Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a03ee14a-5742-3135-b75b-886e2a8669b6.roa
File:                     a03ee14a-5742-3135-b75b-886e2a8669b6.roa (raw, json)
Hash identifier:          vaGROW5SiwoVxiqLvIjMctUUe5l56U1XWLX2T0yKRmE=
Subject key identifier:   34:F1:18:93:85:CF:E9:FA:2D:1B:D1:92:CF:CD:81:5B:1B:B3:C7:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E0F16D86A922F545CDE680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a03ee14a-5742-3135-b75b-886e2a8669b6.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     32787
IP address blocks:        104.86.64.0/24 maxlen: 24
                          104.86.65.0/24 maxlen: 24
                          104.86.66.0/24 maxlen: 24
                          104.86.67.0/24 maxlen: 24
                          104.86.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f1:6d:86:a9:22:f5:45:cd:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a4222bdd-89a0-4ac0-9e63-9bc22bd90882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:d9:3c:01:e5:5c:9c:58:cd:32:86:42:04:
                    20:fd:3f:00:62:88:14:9b:28:63:1b:cc:ef:d8:3d:
                    a5:7e:11:54:e4:b0:2f:39:d8:7c:83:b0:8f:40:92:
                    f4:05:40:80:4f:7e:25:93:1f:70:e5:b4:8e:f0:d1:
                    fc:a2:62:02:91:fc:09:47:be:e7:b5:07:79:92:c3:
                    a4:2b:0e:7d:ac:ae:19:56:e3:4b:e4:1c:03:c3:c9:
                    e9:28:24:50:09:57:d3:bf:f5:be:ee:c1:2f:d2:5c:
                    47:15:e7:0c:e1:5c:8f:66:46:9e:8c:fb:69:13:48:
                    52:e0:d9:e3:ab:68:e8:27:c6:11:bc:3b:9f:7a:08:
                    77:81:c9:ce:84:28:16:8f:a1:ae:2b:20:2f:71:2a:
                    ad:9a:b7:b7:b7:bd:74:9c:60:5e:59:17:f5:6d:a3:
                    ae:41:7f:d8:c6:23:4b:cf:82:21:89:a7:7b:38:ea:
                    13:82:df:97:dd:f4:29:d9:a0:2e:32:24:9a:8c:af:
                    02:e8:52:9e:82:4e:bb:77:d8:ca:af:36:d5:db:46:
                    7b:5a:ad:3a:ed:45:f8:37:73:e4:e1:54:18:e4:63:
                    93:00:29:80:a0:94:b9:96:00:b0:2f:d4:95:96:13:
                    42:d5:8f:44:1d:4d:0d:9a:7a:56:e9:86:3c:1e:79:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F1:18:93:85:CF:E9:FA:2D:1B:D1:92:CF:CD:81:5B:1B:B3:C7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a03ee14a-5742-3135-b75b-886e2a8669b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.86.64.0-104.86.68.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:84:9e:15:75:d5:49:d6:e6:fb:26:15:ef:ef:9b:88:3b:
         38:4d:ce:bf:53:71:18:df:6b:7a:b6:01:96:6c:f4:0b:54:36:
         b7:43:57:b0:00:26:e5:37:96:1b:8a:1c:3b:3f:70:7c:1c:9e:
         df:7b:80:f1:5b:03:af:1a:14:ce:02:01:51:65:5e:4d:4d:78:
         34:21:4b:86:8d:97:da:91:3e:9a:74:cd:9a:38:6b:8e:9c:6f:
         dd:58:9d:83:44:c2:84:0b:5d:06:50:3b:ef:34:39:60:a2:55:
         3c:a0:e2:6a:84:ba:fd:92:c9:bd:a0:ff:b4:0a:5c:1d:45:1a:
         c4:26:75:33:43:7a:b3:cd:15:39:8d:5c:82:97:92:ef:18:6d:
         30:93:3f:1a:1b:c0:97:1d:6a:4f:8c:fe:24:6e:59:2f:b4:4c:
         ff:7c:13:46:f4:e7:ac:47:5e:c0:17:9d:fd:3d:01:fb:90:c2:
         59:6a:a5:c7:53:5d:f8:e2:52:b9:7c:6f:6c:08:9b:45:aa:79:
         10:d2:f9:35:7e:00:17:dc:9d:09:74:7b:12:a8:d7:1a:8e:f8:
         a6:7f:cc:1b:a7:19:99:e9:33:3e:65:a3:ae:8b:b0:d3:10:fc:
         40:88:80:4b:5e:1b:a6:f2:e0:0b:5f:29:1e:8f:f6:a8:37:12:
         3f:75:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:59:50 2025 by rpki-client