Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa
File:                     1e85c596-69bf-373d-9906-1d381b3d01ef.roa (raw, json)
Hash identifier:          6+/LHjNt5W7IeYLnWWxuOB6EE6Ef2jFfHU6+M9LBO6c=
Subject key identifier:   22:16:16:FA:EC:0B:65:30:B4:C0:74:BC:C7:DE:1B:AD:8E:72:0C:E1
Certificate issuer:       /CN=0d76e4c1-4951-48f9-a654-18ee7c98157a
Certificate serial:       010D0C9F43285849D2CA27742F5CC1566066E000
Authority key identifier: BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     8987
IP address blocks:        104.254.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:27:74:2f:5c:c1:56:60:66:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d76e4c1-4951-48f9-a654-18ee7c98157a
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=ae827c1c-533e-4325-a221-6f889d47931b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:d0:87:d2:45:9c:08:97:f1:7b:92:09:31:
                    e5:7c:27:db:e0:d2:d2:cc:ef:af:74:00:44:21:19:
                    89:e0:9e:90:73:62:67:a2:7a:6c:10:53:97:16:d3:
                    28:31:8a:05:d9:fd:70:42:0c:b8:36:af:ba:9d:5d:
                    0e:b6:3b:20:77:33:46:23:e9:70:68:2f:45:58:d0:
                    c1:d3:a4:eb:70:b8:a5:31:57:f3:ca:4d:87:99:8f:
                    bd:58:e0:52:c0:ea:77:47:10:b7:6e:0c:44:14:b8:
                    01:50:ca:a9:56:33:3c:67:51:2b:66:45:62:f6:79:
                    05:90:83:3a:ee:e6:ab:fc:64:0d:16:0c:7b:e4:1e:
                    d4:9a:b9:33:50:4c:16:de:37:96:58:39:5a:aa:38:
                    3f:39:13:0b:d8:c4:a1:52:9e:9f:46:d6:85:4d:a4:
                    86:92:e6:38:f6:ea:41:af:1e:5e:0d:fc:44:ba:d4:
                    de:ff:b4:d8:b0:b9:6f:b6:4b:71:2f:aa:1a:1b:d4:
                    2d:01:f7:f9:c0:fe:cd:5c:5b:f3:b4:59:ec:eb:6b:
                    e7:75:53:01:0f:2c:8c:f8:07:99:87:a6:ca:90:a8:
                    43:5c:3e:e7:ad:99:b2:33:be:5f:03:d7:4d:92:a6:
                    8f:f1:64:be:8e:c4:bb:97:57:48:6b:4c:07:1e:34:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:16:FA:EC:0B:65:30:B4:C0:74:BC:C7:DE:1B:AD:8E:72:0C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl

            X509v3 Authority Key Identifier:
                keyid:BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:42:34:bf:71:a7:60:67:31:10:a9:17:24:c4:7b:5d:aa:14:
         7f:7f:d5:3b:10:e7:c1:8b:d4:cc:d5:c0:5a:c5:20:85:f5:47:
         d3:25:66:54:6d:4c:a9:20:07:79:b4:32:ed:51:a4:1d:f5:ae:
         d5:c6:fc:ac:34:45:ef:4d:e4:f2:11:a2:1e:94:61:e5:a0:41:
         17:d2:54:24:45:85:fa:b6:47:0b:b4:3e:f1:ab:87:c4:d6:ec:
         41:18:0c:e7:e5:4d:f2:4a:64:3c:f9:d7:70:68:2f:d7:e9:1e:
         47:9e:26:be:9a:cb:98:83:7b:e2:b3:6a:af:93:8b:17:88:7b:
         f2:a6:f5:35:fb:40:be:1f:02:0a:ae:fe:26:b1:8c:53:97:c4:
         97:98:a6:72:7a:5b:82:c6:5f:88:a6:86:cd:17:2b:11:d5:73:
         58:f3:ea:b6:fa:f1:f9:4d:d7:46:bd:70:f4:0d:93:c4:63:2e:
         08:96:60:b3:e2:2a:ef:cb:d6:9b:ec:2d:ff:29:0f:a7:4f:79:
         72:51:68:78:0e:bb:d6:0c:bc:0c:a1:b1:4e:e6:b3:24:d6:8b:
         2f:20:58:0e:d2:ad:5b:a1:f5:d0:87:e3:a0:6c:d5:d1:50:47:
         d1:10:03:29:ef:8d:9b:3c:3a:a0:ee:a7:d9:e9:f0:ed:69:54:
         77:fc:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:57:19 2025 by rpki-client