Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/4c778986-c100-322e-84d6-85770a237c52.roa
File:                     4c778986-c100-322e-84d6-85770a237c52.roa (raw, json)
Hash identifier:          RRtRORu7/2z57Q7VEcn3iOZwTH8Uk03z2kOpxu6jB84=
Subject key identifier:   30:53:70:B5:98:CC:54:C6:37:B4:7C:D5:D0:DE:7E:EA:80:7B:B0:25
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F43285849CBCF98B3B9748CB7951D4650
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/4c778986-c100-322e-84d6-85770a237c52.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     46555
IP address blocks:        104.255.104.0/22 maxlen: 24
                          192.81.240.0/21 maxlen: 24
                          2620:11b:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:98:b3:b9:74:8c:b7:95:1d:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=273c41c8-976d-49ba-80c0-65b419f03639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:a3:a7:1e:c7:fc:59:3d:f0:97:6e:09:7c:
                    1a:96:ad:ca:19:49:4f:08:16:90:47:ff:db:d1:77:
                    2c:3c:fb:37:51:92:a2:8c:a3:08:88:03:71:07:92:
                    9f:9b:d7:0f:48:23:9f:5e:04:d4:82:b8:da:a6:e9:
                    3a:9c:aa:69:c2:5d:9d:5b:c4:7a:53:7c:8d:35:db:
                    a6:4c:88:43:7f:8c:9a:3f:ac:df:ae:30:df:de:9f:
                    27:35:e4:02:90:36:8f:61:60:a2:a4:1a:8b:70:a9:
                    62:c7:65:dc:e1:8d:b5:50:10:8b:c3:6a:1a:0a:4e:
                    a1:eb:42:5b:c0:4b:f9:bf:d5:cb:ce:3f:98:18:08:
                    8c:ab:42:a2:f6:96:a2:ff:a0:6c:1d:4a:1c:c6:f7:
                    e7:05:47:b6:34:30:7b:6d:5f:d1:2d:53:34:11:f6:
                    16:b9:5b:17:2d:4f:49:e2:a0:15:fc:69:5b:3c:40:
                    56:e0:05:65:cf:ea:38:bf:1d:39:bc:57:9c:f0:26:
                    8c:58:78:d8:02:98:28:ae:d9:a6:08:68:19:e1:b6:
                    44:10:54:27:9a:bd:5e:16:b6:ff:45:d9:a8:ac:13:
                    a3:39:06:29:a4:a9:d5:e5:61:15:d9:85:eb:b1:4e:
                    e3:42:29:92:3b:11:57:ac:b6:02:22:95:5d:6c:dc:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:70:B5:98:CC:54:C6:37:B4:7C:D5:D0:DE:7E:EA:80:7B:B0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/4c778986-c100-322e-84d6-85770a237c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.104.0/22
                  192.81.240.0/21
                IPv6:
                  2620:11b:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:5c:e5:78:4c:21:c2:48:d4:7a:b6:31:89:05:b6:25:43:7a:
         d4:1a:28:8d:9d:c1:71:2f:c8:59:bc:e3:09:6c:13:79:59:ad:
         e7:15:d7:c9:dc:be:fc:98:8a:eb:e9:f5:8e:2b:ef:27:95:2c:
         c0:a9:8b:57:14:fd:4c:a0:a9:0d:77:4a:01:47:c9:d2:9b:12:
         5e:62:7b:f5:f8:65:fa:d0:6b:06:84:5c:55:17:71:e5:b9:af:
         4d:53:49:c2:8b:3c:d5:67:e2:38:04:6a:af:2e:a2:30:e7:d8:
         1e:6e:3a:72:93:28:df:ca:4a:8f:30:7d:c1:76:9f:fc:d7:d9:
         08:53:30:5a:7d:c6:58:2e:51:9b:2e:98:5b:55:e7:e9:6d:b1:
         2b:c3:a6:26:5c:4a:74:15:41:bb:06:a4:97:f5:b4:6d:92:d7:
         4c:e5:d7:7d:38:6c:9d:a4:64:c0:e0:36:d3:18:b9:bf:72:90:
         28:ce:8a:c5:1c:cd:a9:50:54:55:be:52:c4:92:c2:50:91:c9:
         b8:00:66:aa:0b:f3:ee:ef:b0:48:b8:01:ed:bc:14:a9:d7:da:
         b3:c0:b6:c1:ba:82:2c:f7:ff:61:32:c4:a0:c3:58:c3:e9:74:
         32:1f:5d:28:40:a4:65:8a:2f:16:6c:68:a3:fe:c8:06:84:05:
         60:67:fe:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:30:59 2025 by rpki-client