Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/1e3ce679-e181-3e4a-b30f-ca92bd174ec7.roa
File:                     1e3ce679-e181-3e4a-b30f-ca92bd174ec7.roa (raw, json)
Hash identifier:          idO1naSL7l9dPvcRQDCgMFTLHU7EMCCMCfSSJNau6cw=
Subject key identifier:   CF:33:6D:0C:EC:15:C3:98:F1:F5:A6:39:06:DE:55:15:EE:5B:BD:A3
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584A38249E7D038338E01620D1C0
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/1e3ce679-e181-3e4a-b30f-ca92bd174ec7.roa
Signing time:             Tue 17 Jun 2025 08:19:49 +0000
ROA not before:           Tue 17 Jun 2025 08:19:49 +0000
ROA not after:            Mon 15 Sep 2025 08:19:49 +0000
asID:                     26658
IP address blocks:        104.243.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:24:9e:7d:03:83:38:e0:16:20:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Jun 17 08:19:49 2025 GMT
            Not After : Sep 15 08:19:49 2025 GMT
        Subject: CN=a9da874b-438c-4ebc-8a28-fdcb457c97c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:c9:b2:99:19:7d:14:3a:c5:ed:fb:7e:ac:
                    7c:b6:be:c7:39:72:bd:df:68:18:fa:b3:25:e1:45:
                    0f:b5:d7:c7:d1:bd:8a:80:e5:80:12:ab:41:fe:54:
                    83:46:c0:b1:d0:e0:d3:96:09:08:0f:95:61:9a:ff:
                    ee:92:ef:e0:a2:1b:40:c0:ee:87:50:e0:28:a7:73:
                    e2:84:80:b7:a8:51:31:c9:f9:fe:1e:67:c8:15:8c:
                    3d:04:3d:ba:45:c2:b8:52:4f:fe:8a:93:01:e8:a9:
                    e6:41:92:38:1e:0e:c3:97:d6:b5:d3:d6:f6:7c:8a:
                    58:b3:72:22:98:a9:33:ff:8b:4d:e4:c3:56:47:19:
                    0c:bd:4f:d3:87:5d:bb:9f:93:f4:4e:c8:a4:1e:13:
                    d5:d5:4b:89:1c:74:e5:2d:3d:0d:24:6a:3e:07:4e:
                    25:6f:fd:4f:31:6e:16:6d:9c:92:27:ef:47:3c:da:
                    47:99:0d:2e:f8:27:11:f1:dc:de:03:d8:3b:00:94:
                    54:e8:9f:ff:c8:78:4b:c5:a6:12:20:b0:3d:60:e5:
                    55:5e:08:aa:5b:fd:07:08:ea:bf:16:8b:b0:be:99:
                    c1:54:2a:ed:4b:cd:10:5a:e9:a2:f1:4f:c3:c2:51:
                    61:00:4c:4e:fd:82:f4:1a:60:7a:8a:27:5e:da:ec:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:6D:0C:EC:15:C3:98:F1:F5:A6:39:06:DE:55:15:EE:5B:BD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/1e3ce679-e181-3e4a-b30f-ca92bd174ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:f2:d8:cf:a3:c3:1c:81:ff:0b:67:86:95:39:81:93:df:
         75:1a:9e:07:0c:ca:3d:a9:80:d7:17:11:e6:71:c8:ce:a2:e3:
         a5:52:37:fb:c0:c6:bb:d8:08:5e:33:24:9b:3d:96:4c:83:ab:
         e7:65:3e:09:fc:90:8c:7c:4d:e2:a8:a0:7c:5b:2c:38:1d:d9:
         a2:6d:cb:f3:15:a8:11:31:6d:cf:45:83:68:25:dd:bf:e5:4b:
         0d:0a:1d:3e:c8:10:a3:fa:c3:7b:db:e7:bc:72:47:de:66:ce:
         98:40:35:d3:22:7b:30:af:bd:91:2b:d5:28:78:a1:b2:4b:f8:
         56:9c:a1:c0:64:2c:29:3b:fc:5b:f2:38:d6:bc:6b:8b:44:c0:
         c4:d9:e4:5d:24:8e:33:3e:4b:2a:7a:4e:47:a7:3b:a0:61:7a:
         80:c3:1e:57:28:67:c7:e7:be:f2:12:96:17:54:db:ac:8e:67:
         6c:d8:c6:0b:eb:61:8f:2a:52:29:bb:1a:8c:ac:18:21:91:ef:
         d4:34:07:6e:c0:38:41:4b:74:97:a2:76:de:b7:8d:19:a0:dd:
         6d:ff:16:58:1a:15:2d:49:5b:8f:11:81:ae:8a:03:f4:26:eb:
         e0:f0:4d:fd:e1:5d:83:aa:24:76:a2:e0:39:61:3d:e4:5d:38:
         e1:cb:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:56:03 2025 by rpki-client