Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa
File:                     86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa (raw, json)
Hash identifier:          Vtw416cyAXmC+rSImrLBRX1NSQKVQsHfcMUmlwxUJDo=
Subject key identifier:   F3:7F:6A:50:5F:4B:95:CA:79:29:E3:88:94:D9:58:DB:FE:FF:7E:76
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F43285849F9DFC68F3D701ECFDC6B5F00
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     23158
IP address blocks:        104.255.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c6:8f:3d:70:1e:cf:dc:6b:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=4ac5f7f4-8257-4ef0-bec2-aacc07927ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:84:b8:89:ca:48:9a:a8:a3:e5:32:57:90:
                    a9:15:99:33:a3:40:75:40:c7:06:2d:ea:5e:82:95:
                    85:6d:f9:41:42:34:6f:38:f9:d7:a9:55:c5:d6:f7:
                    0d:f7:09:ec:10:48:8d:af:89:46:e9:b7:ac:b4:90:
                    72:48:6a:ec:87:80:3f:7e:f4:35:77:43:61:6f:75:
                    63:34:eb:13:9f:96:84:6f:5f:f3:7b:4a:58:b3:0e:
                    87:d6:45:67:4c:df:d0:03:97:2e:a5:5b:19:a0:0c:
                    ca:cc:4d:8e:f6:c0:80:29:2b:e0:52:ba:b8:50:b0:
                    73:34:1b:6d:45:28:66:03:1c:db:7c:bf:df:fc:13:
                    63:ac:28:e4:ce:86:3d:6c:b3:86:f7:1f:df:f3:b7:
                    9a:12:50:1e:e7:36:7d:99:64:b7:74:86:8a:04:c1:
                    38:d6:ba:01:8d:c8:0f:1d:3e:3e:ac:cd:29:a5:b0:
                    5f:fa:12:1d:37:9a:d6:8c:1f:1e:c0:bb:2e:74:7c:
                    69:e2:7a:30:0e:f4:51:38:f3:e7:d5:98:fa:67:82:
                    5c:b3:b9:ea:29:93:5b:7d:b6:25:70:d4:69:7f:2f:
                    8f:08:66:78:a4:1f:98:55:c2:e8:80:cc:e6:e6:ec:
                    93:69:e6:37:38:90:4a:77:33:52:c7:02:50:f1:bf:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7F:6A:50:5F:4B:95:CA:79:29:E3:88:94:D9:58:DB:FE:FF:7E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:36:e1:68:4d:8a:37:2f:71:81:7e:b4:d4:d6:a0:4c:44:
         c7:65:e2:8a:43:c4:c2:29:ba:59:2c:bb:c7:b9:99:54:94:53:
         c3:0d:e1:86:4b:ef:90:26:50:49:84:5d:9a:a0:8f:6c:13:e7:
         22:3b:d2:82:e1:ff:e1:85:4c:64:e3:37:06:22:aa:eb:9c:c2:
         eb:7e:bc:8c:c3:a6:02:1a:3b:b5:15:b2:e1:42:2d:88:61:f4:
         fe:7b:81:5e:5c:e3:b4:0f:73:22:2b:a8:db:4f:be:b9:99:fc:
         25:85:d5:05:e9:27:7a:60:14:6d:27:ff:88:9a:a5:1f:0a:55:
         82:75:34:fc:db:8e:2e:49:82:a0:c5:e4:20:55:5a:2d:24:5f:
         d6:50:06:2a:8d:3c:7a:3f:2c:42:fb:e4:eb:02:d3:70:af:0e:
         fc:ca:ef:5f:77:18:a1:2f:f0:17:55:58:48:3a:78:56:06:9d:
         a3:91:c4:73:4d:29:0b:e5:07:f2:bb:91:79:5d:b4:a7:ba:ea:
         1e:89:51:32:7c:1d:39:46:49:8f:f0:2b:28:33:11:53:53:14:
         d3:93:6e:98:b0:d1:66:be:98:24:d1:9e:06:fd:0c:83:97:b6:
         a1:c5:4b:d3:33:69:8f:40:16:bd:65:46:e8:2a:4d:fb:a7:8a:
         c6:f3:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:45 2025 by rpki-client