Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/9ae3d0a6-4194-3d4f-965a-0542ca44252e.roa
File:                     9ae3d0a6-4194-3d4f-965a-0542ca44252e.roa (raw, json)
Hash identifier:          FBOWC6JWxuDhbQKsZC6ZktOgND+4+cEcAecuHbtHgyc=
Subject key identifier:   B3:CC:B2:2D:1F:A6:6B:39:9F:6A:61:47:47:42:87:E3:9E:3B:93:4C
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584B8BE224C0F743EFB23EDFA680
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/9ae3d0a6-4194-3d4f-965a-0542ca44252e.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     4134
IP address blocks:        69.163.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:24:c0:f7:43:ef:b2:3e:df:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=a43cf9de-8bde-40d9-aed7-5e3c59938b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:f4:0f:4f:39:6f:8c:ab:15:d1:aa:89:67:
                    eb:1f:c5:48:d1:7f:ab:85:53:bc:79:c2:5e:5a:2c:
                    55:a6:22:5c:30:0f:60:8c:86:68:50:0f:57:66:cc:
                    bf:53:8e:86:50:7e:b6:04:36:2d:8f:b3:c7:55:b4:
                    3c:0a:ee:89:9a:b8:0b:94:f2:e5:ab:03:14:d0:3c:
                    77:0b:6a:9b:94:75:bc:dd:2f:ad:4d:19:1a:61:cf:
                    3f:bd:f1:f7:8e:46:34:c4:67:0b:86:50:56:3f:76:
                    d5:bb:e5:a3:1c:1b:04:da:58:7e:2e:94:50:7b:e6:
                    24:f8:b4:11:f9:2b:82:f6:0a:b6:d8:d5:ba:19:f8:
                    91:4f:f0:9c:69:ab:28:2a:2f:3a:a3:92:f0:38:14:
                    36:43:6a:94:ff:fc:eb:81:1f:83:ee:a1:2e:c3:41:
                    8c:ad:f2:9f:22:99:f8:56:3e:00:e5:ce:fc:22:bf:
                    75:b0:73:10:58:73:f7:22:1a:e1:f9:e7:76:52:eb:
                    4c:32:84:96:d2:75:d5:eb:84:1a:dd:5d:14:9c:dd:
                    89:05:24:ef:92:f2:08:75:fb:14:f3:f9:d5:d8:45:
                    b9:f8:a9:6d:e8:bf:39:5e:83:16:43:a8:81:52:df:
                    0d:86:25:6f:d2:cb:3b:1a:52:59:3f:b6:0e:10:ce:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CC:B2:2D:1F:A6:6B:39:9F:6A:61:47:47:42:87:E3:9E:3B:93:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/9ae3d0a6-4194-3d4f-965a-0542ca44252e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:fe:93:ed:b8:40:89:78:2c:0d:83:95:b4:c8:dd:b9:8a:96:
         c7:dd:2a:04:bf:31:fe:5d:2a:38:92:ec:0b:d8:4f:88:e0:04:
         e2:ae:e2:73:59:67:c6:76:ab:80:55:5c:77:39:2c:1a:9a:88:
         be:ba:cd:9c:50:55:45:8c:22:76:15:21:4a:30:66:7a:ab:a0:
         ba:d2:66:b5:7f:87:91:b5:43:01:cd:c1:9b:04:d0:ea:ee:69:
         8c:4c:16:df:5d:3f:0c:4b:51:87:ec:db:1e:4a:5b:41:27:2d:
         9f:0c:11:ac:df:c9:a3:c3:63:f5:b1:48:bb:53:1e:36:88:9d:
         ad:0f:ba:ee:fc:00:0e:13:b3:a9:71:ad:92:b9:7b:ea:8b:e4:
         b2:e3:cf:9b:97:4a:2e:be:83:e0:45:b8:d8:d0:4f:67:74:98:
         a4:89:36:29:94:91:39:64:71:89:29:44:dd:13:67:ad:47:95:
         07:86:3f:7f:bd:cb:5b:93:a8:71:db:1c:e8:bc:56:34:98:a4:
         aa:92:3c:2c:2b:76:f9:4e:49:fd:9e:7b:63:be:a8:23:32:38:
         bf:d4:a1:90:75:da:6b:3b:0c:3e:db:b5:eb:3a:81:0e:77:c8:
         b4:d1:d9:41:7a:24:9b:cd:cb:e6:b5:f9:24:9d:79:c9:d8:72:
         7b:89:30:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:22 2025 by rpki-client