Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12b71e9d-4b44-39d1-984e-37eb4f64aec6.roa
File:                     12b71e9d-4b44-39d1-984e-37eb4f64aec6.roa (raw, json)
Hash identifier:          ipWoF0S3vELWHLwD9Bzn6a+ne72N18nQt57Qq09BqpM=
Subject key identifier:   59:76:C3:B2:76:FA:C4:D3:B2:BA:83:D5:54:68:DA:43:94:0E:02:6B
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B94DF1D8A44146985B080
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12b71e9d-4b44-39d1-984e-37eb4f64aec6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:94:df:1d:8a:44:14:69:85:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=10a6607f-29e2-4040-885d-0579311d10e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:85:e4:e8:12:54:42:9b:1d:ad:91:b6:9f:
                    af:2a:5d:4c:02:83:71:0c:da:b9:2c:13:db:77:30:
                    ad:15:e0:6a:3a:46:21:78:7b:3d:28:b0:5c:c1:e0:
                    96:1a:1f:5a:7e:6a:dd:ce:e9:98:99:06:ba:82:a0:
                    23:90:6d:53:cf:4b:07:53:c2:56:6b:a3:a0:dc:84:
                    2c:52:9f:db:44:b4:6f:fd:8b:70:96:b4:d0:f1:ec:
                    91:fd:e6:33:fa:73:84:16:f4:7c:2d:bd:aa:6f:32:
                    de:33:2f:6d:13:fc:01:3d:46:78:4e:6d:6e:a5:34:
                    bc:93:12:24:c2:99:95:44:bc:2e:dc:45:52:a3:82:
                    42:51:e2:06:55:ff:97:dd:65:b2:26:37:2c:37:38:
                    1f:1a:d5:b7:5e:c1:86:0f:b8:ae:43:69:03:44:94:
                    0e:03:17:32:79:d1:41:72:c2:e9:f9:df:1e:82:1b:
                    fd:cf:b7:ad:7f:e5:84:d6:1d:a8:13:50:cd:95:36:
                    b6:97:8f:65:48:57:6d:3c:bd:9c:90:24:16:9d:ce:
                    00:82:1a:05:58:5a:6c:8b:89:6c:f1:e4:81:de:58:
                    a7:39:7e:34:5a:e3:10:25:4a:34:db:be:6e:b7:bc:
                    ee:18:3e:85:e1:5c:b9:db:04:45:c3:1b:5d:a3:5e:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:76:C3:B2:76:FA:C4:D3:B2:BA:83:D5:54:68:DA:43:94:0E:02:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12b71e9d-4b44-39d1-984e-37eb4f64aec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:b7:9e:a4:19:36:5e:d5:62:78:3f:42:4a:3f:69:ed:76:
         16:c0:a5:72:70:e1:58:20:7c:ba:15:ea:9e:c8:af:85:ab:9b:
         fd:2b:5f:af:25:d9:02:7c:66:62:18:bc:95:b8:60:2e:de:4b:
         07:58:ee:09:85:3e:16:52:ef:9c:0f:ed:e7:8c:d2:f4:0d:e1:
         c7:f6:47:5a:77:82:ef:1d:ef:30:a2:fc:c6:a4:6f:1f:18:ef:
         77:48:41:ba:11:69:dd:7b:08:9c:9b:ad:71:2f:82:84:48:00:
         b1:da:78:37:1f:fb:cb:b7:3a:ce:ed:5c:e7:77:0b:6c:ca:2f:
         8a:f9:bc:c8:46:99:87:68:cd:8c:c2:a4:f9:36:94:69:c6:71:
         40:fa:6e:d1:2d:dd:49:3b:46:8f:48:9d:a3:8e:7a:0f:cb:3c:
         22:e8:2c:46:be:06:da:f1:17:c6:d9:d2:20:64:0e:06:7d:ab:
         89:55:1f:71:3a:90:5d:f3:51:9d:ed:69:44:9d:29:0b:30:e4:
         77:52:16:74:06:f2:4f:d7:e7:cb:04:a0:5f:3b:7d:b7:7c:a6:
         f5:2a:a9:a8:ce:36:b4:ee:7a:c1:09:39:b7:67:39:0f:0b:43:
         67:74:6c:e7:df:f9:a2:b8:73:98:0f:cc:86:4d:f1:2d:38:5c:
         f4:cb:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:51 2025 by rpki-client