Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/2bb95fab-60c4-3693-97cb-4077e742146f.roa
File:                     2bb95fab-60c4-3693-97cb-4077e742146f.roa (raw, json)
Hash identifier:          5xuvEdAhh1VWy1xZGYMlQjf9fUxmeE7xH8QcsEs5lw0=
Subject key identifier:   71:D0:0E:DE:79:82:6E:6D:3A:2A:98:81:05:86:04:3D:11:29:C7:BA
Certificate issuer:       /CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
Certificate serial:       010D0C9F43285849D42FA20EDFB25391A56DE0D0
Authority key identifier: 76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/2bb95fab-60c4-3693-97cb-4077e742146f.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        104.195.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a2:0e:df:b2:53:91:a5:6d:e0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=da5bb635-9f24-4915-b372-81dd72f62ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:08:53:4a:fc:8f:8e:b9:d5:3b:7a:39:7a:
                    d3:a6:13:27:f8:ca:83:ba:62:7e:d9:a9:a8:e0:18:
                    71:e2:04:73:97:be:2b:90:a7:81:05:05:82:22:7e:
                    d3:4f:96:01:62:f0:70:f9:a3:bc:13:ce:6b:bf:b9:
                    05:c4:fc:9f:ae:03:57:6e:85:da:75:4a:8d:f1:69:
                    66:52:fc:ca:b8:97:9d:16:3c:99:1c:cc:81:8a:55:
                    af:7f:ae:44:de:42:d5:fe:56:b2:f8:44:8a:68:03:
                    6a:e3:70:bb:7f:06:25:56:fd:90:27:fa:a0:e6:db:
                    38:f7:5e:4d:2b:54:8f:e0:28:6f:b3:de:21:a5:b6:
                    70:a1:3f:64:90:ce:34:2f:0c:a9:b7:fa:62:e0:18:
                    ae:84:63:f3:60:d9:ba:0b:e2:14:04:19:25:d3:62:
                    5b:e9:e4:08:eb:2f:1c:53:b3:08:df:a6:19:4c:2a:
                    17:4c:df:22:95:eb:0c:80:69:68:c8:cc:98:a6:c2:
                    7c:eb:a6:55:bc:e3:9a:87:84:0d:b1:f6:96:d0:2d:
                    25:f2:4e:d5:90:50:f6:af:77:02:7a:b2:59:a4:63:
                    0e:70:7b:32:b8:89:67:1c:35:44:c0:88:47:48:9e:
                    2a:39:4c:33:75:44:11:bd:05:39:0a:24:43:6d:37:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D0:0E:DE:79:82:6E:6D:3A:2A:98:81:05:86:04:3D:11:29:C7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/2bb95fab-60c4-3693-97cb-4077e742146f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl

            X509v3 Authority Key Identifier:
                keyid:76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.195.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:62:06:18:f5:30:22:96:84:93:bf:d2:a9:ab:5f:2d:a6:
         99:9c:81:e3:a6:29:b1:77:70:13:4e:ff:a5:a6:62:5c:d0:3e:
         58:5f:2d:1d:95:4d:0d:f6:01:f3:eb:34:9a:7c:38:33:6f:93:
         a5:bb:19:3f:65:1e:e2:f1:d7:1e:01:98:f2:33:29:c0:ae:4c:
         f7:6d:be:6c:8f:cb:2d:16:a5:40:7d:10:68:dd:1a:68:4a:d7:
         1b:5a:4d:d3:22:4f:d8:df:d7:53:68:e8:7b:83:01:16:be:57:
         cd:bc:4e:45:70:ad:b5:46:7c:d7:d9:f0:2b:28:70:9f:59:39:
         bd:37:af:67:c1:eb:05:f0:dc:98:b5:0e:72:0e:c8:57:f6:73:
         91:2c:de:fe:80:44:23:91:b6:af:72:da:6a:ec:80:83:f0:08:
         2a:88:96:db:ef:66:fa:fd:2f:59:93:55:db:77:fc:13:80:ee:
         6d:b4:e8:fe:ab:81:66:45:88:59:22:90:bd:f6:d2:7a:a7:07:
         f6:07:de:46:9b:57:63:1f:5f:f9:cc:a5:82:17:ab:cc:ba:27:
         34:f2:83:5d:47:cf:cc:50:5d:84:a3:e0:88:a2:88:b9:e0:e7:
         52:59:60:06:07:bf:03:89:bd:6b:5e:90:b0:dc:ac:23:5d:d3:
         c9:df:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:08:19 2025 by rpki-client