Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa
File:                     77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa (raw, json)
Hash identifier:          k8L5A0as6ZkW7NhFQYyxSAappi9gyIFsBeyvXm6YSJU=
Subject key identifier:   C2:A8:77:70:CA:96:49:DA:53:45:B6:8E:30:6C:EE:42:D3:F8:61:7A
Certificate issuer:       /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial:       010D0C9F4328584B296956E537DE6CB000522280
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     22423
IP address blocks:        104.192.208.0/21 maxlen: 21
                          108.175.128.0/20 maxlen: 20
                          199.189.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:69:56:e5:37:de:6c:b0:00:52:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=31cc01e7-70a9-4617-b8a4-86f2ff6bfb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:40:38:9d:86:16:c6:da:ed:b1:b9:6b:5c:
                    82:e0:60:a5:a2:c2:0d:05:2c:0b:97:25:69:56:4c:
                    a9:2d:a1:66:3d:82:0f:2c:cc:a2:3d:9b:cb:b0:a4:
                    02:59:f9:ee:c4:cf:d2:6d:53:54:34:bd:2e:c5:f0:
                    f6:25:1d:70:54:28:0b:79:3e:b7:88:26:ab:f9:45:
                    ae:76:c7:f2:87:04:6c:66:6c:ba:c5:77:17:72:1d:
                    37:d0:cc:7b:2b:e8:4b:ef:64:7b:97:49:7d:b6:ed:
                    e7:83:c3:2a:fa:6a:2e:4d:48:16:a0:77:ad:50:8e:
                    07:63:20:46:f8:f4:fc:a3:65:70:9d:66:8c:d5:5d:
                    00:59:fe:71:b6:cb:5e:bf:38:75:9a:ab:c0:a6:be:
                    28:55:4f:e0:a4:3f:69:bc:dd:56:3a:33:dc:27:40:
                    01:80:34:92:0d:39:54:16:55:d5:5e:34:17:51:cd:
                    14:81:ee:d3:89:ed:05:69:b9:31:49:fb:3a:89:7f:
                    e0:aa:51:e9:af:ea:12:44:36:4d:67:70:f6:8c:ec:
                    59:d4:06:46:96:c9:8c:d6:43:f5:f1:5d:c7:b7:e8:
                    10:7b:97:7a:eb:a0:d5:3a:62:f0:b7:92:8a:a6:7f:
                    95:57:c9:1d:5a:d9:3f:93:1b:a9:52:af:f2:02:17:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:77:70:CA:96:49:DA:53:45:B6:8E:30:6C:EE:42:D3:F8:61:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl

            X509v3 Authority Key Identifier:
                keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.208.0/21
                  108.175.128.0/20
                  199.189.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:a6:44:38:ae:d0:32:4c:04:6b:a5:b7:54:83:8e:24:e4:
         93:fb:8c:d1:36:c6:23:60:77:53:5e:cd:25:2b:d5:69:98:9c:
         27:f4:f0:e5:80:70:df:9e:70:ff:32:83:98:7e:31:0a:72:a2:
         2e:a8:f8:0a:27:c6:f9:dd:e8:fa:68:34:16:97:6d:8f:cf:9b:
         13:50:50:00:c7:42:86:94:46:e9:a6:01:79:93:02:37:26:98:
         1e:a6:d4:cc:fc:4b:4e:22:66:69:4e:79:37:41:ea:a7:cb:77:
         63:cb:ca:72:91:fb:e8:df:f7:0d:e5:ec:11:08:40:fd:b6:60:
         0e:78:94:02:e4:8e:f0:87:7e:a4:59:af:f4:f9:b2:84:eb:74:
         23:ad:fe:a7:aa:a2:66:d4:53:66:a0:0b:92:5a:37:2e:4e:e2:
         91:f9:3b:66:c9:61:6f:73:9c:00:67:a5:26:45:f4:37:e1:c4:
         93:08:72:72:b0:53:98:60:15:9a:a6:4a:02:a7:1b:59:e2:15:
         e1:53:de:69:ce:f6:91:69:16:f3:90:65:cb:c9:e0:91:c1:26:
         73:21:9c:47:7b:17:4a:81:b1:8c:c5:37:13:94:1a:66:fb:a3:
         50:42:5d:a3:da:fd:81:32:23:5b:c4:69:ed:f2:2b:4f:74:b8:
         d6:be:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:40:21 2025 by rpki-client