Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4a5fcb-e329-3063-8d93-c866260fb80f.roa
File:                     3f4a5fcb-e329-3063-8d93-c866260fb80f.roa (raw, json)
Hash identifier:          igAT/5CFmr1VypcNo3NsRfH1p9QBhMQZiMgE+QrQVqo=
Subject key identifier:   FD:94:0C:47:88:07:E5:85:36:0D:59:42:88:FF:44:9F:18:E1:68:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF5216D80221E0E1A8D11FC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4a5fcb-e329-3063-8d93-c866260fb80f.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        104.102.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:6d:80:22:1e:0e:1a:8d:11:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=106e51ec-75dd-4fb1-aa1a-3a60264f970a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:14:0c:2f:1d:92:da:2a:0f:0d:1a:39:e3:
                    e0:cf:5f:86:40:41:76:d8:fd:a4:3d:39:de:fe:dd:
                    d3:fe:af:6e:71:3d:06:56:4a:c2:43:cc:8d:76:18:
                    26:47:97:f8:eb:ed:f8:92:dc:a5:5d:fd:e0:3e:c1:
                    af:9b:a9:98:c2:e1:b7:2b:e1:0a:18:af:a9:3a:13:
                    83:85:f0:61:a1:f5:1f:bf:36:71:dd:2e:94:c0:32:
                    da:31:c8:01:5e:ad:d0:45:f2:55:99:d8:cb:97:33:
                    7b:9c:b4:09:ba:d8:ee:42:e9:56:0b:c7:f8:28:50:
                    35:2a:0a:f5:50:97:4c:20:de:9b:31:5b:6f:3b:f1:
                    09:13:70:aa:d6:4b:cf:d7:e5:b7:ad:c5:7e:1c:a5:
                    08:1c:09:5e:ce:aa:1b:8b:b0:f0:05:f5:51:b0:bc:
                    0d:1d:5b:1b:93:03:99:b9:f2:6a:2f:35:64:ed:9a:
                    47:75:eb:58:92:aa:78:bd:99:99:86:20:ff:59:99:
                    5c:aa:57:28:6e:fc:d8:b5:ee:82:d2:e7:25:bb:a8:
                    a3:b5:e8:16:6c:70:c1:9a:fd:e4:24:c8:89:d5:ed:
                    5a:38:44:29:31:bd:d9:37:47:40:e9:90:60:a7:c7:
                    43:77:67:55:7e:cd:62:3e:6a:74:3a:5f:d9:a7:b1:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:94:0C:47:88:07:E5:85:36:0D:59:42:88:FF:44:9F:18:E1:68:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4a5fcb-e329-3063-8d93-c866260fb80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.102.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:5b:34:02:f0:00:89:de:9f:1c:4b:3a:0e:e3:4d:f1:d9:
         53:4b:ad:e8:6b:99:1e:75:2d:dd:3a:44:8d:5c:c6:04:7f:13:
         39:f0:01:43:b8:23:6b:c2:53:09:1a:fb:aa:fd:6b:86:92:bf:
         ef:c8:b4:f7:af:b3:c5:ca:9c:ce:c7:da:a1:ba:20:97:67:0a:
         6d:69:bb:28:89:b8:36:40:04:7c:85:b5:21:7c:e7:05:81:d0:
         79:07:a0:5a:40:23:2d:b3:ed:7a:b0:66:f4:5d:7d:cf:c6:e3:
         64:07:1d:fb:2c:e6:42:71:e3:16:75:85:ea:35:4f:c9:dc:ca:
         6f:21:e4:3d:5c:23:4c:17:c2:61:57:0f:00:59:11:94:9b:f9:
         f7:94:a1:19:f2:0a:4f:2c:75:9e:85:a6:e0:08:0c:15:bb:6a:
         87:67:b3:34:fd:20:d1:0c:96:54:ea:6a:b0:b2:dc:30:d0:27:
         cb:93:4c:6a:05:4e:88:4b:0c:05:a5:63:d0:48:5f:97:98:61:
         e4:41:f8:78:0f:7b:32:06:a0:a5:e9:fa:9f:d7:88:a9:b8:f2:
         17:b1:5d:eb:62:ec:4a:ab:8c:d7:79:fe:37:cb:dc:06:33:c2:
         01:1d:5a:87:46:1e:c1:52:ce:8c:71:21:d5:cd:a2:b7:ff:b6:
         e7:45:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:20 2025 by rpki-client