Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa
File:                     85f972da-dbfc-3722-afd9-96721c209d87.roa (raw, json)
Hash identifier:          n4lgorM8GK1agu7ulTKLDPwg7P8H5LI4vPNE4hfO9uo=
Subject key identifier:   4E:F1:6A:C2:39:94:2E:7F:F0:49:9B:F2:75:74:EC:76:94:07:39:F7
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F43285849F71513011CFCB89C9104BBC0
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        104.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:13:01:1c:fc:b8:9c:91:04:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=d57a0099-40e5-4b03-a588-5dc19ac766f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:c4:6b:be:d5:49:8a:88:66:8e:7b:cf:87:
                    b1:bf:6c:80:34:22:06:59:81:e6:53:de:ef:2f:bb:
                    1c:d0:92:71:48:9e:55:c8:35:2b:d4:f4:42:96:5f:
                    3a:76:44:e2:d1:5f:2c:c6:63:2e:da:6b:5a:3d:ef:
                    ce:78:3a:a4:cb:68:de:a2:65:a4:2f:d9:21:82:88:
                    1c:7d:58:1a:9b:ad:53:26:ee:85:46:ef:93:00:0b:
                    f2:5d:cc:7d:4e:52:53:2f:84:f1:84:53:c0:31:83:
                    fc:b2:7b:bd:18:38:28:97:75:20:85:4e:76:be:cc:
                    68:b2:7d:7d:8b:1c:81:89:4e:4b:c8:37:23:a1:ae:
                    e9:44:81:4e:0e:3c:f7:21:f6:c9:a0:5a:f7:c7:fe:
                    94:20:3f:81:f7:f6:5e:52:6d:45:d8:fc:d6:6a:e1:
                    04:67:33:f3:03:ea:1f:3a:88:8c:c1:0b:53:2f:b8:
                    2a:10:67:0b:75:32:b4:4e:59:5a:67:a3:54:ac:1b:
                    32:ae:19:4a:20:49:55:0f:75:37:49:18:bb:b7:7f:
                    74:da:55:41:37:88:9f:c2:23:35:d9:32:39:01:43:
                    08:af:3e:7c:ce:00:85:74:3e:fa:b0:74:a4:33:ef:
                    3d:21:0c:21:76:09:a7:b0:9b:1e:c7:a2:3a:a6:0e:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F1:6A:C2:39:94:2E:7F:F0:49:9B:F2:75:74:EC:76:94:07:39:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:a2:30:68:96:32:0f:fa:52:36:26:d8:5f:b4:2b:e4:9d:
         0d:19:95:d3:f8:23:33:84:26:1c:db:55:ed:c0:a8:4b:f7:ee:
         f7:f5:a4:6e:61:14:0b:05:02:4f:98:0c:8c:5c:8d:30:c5:91:
         c7:bf:db:e0:2b:2d:82:89:7b:2c:84:b2:9d:32:30:10:b8:f4:
         7b:d6:18:61:b9:42:a6:0c:a0:70:c0:58:f3:43:51:c9:cd:db:
         c3:4c:58:4d:5a:42:2d:3b:d7:6b:f7:53:72:d1:d5:ee:58:09:
         57:ea:d6:79:7e:3b:de:9f:94:29:24:75:35:4c:15:9f:9d:c7:
         fe:9e:1a:0f:ad:9d:08:a8:ce:7e:4b:ed:ae:c9:0e:0b:d5:c1:
         e2:82:18:d9:f3:e8:7f:87:a4:a0:2b:fb:c2:ac:57:2f:8f:ec:
         36:ce:59:0c:1c:62:f7:b0:37:1f:38:ca:2e:1f:db:73:b4:30:
         57:f6:a9:50:a6:af:6e:67:d3:65:b4:0c:50:6d:f0:e6:34:3d:
         b2:98:6e:ae:e7:c7:58:91:5c:09:b7:f9:0a:5c:4d:1a:1c:0b:
         6a:c6:23:5e:54:36:fc:28:1e:31:ca:c7:8e:81:f0:4b:2f:42:
         fa:f1:21:f2:cb:b8:59:0c:79:a9:0d:d0:74:c6:5f:76:4d:3c:
         4f:e4:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:31 2025 by rpki-client