Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07ea1179-f7cc-38eb-adc6-4ae1731f5766.roa
File:                     07ea1179-f7cc-38eb-adc6-4ae1731f5766.roa (raw, json)
Hash identifier:          hlbkRENlzQuIR3X/aPob11YLusomBgUCqu0kd/ich40=
Subject key identifier:   73:B7:2F:59:08:59:E4:81:6D:51:FE:E1:36:DB:EE:3A:62:62:35:04
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF5215BDBD8BB78EB5EA02A44
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07ea1179-f7cc-38eb-adc6-4ae1731f5766.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        104.85.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:5b:db:d8:bb:78:eb:5e:a0:2a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9928f6b3-12d2-4c1e-bb4b-2f436d19d8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:33:c2:08:74:a3:d3:20:d6:66:60:1e:c0:
                    1f:60:c8:56:16:94:11:2e:a2:56:2d:5f:15:0c:95:
                    09:7c:e7:62:7a:26:12:81:6b:8e:84:86:21:c5:8c:
                    ab:62:4c:a4:f7:c2:6f:dd:8d:e5:14:e4:e9:c0:d3:
                    00:6f:e9:d6:8e:68:9c:35:c2:4e:f3:2f:11:c4:c0:
                    77:0c:39:e3:ba:3c:f2:e3:23:eb:0e:6f:4c:2c:3b:
                    27:c9:ea:a8:d9:f3:c1:11:ea:99:81:5a:f7:87:6f:
                    d1:ef:22:11:03:af:4d:81:bf:12:82:20:5a:c0:e8:
                    b5:69:4d:be:5a:5f:a9:5d:2d:51:b3:1c:c5:76:c4:
                    ae:59:a0:e5:0b:c8:1c:f0:5e:0c:45:f5:34:ae:0c:
                    fc:7e:75:79:ce:07:a0:d5:63:f6:59:e1:2c:a2:ed:
                    4b:df:fd:6a:23:b4:42:22:01:13:5b:94:33:0a:c2:
                    ec:8a:9e:e1:a0:41:01:15:3d:97:75:eb:2a:f1:cb:
                    67:74:fb:31:44:6f:b1:6c:7b:c4:b8:ab:29:cd:40:
                    78:4a:8a:85:00:02:8c:84:ce:cb:0b:f0:d6:1b:e8:
                    3a:cf:8a:e0:2c:51:65:c2:2c:df:60:77:49:87:17:
                    26:88:13:75:5e:c3:6c:88:d2:72:cd:5f:92:c1:89:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:2F:59:08:59:E4:81:6D:51:FE:E1:36:DB:EE:3A:62:62:35:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07ea1179-f7cc-38eb-adc6-4ae1731f5766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.85.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:b7:d9:bd:c9:22:c7:17:bf:ca:f3:d0:35:87:09:9f:83:
         a9:19:65:67:ad:e8:38:d7:2c:23:7c:87:83:a3:2f:10:3c:70:
         b3:2b:8a:be:de:d9:f0:bd:e2:20:19:67:65:19:dc:20:ea:63:
         93:ce:c3:3d:b2:e1:8e:32:3a:46:2a:1a:5a:0d:15:a3:11:83:
         30:bf:e1:7f:12:9e:2b:d8:f5:02:89:53:83:cb:8a:7b:a5:63:
         05:2d:b0:37:ca:e4:dc:51:db:81:3e:f8:58:e4:d0:aa:89:16:
         17:8a:88:26:cd:b6:68:d8:42:5f:b6:c5:34:25:6e:79:0d:63:
         a1:73:6a:93:64:14:40:57:ff:af:44:6f:2c:c0:25:56:c5:31:
         f4:62:c4:28:14:84:89:69:9d:80:71:8c:5b:0b:a0:75:c2:0e:
         95:7b:52:50:62:33:17:a3:84:e7:43:a0:84:94:cf:ae:6e:71:
         20:96:31:5e:df:ab:2f:b3:ba:cb:5f:c0:e6:05:4f:49:0e:5a:
         ab:73:86:d3:23:f7:3b:53:15:61:46:0b:ce:7e:ee:ef:75:a1:
         55:37:72:9b:cc:c6:4e:0a:62:7c:c2:8b:c9:8d:fd:73:1f:82:
         06:35:c7:98:6a:36:c6:a6:40:ab:37:7a:fa:be:ec:d2:1f:09:
         79:26:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:32:40 2025 by rpki-client