Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa
File:                     a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa (raw, json)
Hash identifier:          NHwy4oIS1DJquQkxNNPo2COnRuG1ghALmyEvtq6x4l8=
Subject key identifier:   CE:0F:D9:72:2B:40:77:2A:47:56:1B:95:12:A0:99:B4:2F:C3:98:7E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849D42FB685BD6131A86C8C38B0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     54004
IP address blocks:        104.37.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b6:85:bd:61:31:a8:6c:8c:38:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4d1dce71-ef58-48d7-ac1b-0356e4e618a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:c1:f3:a0:15:b7:2e:6c:b1:04:1e:ec:61:
                    39:08:30:08:59:2e:4c:b9:b2:39:82:fb:2e:e0:7c:
                    ed:b5:ba:5c:ee:3d:ff:d6:a2:f3:c9:30:6e:43:eb:
                    2d:8c:6f:88:9c:5c:f8:79:9c:2e:b9:e1:b5:9e:d5:
                    51:04:e8:53:2a:6e:45:be:1d:1a:27:84:fe:fb:b9:
                    16:e0:76:46:3a:0b:79:45:2d:34:92:7f:46:1b:75:
                    0f:c2:b6:d5:cf:69:1e:26:1e:18:8f:c3:82:95:de:
                    30:e9:f4:62:0a:14:7b:ed:d4:28:e0:86:80:a9:e1:
                    50:c0:05:ed:42:57:f0:57:a8:3b:39:22:d3:b3:30:
                    cb:92:dc:fe:3d:b2:bd:cd:15:1b:33:4c:bb:01:67:
                    7a:2d:fe:01:c5:04:49:6e:c5:96:ca:66:b1:e4:b0:
                    94:c2:ba:7f:d1:75:dc:c1:6c:c4:32:45:d1:83:3f:
                    51:50:0d:f6:5b:3c:f3:3b:aa:d1:56:32:be:a4:99:
                    93:13:fc:48:26:7a:96:83:cb:18:b2:5d:d2:9e:34:
                    08:30:03:3e:a4:8a:0f:6f:66:b4:e6:dc:56:24:bf:
                    27:9b:4e:13:cd:31:da:0f:f5:b9:ab:a5:dd:cc:02:
                    58:bf:8b:db:5e:a5:97:70:b2:20:31:45:90:f5:55:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0F:D9:72:2B:40:77:2A:47:56:1B:95:12:A0:99:B4:2F:C3:98:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:c5:52:c3:c6:cb:a6:b3:9b:e0:1e:12:ac:aa:dc:b1:26:
         6d:ee:a3:c0:63:9e:ed:d3:38:2c:eb:a3:f3:13:a0:08:c3:51:
         cc:58:93:d1:04:fd:93:55:bc:b6:52:cc:f6:ed:30:87:1b:30:
         40:b1:a3:5e:23:03:4f:77:9d:11:3e:7b:5e:66:d3:4f:2c:e1:
         c2:1a:29:86:84:d8:83:fb:6e:3c:27:75:eb:4f:c9:72:e0:e4:
         82:9f:65:3e:a4:96:de:50:4e:61:f4:75:58:e2:2f:a6:4f:ee:
         d4:aa:16:6f:1a:63:af:e6:73:23:e2:66:ed:ce:1b:31:87:0e:
         6e:36:5f:e5:70:27:da:3c:7f:13:75:a8:f2:4f:63:d3:f0:5a:
         4b:51:3b:e7:71:3f:5a:21:5c:1a:a2:23:75:61:76:32:99:6e:
         1e:e8:42:2d:70:9f:fc:a0:57:8d:de:1f:01:17:e7:7c:f7:d7:
         f1:9f:66:c8:2e:f6:87:2f:37:d1:1e:0b:cb:c5:39:f7:f5:5c:
         68:f4:28:77:77:54:ff:50:1c:60:fb:3f:92:e9:a0:7e:f5:1c:
         f7:9f:28:99:bf:15:35:96:30:36:b9:47:db:29:21:c5:df:cf:
         15:b9:76:fe:f2:80:a8:00:dc:12:db:4f:5d:1e:bf:7f:cc:e9:
         4d:eb:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:42:09 2025 by rpki-client