Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa
File:                     58f3b9ab-ee81-3efb-90a1-932f6856911c.roa (raw, json)
Hash identifier:          VlIGLUXM/11a14GwbXgstLOcwW3UASL2TRV6K64vbz4=
Subject key identifier:   DE:02:CD:4D:F5:FF:40:69:C5:57:9B:81:3C:79:D2:66:4A:03:89:39
Certificate issuer:       /CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
Certificate serial:       010D0C9F43285849C0A4D40EBDF55056E32699C0
Authority key identifier: 5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     393431
IP address blocks:        104.219.100.0/22 maxlen: 22
                          2620:80:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d4:0e:bd:f5:50:56:e3:26:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=938ebde1-0e70-4ad5-8daf-54ad4ee58720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:9f:f4:1b:aa:61:32:d0:66:db:0c:c9:81:
                    0e:81:ef:ae:6e:44:17:63:3f:58:08:40:0d:d5:04:
                    d7:72:30:7d:91:fe:1a:5c:ce:9c:b3:fa:25:87:ac:
                    09:0f:0b:f0:08:b0:5c:08:ba:cc:f1:1d:7e:04:cf:
                    ea:33:c5:fc:99:7c:21:da:f0:c0:b0:59:19:36:19:
                    55:e6:fe:d2:1e:93:09:f0:30:1b:6d:f0:30:cc:a5:
                    b8:5a:6e:58:b1:a5:ed:fc:91:3f:8d:0f:77:22:49:
                    84:99:51:98:ec:bd:25:c1:15:77:9a:9b:34:2b:c4:
                    b1:46:96:41:a9:59:4f:82:26:7d:81:fe:52:2e:c1:
                    ad:40:ce:03:db:18:f1:fe:ba:57:5c:0e:d3:7b:1f:
                    3c:4a:21:73:5c:51:84:44:61:02:f4:e6:c5:2b:1b:
                    24:47:7a:e3:7c:82:a6:4a:96:0c:a4:28:0c:44:7a:
                    4f:17:41:2e:44:56:ad:8f:45:bf:03:5f:7b:59:a7:
                    61:86:c6:c4:61:72:ec:3f:72:a6:aa:5e:4e:05:55:
                    d1:b3:98:98:bb:21:ce:1c:70:91:97:3c:b5:f5:9c:
                    11:fd:f6:3b:29:8f:f3:65:3c:a2:0f:e8:6c:2e:1b:
                    02:c2:ec:d3:e3:8c:b8:a9:c6:8f:35:64:63:3d:a3:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:CD:4D:F5:FF:40:69:C5:57:9B:81:3C:79:D2:66:4A:03:89:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl

            X509v3 Authority Key Identifier:
                keyid:5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.100.0/22
                IPv6:
                  2620:80:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:01:09:7e:a4:4c:ce:a7:17:70:41:ca:84:d0:15:a2:8d:
         a1:fd:45:d2:a9:7f:95:a9:cd:9f:63:f6:55:ea:58:7c:47:7b:
         22:07:6e:1f:b2:45:48:c1:ff:4e:d5:db:c7:05:3e:16:ca:99:
         fe:48:61:0d:7a:66:a0:60:dc:7d:ca:35:65:5d:4d:48:89:81:
         5c:5b:e9:77:b7:eb:f5:32:bf:f4:87:ce:0c:d3:68:35:96:9a:
         5d:65:8a:4c:0b:e1:4f:29:69:3c:7d:52:dd:0a:fd:b6:a7:e2:
         5e:0c:7b:71:af:37:e5:29:03:32:27:a3:e0:44:e9:fc:22:81:
         5c:4a:43:b1:13:79:15:5f:86:f9:b9:b8:d8:15:2d:7a:df:5a:
         c8:4a:3d:ae:fd:dc:c0:75:49:4a:07:86:73:9e:01:96:63:70:
         01:8a:a0:ef:81:37:ae:4d:07:5c:72:d1:df:6d:5d:62:f4:4f:
         ab:5f:10:83:b9:eb:c6:88:d0:10:40:1a:f1:df:28:b2:18:44:
         b3:e0:06:aa:6d:88:ab:bf:10:f3:0f:39:2d:51:67:4a:ce:d6:
         cd:cf:af:5e:41:d3:b8:db:8d:9a:97:54:57:8e:dc:94:df:c1:
         3e:11:e3:37:96:7d:33:7b:0d:7e:1e:49:d6:80:0a:28:8a:93:
         cc:b2:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:15:41 2025 by rpki-client