Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa
File:                     4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa (raw, json)
Hash identifier:          NNalGmLQNZYdWqKsUvv+75pYbcdpQULWGQiRkZsJFeg=
Subject key identifier:   97:4E:C4:A0:9F:C6:B0:20:9C:43:AC:01:26:9A:7F:92:5D:F0:03:47
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AB91BA62FD7A28AC0D70D9B40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     9009
IP address blocks:        104.250.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a6:2f:d7:a2:8a:c0:d7:0d:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b10b66fc-e83c-441d-b336-338afe93dfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:ba:da:89:42:19:5c:1e:00:a5:ac:26:f5:
                    b4:d3:34:cf:2f:1d:22:c0:a1:26:3a:59:1f:3c:ba:
                    f2:3a:e3:f9:ad:60:9e:2c:b1:ef:9d:8b:f2:14:15:
                    a7:01:db:4b:1b:a4:13:8a:02:86:4c:18:0f:7b:62:
                    6e:f1:2a:27:52:ce:f2:f7:c7:69:b8:ea:ba:08:34:
                    2a:4a:67:ce:74:23:8d:64:fb:a8:f1:fa:35:6c:aa:
                    5e:56:e5:24:bf:09:46:45:10:8a:44:19:e6:23:24:
                    8b:d8:e3:81:76:60:1b:48:82:8e:44:72:75:a7:15:
                    c5:f9:b5:b1:bc:9e:1e:9e:19:34:2c:3a:45:0a:57:
                    3e:cd:13:ec:e1:cd:ea:f3:e5:93:39:a7:f4:71:d9:
                    9e:bb:55:31:5b:c4:88:c4:28:09:e5:77:ef:cc:b1:
                    1c:e0:33:5f:36:d9:d4:57:8e:4e:85:24:24:e3:df:
                    b5:d9:84:d2:c2:11:4c:9e:07:04:c8:5d:12:e2:87:
                    7f:e1:70:ad:10:13:63:5c:0a:4d:4c:fd:1a:d8:4d:
                    f8:89:97:31:df:00:26:9e:8d:2e:f7:8d:4b:1f:bd:
                    a2:d6:b8:eb:47:0a:b1:5b:5b:12:89:8d:62:72:4a:
                    cf:94:00:b3:fe:78:6b:e1:3b:07:49:e9:45:df:59:
                    39:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4E:C4:A0:9F:C6:B0:20:9C:43:AC:01:26:9A:7F:92:5D:F0:03:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9c:5f:f5:aa:ea:01:7a:a5:bf:87:3c:24:82:44:ce:2f:1a:
         2c:b6:0b:9e:c6:33:b8:03:b1:a9:ef:b2:44:d5:72:b6:e4:0f:
         3b:f0:ed:f6:66:56:dc:d7:e7:dc:eb:cd:33:91:93:9d:c7:3d:
         e9:84:62:c6:d6:8e:9a:48:cb:f1:9d:12:a7:c5:f9:0e:7d:2f:
         43:f3:92:a5:64:ea:a1:77:23:aa:ed:f9:98:ba:e0:7b:da:1f:
         e3:77:b0:1b:f8:47:65:ba:46:5c:6b:eb:6b:37:ed:3b:d8:4f:
         17:ba:5f:c6:f6:8d:b8:e5:4b:19:5f:05:f3:f0:8f:f6:87:37:
         4e:8f:43:ef:6e:32:26:9e:58:b6:f7:20:9b:f1:01:cb:4f:5b:
         2a:80:32:95:f3:32:db:63:63:46:30:d5:84:3f:3f:27:5d:11:
         ff:1e:28:d5:ed:eb:7b:b5:49:07:3c:60:fe:54:8f:70:90:45:
         d4:4f:1d:4b:14:fb:e0:28:48:77:f7:ff:76:12:b7:fb:40:45:
         eb:21:f9:24:d1:b9:f8:0a:4e:f4:d3:5c:75:4e:a2:da:34:d3:
         00:07:b1:e1:2f:e7:5c:8d:6c:cb:ca:b1:9a:56:21:b1:d3:34:
         c5:9a:55:74:7c:58:8e:f9:08:a7:30:cf:46:d3:05:d6:b8:dd:
         d4:9f:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:41:43 2025 by rpki-client