Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa
File:                     d55b35e9-c386-375b-a25f-baf47ef2f095.roa (raw, json)
Hash identifier:          W5nPcMn0O2Pe92km+AZsozMbXNTcLtyWZrBnGWM4Yiw=
Subject key identifier:   C2:CA:9F:E7:18:86:FE:D1:5E:FB:A5:19:63:7E:88:31:FB:2D:BC:F8
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584B1D9C2CFB70D5FC8DC565E900
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     26548
IP address blocks:        104.218.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2c:fb:70:d5:fc:8d:c5:65:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=0fda5673-8d05-4cb6-b61d-246457c77773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:3c:78:14:57:b0:4a:dc:3b:11:77:8b:02:
                    90:85:cf:99:19:7f:80:ff:9a:25:55:8b:a1:a0:49:
                    d5:5f:b7:06:10:24:be:f8:5d:b5:12:3c:75:56:59:
                    e2:f7:c0:07:5a:4c:6d:d2:ae:70:4b:c6:8d:b5:37:
                    28:ea:a7:10:79:24:d1:19:d3:12:1b:f8:3a:bd:3a:
                    7e:58:d1:67:ec:49:90:d7:be:0f:7b:6a:42:76:7e:
                    57:81:da:f8:5f:86:53:fa:99:77:8e:95:df:56:9f:
                    66:02:a5:0a:82:b5:95:b7:e7:9d:09:5d:02:c4:a4:
                    60:20:f8:be:1d:27:cf:b6:b1:42:d8:c5:08:c8:d8:
                    5e:ec:5b:a4:44:fb:a6:10:41:ac:52:ac:5d:d0:61:
                    a4:c7:1e:4d:3c:80:6c:23:29:b0:b1:5b:49:c0:f4:
                    26:8a:4d:88:eb:49:4b:af:27:5a:be:ca:d2:4f:bd:
                    9c:16:22:e7:e5:3c:cf:ab:3d:59:d8:3e:07:7e:f5:
                    fb:2d:cf:da:d3:f4:87:81:ae:d1:85:68:14:eb:89:
                    36:0f:d1:f2:3c:e1:33:aa:d1:12:04:9c:6d:66:db:
                    5a:67:0b:38:ad:3f:c1:08:a4:fc:86:9c:60:58:f5:
                    d6:2a:45:f3:38:ad:a4:1e:08:2f:97:16:d8:b1:c9:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:9F:E7:18:86:FE:D1:5E:FB:A5:19:63:7E:88:31:FB:2D:BC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:b9:01:e0:7b:a8:81:3a:df:0b:5e:76:68:39:6e:19:5b:
         58:e7:ba:60:6b:09:e2:26:d0:d7:db:f1:38:74:03:02:f3:11:
         29:4d:b6:24:88:0a:36:2c:b8:82:31:50:f3:3e:23:a5:29:f4:
         d8:a8:92:93:ad:07:11:49:ca:65:e2:aa:f2:fb:5c:28:d9:07:
         a3:32:48:6b:34:c6:85:74:0d:65:30:2a:cb:09:58:2c:b1:07:
         8a:ac:34:01:0c:fe:3b:4c:c8:7a:28:b4:bf:eb:c0:91:69:a2:
         ab:9a:c1:dd:52:81:a6:28:43:b7:15:74:5d:ec:7e:e8:11:21:
         d0:d2:41:7e:8f:2e:30:fe:a0:0f:8f:07:16:35:9c:8c:c3:47:
         32:91:d9:aa:e5:16:4e:cc:f6:ee:e5:14:cb:a1:fb:59:d7:77:
         b1:6c:c6:8a:6d:92:e0:8d:cb:fd:f9:e5:27:2f:64:e2:db:05:
         05:2f:60:24:60:dc:46:26:b7:26:b2:88:89:22:5e:0a:53:ad:
         4b:83:ba:a7:7f:30:8d:8c:d5:06:3e:1b:b2:59:5d:9f:a5:f7:
         12:87:c4:17:21:f6:0e:d4:d4:8f:f9:f9:4f:4c:b6:bc:8b:26:
         22:dc:ef:91:8d:57:58:1f:fa:d8:3d:9a:2c:da:b7:17:73:3c:
         86:ba:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:28 2025 by rpki-client