Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/7ae08d7e-db17-3cdf-a6a8-ef2c04a0fdeb.roa
File:                     7ae08d7e-db17-3cdf-a6a8-ef2c04a0fdeb.roa (raw, json)
Hash identifier:          4Z1XQRB2K8XnkK9LxnI4KzxvNTn4Id4ZxdROw3Qmtys=
Subject key identifier:   95:05:EF:B3:C8:2A:7B:B5:A8:97:20:0A:29:A7:86:1E:9B:6C:BD:03
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F4328584ACCA69263734CF60265FDDB80
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/7ae08d7e-db17-3cdf-a6a8-ef2c04a0fdeb.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     213990
IP address blocks:        104.193.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:92:63:73:4c:f6:02:65:fd:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=47c9d698-2660-4a94-b59f-6baf45b8c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:8c:60:2a:bb:f9:63:3f:e3:5d:c0:9f:f2:
                    0b:af:62:72:30:c2:4f:12:2f:e5:5d:36:0d:56:c2:
                    68:f1:92:fa:ff:3a:4c:92:e3:45:23:64:55:31:b6:
                    ea:49:87:e5:ba:8b:a7:b1:27:dc:a2:9a:9b:72:da:
                    ab:05:ec:39:75:54:5e:f7:67:f0:0f:9c:11:09:c3:
                    00:ae:22:15:62:cb:fd:c4:ad:d4:01:f0:94:f5:f8:
                    13:9b:2e:db:c5:29:48:8a:0a:69:66:d9:57:f1:d6:
                    ad:1c:3f:90:e2:29:34:e3:d1:c0:8c:ca:e8:12:23:
                    06:90:62:02:ca:39:9e:26:56:30:cc:67:18:30:53:
                    91:ed:8a:05:dc:40:64:16:86:19:35:0c:2c:a4:d7:
                    a0:a6:2e:d5:66:ea:e7:f2:7f:21:e0:c6:b3:61:fb:
                    45:39:05:49:c6:c8:f7:15:73:53:2c:54:fd:bc:e2:
                    dd:91:0b:09:0e:95:7a:d2:02:63:44:7e:c1:aa:f0:
                    85:72:bb:63:ce:b6:f9:78:8d:10:fc:cb:60:30:87:
                    17:2f:e4:2e:e6:c2:1f:6b:1b:94:f9:62:60:c2:ff:
                    9a:96:e0:80:bd:50:c9:bc:9b:38:40:03:40:d0:37:
                    80:10:6e:ee:d4:64:ee:0f:31:85:c9:98:97:bc:90:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:05:EF:B3:C8:2A:7B:B5:A8:97:20:0A:29:A7:86:1E:9B:6C:BD:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/7ae08d7e-db17-3cdf-a6a8-ef2c04a0fdeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:18:bb:37:ee:b6:b8:f4:ca:a7:60:ce:fa:2a:c5:14:bc:
         ab:ef:5d:5a:19:db:e6:ec:ab:f0:89:e4:bc:db:f1:36:3f:27:
         b0:c4:7c:b4:fe:82:ee:72:3e:4e:7d:15:58:6b:d2:ca:a6:be:
         0b:40:e9:23:91:4c:66:54:a6:8d:5b:cb:f8:b8:47:8e:25:5b:
         16:9d:cc:6e:37:5e:2a:31:3b:7d:21:5e:ee:fc:09:13:ae:55:
         f3:56:87:1e:7f:79:f5:31:0c:08:6c:16:22:8b:12:4a:c5:2f:
         2d:16:76:ea:bb:28:3c:06:5a:4e:9f:26:d5:77:09:fa:5a:19:
         2b:9d:4c:08:60:93:d6:c9:c6:5c:c4:61:a8:72:b0:68:94:87:
         a7:54:d1:f7:12:df:37:a9:42:2c:a5:c2:dd:6d:da:92:c7:21:
         fb:d6:92:a6:f3:11:fe:18:44:a6:07:ce:80:1c:51:cf:f5:e4:
         ac:09:a5:ca:65:07:e4:9a:78:1c:e8:f4:89:d6:b1:dd:df:91:
         e9:7c:10:98:1a:0b:38:82:04:4a:6f:c4:d5:a5:fe:58:9b:18:
         29:2e:f4:d0:b6:ae:d8:f4:65:d8:7f:6a:d3:cb:24:05:2a:3a:
         82:5a:79:19:be:39:42:54:f5:90:99:7a:14:91:21:62:50:20:
         14:c6:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:52:55 2025 by rpki-client