Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/34a00410-23f5-3387-9b65-82e329d7fd50.roa
File:                     34a00410-23f5-3387-9b65-82e329d7fd50.roa (raw, json)
Hash identifier:          h+WDogeNKM6Hp7J6gdAd03xrHOUfEDzjZzShJZBfqGw=
Subject key identifier:   3B:24:B1:15:93:E2:9D:52:D7:FB:C1:4F:A1:AE:15:E6:AE:1B:3B:61
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F43285849C20A0B307DD3D7FF04413D00
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/34a00410-23f5-3387-9b65-82e329d7fd50.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        104.193.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0b:30:7d:d3:d7:ff:04:41:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8b5ef968-783f-4d89-9b22-f86c6a34cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:10:42:73:a8:38:a4:05:1c:c6:48:99:68:
                    62:43:50:9f:f4:17:6a:5e:53:f0:4b:8f:4d:2b:83:
                    ee:c1:c8:3a:5f:cd:83:05:92:32:5a:6b:5e:51:1d:
                    86:14:83:34:37:ca:a3:b2:8c:4b:57:8b:12:25:65:
                    6d:15:87:80:4b:7a:16:64:13:b6:a7:2d:8c:34:a1:
                    ae:19:2c:36:2d:46:4a:fa:fa:f8:f8:01:e1:37:76:
                    8c:20:32:11:22:5c:33:03:37:8f:17:b4:68:8a:90:
                    3c:02:e5:db:49:35:46:f3:4b:7b:99:0a:52:74:c4:
                    d4:90:16:e3:df:61:03:f4:bd:20:8e:33:95:5f:48:
                    e9:d9:97:8d:b0:2a:1c:df:18:83:29:95:3d:4b:d8:
                    a1:53:4e:8a:9c:93:9b:a1:28:f7:32:92:c7:6b:e6:
                    d6:75:a6:53:60:d8:44:e2:88:5b:66:11:83:12:2a:
                    ca:8e:13:a7:d5:4b:96:3a:7a:e7:6d:10:ea:30:36:
                    50:1b:28:f0:a9:1c:62:63:3c:c7:e4:a6:2f:36:7c:
                    98:66:45:6a:aa:e3:5c:12:f4:97:8c:af:c0:ef:ce:
                    a8:12:11:f0:bc:22:55:6e:af:20:b6:92:fc:0a:7a:
                    42:02:77:4a:45:93:84:21:c7:f5:0e:ea:b5:69:5b:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:B1:15:93:E2:9D:52:D7:FB:C1:4F:A1:AE:15:E6:AE:1B:3B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/34a00410-23f5-3387-9b65-82e329d7fd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:80:5d:f0:66:77:39:c6:12:30:18:2d:57:da:a2:ea:75:9e:
         50:d7:fc:e3:15:30:d6:25:b0:32:5e:19:5a:26:40:51:62:2b:
         01:11:37:fd:1f:e2:f3:12:13:58:d8:2a:97:df:3c:4a:44:cb:
         68:17:76:8a:3f:f9:53:14:81:3b:6f:5f:29:08:a8:5f:99:39:
         50:c6:7f:ea:5f:0d:23:75:46:27:38:20:a2:dd:ef:2a:7e:c0:
         d5:0f:ad:aa:50:f7:88:b1:d1:08:80:f5:6e:9c:4d:7a:9d:e4:
         c2:27:8c:fa:d6:c3:4f:90:07:d3:88:3f:d6:2a:e7:93:ec:96:
         19:32:2c:a4:18:3b:5e:f5:6f:d0:c1:74:8a:6b:3d:77:cf:1c:
         45:31:72:54:7f:00:85:e7:33:de:6e:80:b4:e2:ef:e2:b0:85:
         57:50:10:a8:06:d9:77:43:11:27:3f:c1:49:d3:81:59:9a:8e:
         26:bf:70:d6:24:03:54:66:77:a6:c3:71:e5:7f:37:66:ff:1e:
         03:9c:e6:f4:82:36:c4:70:ba:3b:c1:92:ef:62:3b:99:45:1c:
         a0:90:e5:2e:66:92:c4:3a:26:35:2f:88:da:c6:47:0f:83:85:
         e4:ef:7c:91:27:2c:2c:ce:5e:9f:39:5b:32:1d:14:08:98:37:
         5b:7e:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:28 2025 by rpki-client