Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
File:                     05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa (raw, json)
Hash identifier:          OuxPIv02XJq2M8PM3J+T6mg5nwsxl6AvrcWSUQpSu1I=
Subject key identifier:   DF:8D:92:FB:A1:6C:2B:B2:74:D2:0D:B8:E1:22:64:B2:9B:B5:24:5E
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F43285849D85F9002A8F59EED67527080
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        104.192.137.0/24 maxlen: 24
                          104.192.140.0/24 maxlen: 24
                          104.192.141.0/24 maxlen: 24
                          104.192.142.0/24 maxlen: 24
                          104.192.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:90:02:a8:f5:9e:ed:67:52:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=91351480-9aed-4c8c-8ee0-8f32bf7e5036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:2b:4e:5e:eb:41:12:46:bc:f9:f9:36:98:
                    e7:a8:aa:51:81:00:56:21:37:76:8d:d3:e0:77:3c:
                    c7:38:b1:56:c2:44:41:0c:d9:98:97:ab:17:0c:16:
                    b0:8d:72:d8:15:dc:65:6c:12:d0:eb:2e:32:93:8e:
                    34:2a:ab:35:96:2c:b2:b4:f1:f4:a4:ea:c0:8a:46:
                    3e:64:7f:c5:94:9c:c7:30:7a:b5:1b:5b:eb:32:7f:
                    c8:d0:9a:13:55:c8:d0:98:3d:f6:50:2c:46:f6:ef:
                    20:f5:2e:b3:95:73:c1:53:35:76:bf:d6:1b:23:f1:
                    c6:e1:97:89:92:89:e4:1e:58:eb:50:a5:7e:38:5f:
                    1a:90:e0:03:e4:2d:f3:a5:bb:86:bf:ff:bf:0c:a9:
                    e7:44:18:6e:29:16:9e:1f:0d:12:01:26:aa:9a:15:
                    59:90:2c:e5:71:c0:74:63:cf:4f:78:3e:80:76:25:
                    2b:10:c0:10:cf:96:f2:eb:a2:44:b5:50:f0:33:ce:
                    0f:72:9c:4a:ed:ff:9c:49:da:2b:a1:de:ce:91:4f:
                    37:3b:c5:8c:f0:cd:74:b5:9f:6b:3a:c1:70:fc:ea:
                    3a:0c:38:89:fc:c1:1d:cc:42:a4:88:1e:e7:e5:93:
                    ca:8d:62:3f:8c:4e:65:5e:83:de:fa:1b:c8:43:fb:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8D:92:FB:A1:6C:2B:B2:74:D2:0D:B8:E1:22:64:B2:9B:B5:24:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.137.0/24
                  104.192.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:d7:4c:23:0c:52:56:7a:ef:1e:10:3e:cb:39:7c:5c:b1:
         4f:0d:e3:44:6f:57:37:91:42:75:1b:f9:cd:26:bd:53:68:f8:
         bc:16:aa:8a:2c:23:1d:c8:94:34:cc:88:da:55:a5:5a:67:8b:
         d1:37:ae:75:e3:85:d9:cd:89:c3:b4:d7:ac:cb:00:51:33:77:
         f8:52:db:97:ac:e8:0a:c6:10:70:0c:08:58:2f:27:e6:49:a8:
         39:98:e5:d4:a6:61:ae:a3:ab:03:0e:3e:aa:2e:5c:ef:3d:01:
         03:a4:4c:2c:b6:00:57:c4:1c:9d:9e:fc:6b:a4:e5:f8:e8:ef:
         a8:4d:d6:d1:de:ad:b2:e1:84:d6:a7:74:0b:d5:2d:87:b8:8b:
         f0:76:f4:8c:b2:88:29:9c:92:f6:8b:3f:63:41:08:39:d0:73:
         5b:b2:d8:d9:f4:35:c8:d0:0c:fa:08:a2:18:b7:39:2d:1f:00:
         80:6c:f5:2b:30:f0:ec:16:bf:af:fd:ff:9e:51:4b:35:d1:08:
         a4:d6:a1:a5:3b:09:90:cd:4c:9d:1e:a6:ff:58:25:4a:7c:62:
         42:a1:65:da:ff:0e:02:54:bd:9f:6c:2d:df:d4:fb:a9:d1:ee:
         3c:eb:a4:94:f1:d4:00:90:c4:2d:7e:f6:07:9c:fb:04:68:c6:
         2e:4b:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:21:20 2025 by rpki-client