Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa
File:                     bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa (raw, json)
Hash identifier:          QrGruZHJ/bFtpjO5BoLGZAG4l9qd6SKMncXUG+d7m7A=
Subject key identifier:   95:0C:D5:3E:90:C7:66:8F:1D:3B:71:81:9D:25:8E:32:DD:83:3A:4F
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584A1F9022E410B2821AB7E99480
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        104.218.205.0/24 maxlen: 24
                          104.218.206.0/24 maxlen: 24
                          104.218.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:22:e4:10:b2:82:1a:b7:e9:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=e2de32f7-9b76-49ad-a95c-8542256be434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:fd:80:91:b7:9b:7e:48:ba:6f:65:98:12:
                    ea:8b:68:59:b7:de:e7:a6:6f:37:6c:8d:98:15:b9:
                    da:99:27:a2:fa:fe:4b:90:be:af:78:f4:97:1d:7d:
                    9e:b7:0b:83:71:4b:dc:18:2e:4f:dc:37:a2:84:f8:
                    da:08:6e:1b:4d:fd:ec:d3:c5:50:c3:51:3b:96:26:
                    16:9f:61:c7:fe:b2:3b:b0:6f:37:64:70:a5:c4:c6:
                    47:e0:77:80:0b:9e:b1:5e:56:69:32:09:57:be:66:
                    08:32:0c:ec:c1:c9:7a:c7:ce:e8:44:b2:47:c5:1e:
                    75:d7:e9:47:3c:2d:ef:c3:4f:cf:e5:50:36:9c:1c:
                    34:c6:80:d5:1f:72:48:8c:89:8c:06:7f:82:22:d0:
                    5f:65:5b:09:0a:2f:93:cd:fc:58:55:8d:74:c1:df:
                    44:94:f3:5d:20:32:4a:82:c2:04:37:e2:bd:5b:85:
                    78:96:27:67:62:8c:90:c3:96:08:a2:fa:fb:99:61:
                    a8:1f:a6:40:92:fa:35:e2:e6:07:ef:f2:c0:6b:88:
                    dc:2d:67:eb:1a:fd:c6:86:a1:2c:ac:3b:3b:59:e4:
                    47:64:2c:9d:44:3f:36:e7:27:41:c7:be:b4:a3:ea:
                    52:6a:4e:f8:2a:4f:d1:61:f6:73:8b:2f:9d:72:e5:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:D5:3E:90:C7:66:8F:1D:3B:71:81:9D:25:8E:32:DD:83:3A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.205.0-104.218.207.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:9b:02:1a:60:e0:23:b7:9b:4c:67:12:04:0f:0b:6c:90:
         04:96:12:07:9c:cc:fb:19:05:c8:90:b3:c1:ba:a4:47:d8:5e:
         32:c3:de:2c:60:4d:82:fd:5f:c2:99:d6:4c:1d:a1:1c:f2:80:
         43:46:28:91:03:bb:54:cf:be:ec:83:ef:2e:8c:fe:ac:f6:07:
         e8:b9:c1:df:2a:aa:45:ee:79:d8:9e:df:11:84:3e:e8:28:ec:
         0f:cc:06:8e:1f:2f:08:ed:ef:4d:ee:f4:f3:b1:2a:e3:30:e6:
         e9:61:9b:76:44:15:c6:c1:d8:e6:3d:85:d4:1f:c7:ac:8f:e4:
         e4:ce:48:c9:fd:05:a2:62:2c:b7:41:89:31:45:8a:a6:ed:39:
         e3:88:f2:58:de:91:5b:31:1e:e6:05:57:7e:11:82:8e:b6:18:
         d6:a6:ba:40:4f:85:f9:e9:99:11:ed:1e:b6:d1:08:59:42:18:
         66:df:03:58:7d:fa:0f:1f:ec:b0:28:f9:96:08:b1:9e:de:93:
         94:6b:a4:7a:4f:9b:cc:c1:d3:d8:77:5e:a3:89:16:7f:e6:20:
         2a:dc:a3:a9:e3:a1:ac:e9:32:15:c3:d3:9e:48:b8:07:6c:1b:
         5d:6d:73:17:af:38:61:46:08:f9:be:a7:c6:b7:35:cd:28:1a:
         ee:55:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:52:56 2025 by rpki-client