9:E8:66:0D:39:78:1D:0A:23:CE:9E:57:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl

            X509v3 Authority Key Identifier:
                keyid:A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b9:a0:61:0e:98:41:c2:9b:c4:d6:7e:c7:4a:97:b7:f4:38:
         ea:a4:dc:da:cc:22:7c:2f:f9:81:be:82:1d:8d:d5:40:7d:66:
         7d:94:d1:88:bb:29:82:d1:2e:13:44:c0:59:3a:fe:67:dc:8a:
         19:0d:ff:71:d2:40:36:1f:1f:0f:40:35:0a:2a:8f:f9:91:c7:
         4d:1d:85:86:1b:e5:70:d2:1b:33:57:c3:4b:d7:cf:5c:3e:5e:
         99:81:b8:7a:ff:f4:88:d2:52:33:94:b7:90:5e:25:86:fa:35:
         90:44:b5:8e:8c:e5:19:2c:03:4a:35:ca:ed:80:2e:ad:26:11:
         86:09:04:11:a4:f7:7b:98:62:c0:f8:a0:15:7e:61:dc:3d:c1:
         7c:e0:61:06:c5:e2:c5:8a:19:0e:5c:e1:5c:de:f3:52:f0:12:
         c2:dd:10:a9:1b:78:ae:ce:13:4d:1c:27:4f:db:03:37:93:5c:
         1d:10:d2:3c:9b:94:b3:4b:3c:8d:7e:23:e9:d9:96:4e:50:7b:
         1d:1b:ca:7b:47:1c:a2:2e:01:b6:b1:28:40:ea:3c:02:7d:be:
         91:44:4c:4c:09:a1:98:11:93:0a:2a:9d:37:c7:d8:ee:fd:53:
         ec:32:6c:d5:5c:71:c6:b8:c1:91:86:70:1f:49:bb:7c:dd:5a:
         08:90:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:30 2025 by rpki-client