Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e104cd87-2d47-3e17-9df4-60f985d779c2.roa
File:                     e104cd87-2d47-3e17-9df4-60f985d779c2.roa (raw, json)
Hash identifier:          T5+yk4x6MsPYskj9X73RhM4rbX+H+Zgdalt+tanlI2s=
Subject key identifier:   15:89:8E:43:76:FF:6A:99:8A:9A:80:2C:7D:1E:E1:BD:17:D3:4A:AE
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C0128EDF4C19B3AD35B760
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e104cd87-2d47-3e17-9df4-60f985d779c2.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        104.218.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:12:8e:df:4c:19:b3:ad:35:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=31c5d9dc-53df-43c5-800a-7de2159b7c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:f6:c5:47:ba:49:b0:46:84:8d:39:c5:c6:
                    90:68:9f:15:63:d9:02:8e:f5:25:b1:75:8e:ce:db:
                    c0:d8:39:96:85:b3:f4:2a:4a:8a:6b:18:0f:14:41:
                    8f:74:34:a3:3a:17:71:46:18:33:92:42:93:68:dd:
                    46:9b:fc:38:c8:34:6a:2d:ff:61:58:ba:0e:9a:89:
                    d1:f2:eb:c4:7f:95:2a:c1:e7:f0:95:05:00:70:cc:
                    74:b3:71:de:7c:73:a5:da:df:f0:3c:db:e9:e2:60:
                    6a:3c:7d:73:45:78:1c:6a:48:66:6e:6f:46:81:3b:
                    62:81:36:18:0e:c0:df:bc:d6:d3:9f:86:2d:9f:c7:
                    d3:d6:82:78:22:98:6b:d5:27:7f:c5:7e:5c:fe:76:
                    88:8b:83:f0:94:ed:05:36:bc:a7:c8:12:54:78:f7:
                    ca:34:7b:ec:2a:f4:69:a6:c7:25:02:d4:de:e3:62:
                    2d:de:8e:7c:94:7e:32:c4:39:5a:5f:99:1f:a6:d9:
                    29:1e:ab:40:f2:fc:d1:e7:3d:12:05:9a:43:10:00:
                    bd:da:24:f6:c5:8c:89:5f:76:f8:05:9f:67:a8:96:
                    f2:db:a5:eb:c1:dc:e7:ac:f1:07:c4:79:9e:7b:e6:
                    bd:12:50:c7:f6:6d:43:1f:b1:a8:7e:d1:f4:6c:16:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:89:8E:43:76:FF:6A:99:8A:9A:80:2C:7D:1E:E1:BD:17:D3:4A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e104cd87-2d47-3e17-9df4-60f985d779c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:0d:be:f5:0a:9f:b3:3b:ad:67:9f:6b:16:8a:30:5d:0b:
         6f:6f:5a:9f:f5:e1:67:3a:3f:ce:c1:71:64:97:dc:1a:4f:12:
         4f:ea:ab:06:d9:9d:b8:68:b5:d1:af:0a:ad:4f:ab:88:f6:51:
         52:9d:f4:00:82:c4:0b:10:10:f5:8f:49:59:b5:b3:07:08:13:
         f8:ba:f4:02:c5:39:60:06:59:aa:ba:21:78:4f:ab:d6:87:cc:
         b9:c6:c4:55:30:54:14:8b:53:f2:0f:99:f3:17:24:5d:c5:13:
         e4:b4:af:39:a4:08:68:26:48:d7:3d:44:43:89:c4:52:ae:40:
         78:ea:e4:65:5b:2c:3c:be:6c:40:68:18:90:31:40:7f:94:ef:
         26:6c:52:38:35:ec:8d:2e:4d:f5:e2:42:8c:9c:1c:b7:e9:cd:
         dc:05:9f:24:99:e3:c3:92:c8:e0:ea:e2:16:21:3b:65:a2:64:
         0d:1e:18:82:9f:d5:d1:64:04:d8:8a:fe:4a:1b:31:83:ba:a3:
         8b:e3:6e:b2:d8:3f:a1:5b:d5:48:82:ce:c4:4d:8f:bd:00:fd:
         b9:c1:df:8d:3d:1f:db:3a:f1:d2:d5:29:ea:a0:2f:c1:c4:9b:
         1d:41:dd:12:6a:c4:5f:7c:e1:9b:a3:ba:d4:61:d6:11:15:57:
         a1:fc:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:36:42 2025 by rpki-client