Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d96c769-bafe-382e-b862-ede7161564bb.roa
File:                     1d96c769-bafe-382e-b862-ede7161564bb.roa (raw, json)
Hash identifier:          3vyc1HZwojW5tY6Fuj4gkEEJzue50p9gr62L528RJ+k=
Subject key identifier:   F2:5C:DD:BD:28:B4:9D:A5:6E:9A:29:E3:8E:F0:0D:DD:0B:54:AE:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE89143C7F74D7B71F3923880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d96c769-bafe-382e-b862-ede7161564bb.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.91.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:43:c7:f7:4d:7b:71:f3:92:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=8d3fbe32-f430-44ee-9713-1cd06a97556b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:55:fd:fd:bf:f7:8b:2b:db:42:4b:aa:f5:
                    7c:6e:92:be:9f:61:3f:e8:55:0f:9c:e8:81:d9:82:
                    c5:78:0b:a0:e9:0b:7a:80:c4:67:7a:ee:da:22:89:
                    98:0d:92:50:4a:56:58:de:d8:bb:6c:57:8a:dc:c5:
                    f8:b8:cd:45:b5:35:c4:3d:bd:24:e4:d6:e4:af:61:
                    81:e5:cc:80:94:04:ff:e5:44:b0:cc:3a:ca:37:79:
                    fa:fd:3f:8a:cf:68:0e:71:ea:63:79:39:2d:3d:93:
                    67:b4:33:80:68:b5:36:cc:e8:c1:a5:5a:b1:c0:ad:
                    3a:95:b0:19:f5:66:65:f3:b1:52:24:19:ba:c1:0d:
                    5f:d6:a3:9e:e1:27:ab:55:6a:22:32:3f:3a:84:95:
                    88:7c:93:4d:c5:7e:68:85:0e:1a:2b:7d:27:fa:57:
                    6e:ef:f0:00:72:cc:21:8d:d9:e1:6b:6c:df:fa:30:
                    47:df:c9:fe:64:fe:b7:c2:d3:d8:d2:d6:33:4f:0b:
                    3d:fe:42:87:da:dc:4b:b5:81:aa:3a:c5:84:de:7f:
                    9c:18:55:de:e3:f6:0c:3a:aa:10:5a:3e:c2:1f:8d:
                    b3:e1:4c:71:6a:04:f7:f4:c9:78:50:7e:4e:89:26:
                    08:2d:9d:07:71:38:26:a2:f2:08:21:5e:ef:1d:dc:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:DD:BD:28:B4:9D:A5:6E:9A:29:E3:8E:F0:0D:DD:0B:54:AE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d96c769-bafe-382e-b862-ede7161564bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.91.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:ec:17:73:f5:57:4a:08:44:ce:aa:e7:94:49:14:70:22:
         b6:17:7d:f8:ad:23:7a:2c:2d:36:d4:8d:45:49:5d:de:f3:2b:
         6e:60:0b:a0:2a:bb:b3:55:4f:b3:21:c6:07:e0:b0:e0:6e:a5:
         4b:4c:57:d2:e9:8a:a8:0d:ae:5e:03:7a:49:c7:49:0d:14:fa:
         e2:87:d1:14:50:b4:41:2e:a5:94:3a:94:3a:62:bb:8d:1f:89:
         5e:1f:38:b9:11:ee:91:ee:dc:cf:f5:ab:8c:0c:92:23:60:d1:
         cd:8f:65:6a:87:87:be:59:7f:e1:f7:56:ea:9b:dd:9a:1b:7a:
         7a:b3:0c:67:e9:1f:81:95:a6:38:11:67:bf:6e:2c:48:79:67:
         64:c3:b8:dc:a4:67:15:68:3b:b6:b9:6b:41:2d:2c:01:41:fc:
         7a:90:f0:7a:53:f2:3e:df:ad:f4:71:f8:35:07:81:96:32:fc:
         a6:f6:cc:41:b3:38:41:2d:ee:12:c8:2a:38:c1:5a:d4:b5:cb:
         1f:6a:f5:f5:55:76:ba:ea:f1:77:4b:2c:18:ac:8f:6e:ad:31:
         15:55:16:c4:48:e7:0b:45:3f:d8:9e:b6:63:39:75:cb:b9:27:
         82:bd:d3:50:aa:ed:1e:6e:ef:b5:02:fc:c0:a3:d3:96:cf:13:
         5b:7e:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:11 2025 by rpki-client