Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/07543b4c-0537-317b-9d20-69249549336e.roa
File:                     07543b4c-0537-317b-9d20-69249549336e.roa (raw, json)
Hash identifier:          HMOd1mD4/Qy3dosksd4j67/cRFkS/lr/pV8SkESy9/U=
Subject key identifier:   70:44:28:3C:97:A9:3D:E6:C8:C3:96:EC:84:6D:72:F2:AE:AE:17:8F
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B9CC49A1E01E45661C3D0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/07543b4c-0537-317b-9d20-69249549336e.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9c:c4:9a:1e:01:e4:56:61:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=dabf9e89-d05b-4aa9-ab78-f73c68c3347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:2f:1c:43:9c:de:4a:6d:19:a6:b4:c9:10:
                    32:8c:ca:d5:98:6b:ce:f3:43:9e:cf:0d:df:18:1a:
                    cb:f8:d5:da:51:33:a7:3f:8e:e4:58:cb:a8:61:78:
                    9b:e7:26:37:b6:58:76:69:d3:ac:26:09:5e:ac:22:
                    41:90:97:12:f8:04:5c:dc:71:3a:a5:23:89:9c:c2:
                    fb:a4:d4:82:92:b0:60:aa:ac:cb:a6:8d:a3:58:91:
                    b8:8f:c9:c3:99:18:1e:15:b5:7c:5e:2b:b0:fd:52:
                    49:6b:9d:84:88:9d:16:3c:97:07:08:3f:e4:28:1e:
                    bb:dc:73:9a:3b:05:65:a0:28:53:fc:30:0b:bb:56:
                    59:65:f8:d3:b7:04:fa:9b:b1:29:7d:03:45:60:ff:
                    9e:b4:e6:ff:32:da:d5:47:46:b2:b1:95:e3:9a:66:
                    40:63:d1:c2:10:13:fd:38:80:f8:7e:c1:9e:53:c7:
                    5d:e7:fb:d6:a7:b1:6d:51:65:de:b1:e5:96:41:24:
                    fe:c6:e5:22:20:47:fc:eb:53:97:74:29:d1:4a:85:
                    dd:bd:6d:e5:0c:60:89:5a:a6:68:ae:a3:6f:7b:be:
                    e3:9a:78:71:fd:90:bb:85:f2:ca:d2:ba:0c:27:b3:
                    dd:d0:7e:95:e5:bd:f9:c6:21:cc:64:bd:df:6f:e3:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:44:28:3C:97:A9:3D:E6:C8:C3:96:EC:84:6D:72:F2:AE:AE:17:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/07543b4c-0537-317b-9d20-69249549336e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:f5:81:cc:4a:59:56:65:b2:70:23:e2:3c:81:2a:a4:12:
         cc:07:d2:e8:7e:72:f9:3e:3b:65:31:ae:7d:94:28:c6:18:0a:
         8a:dc:ad:11:ec:ed:23:ad:d7:b6:30:03:2f:f9:b7:c1:67:03:
         25:b2:00:6c:91:f7:31:31:12:4f:61:cb:7c:9d:d5:03:ce:3a:
         26:60:a0:1f:6f:9f:63:4d:af:92:0d:2e:05:3b:41:d0:21:a1:
         1f:14:6d:e4:4d:4f:06:a4:be:44:21:61:59:18:9c:b9:5a:6d:
         11:e6:b9:6b:ea:83:ea:f2:d3:c2:00:65:b2:ff:51:1b:75:2d:
         39:b6:26:7c:96:ea:38:81:0b:af:23:4c:15:1a:b0:d3:99:ed:
         4c:f7:f5:8a:8f:17:d4:b5:38:55:fd:cb:62:44:7d:5b:b4:6b:
         7c:15:6a:9b:05:9f:f6:ee:c4:ae:40:e1:dc:9d:7a:c3:45:c3:
         61:f4:c3:94:14:e0:a1:7a:01:49:97:33:10:bc:27:c0:d4:fb:
         47:89:7f:63:59:6a:bb:52:ea:0d:0b:a1:95:cb:68:b0:93:ec:
         51:40:91:91:08:17:0a:b6:c9:2a:53:db:1a:1b:fa:87:f7:9a:
         44:48:33:b0:d7:ac:52:4f:00:a7:54:1a:76:af:98:aa:b0:a1:
         7a:dd:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:28 2025 by rpki-client