Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa
File:                     63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa (raw, json)
Hash identifier:          Ns6bluqPDsiNV1Q26YM2VVYDLH8ZdaUHMC+aDCNKlmc=
Subject key identifier:   0E:E2:F0:A1:93:7E:63:47:20:EE:93:F6:42:E3:49:E3:3C:0D:7C:AC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B7AEF7E4A401B46BDA380
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7a:ef:7e:4a:40:1b:46:bd:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=cd8cf8aa-dc38-4bc0-8939-7661a4819557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:89:6e:a8:e8:6c:9b:cf:27:9e:f1:32:fa:
                    18:59:80:89:2b:7c:93:ee:59:0d:0e:a5:c8:fb:3d:
                    9f:29:20:d5:24:45:15:0c:38:d2:ea:6e:fe:07:96:
                    05:0c:7e:a1:a5:81:3a:1c:a8:a2:61:39:c0:b7:b9:
                    f0:d1:cb:89:58:6c:b6:41:77:a3:f3:9a:e4:e1:4f:
                    3e:3b:f8:25:73:38:1f:00:4c:e5:73:b1:38:62:0a:
                    73:6f:31:be:d3:ab:07:9e:94:29:e5:77:a0:43:3e:
                    c6:61:21:e9:9c:37:70:d6:cc:23:db:fd:07:79:f6:
                    9f:ac:cc:1e:4d:9d:42:37:73:07:cb:26:80:db:6c:
                    a3:2c:dc:45:6c:c5:b6:d9:9f:31:67:41:60:03:d1:
                    0c:ec:5b:40:ea:b0:b5:16:0a:80:44:9b:d1:8a:e5:
                    06:dc:1b:d2:d0:db:40:da:f7:d5:19:1c:81:d9:61:
                    6a:17:d5:ab:da:9d:4a:68:31:66:cb:d3:19:2b:9f:
                    77:cd:46:1d:f8:78:27:84:3d:e0:47:74:33:fd:c2:
                    75:92:1f:d5:6e:80:9d:b6:1e:0b:6a:88:52:ac:4c:
                    6b:92:32:93:5e:3e:f1:d1:14:15:cf:52:75:ad:45:
                    97:2e:13:aa:53:eb:e5:12:ba:52:5a:d5:87:08:91:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E2:F0:A1:93:7E:63:47:20:EE:93:F6:42:E3:49:E3:3C:0D:7C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:5c:33:04:6e:e9:34:5b:f1:fe:e1:8f:28:13:14:01:90:
         c5:80:b0:a3:d9:5b:6f:32:78:8d:50:e7:97:d5:61:1a:cf:f7:
         59:c1:cc:7e:5d:45:0a:fe:83:63:c7:7d:02:97:5c:06:c5:d0:
         2d:68:23:d9:f4:a1:79:65:37:5c:0c:c3:aa:ad:5b:54:a5:5e:
         81:52:15:90:d7:66:71:79:44:43:81:5d:98:fe:b0:fc:f5:e3:
         98:e5:2a:36:71:fb:c4:2e:5e:cf:08:c2:93:74:5e:65:a0:de:
         15:ac:fb:5b:48:36:84:a4:d1:90:fb:b0:21:f6:49:2d:9b:37:
         f4:c7:1f:a4:b3:84:e7:ff:c8:5e:e2:da:7b:98:db:b6:83:e2:
         29:8b:52:59:77:28:ba:22:61:df:07:5a:54:9f:b3:62:51:39:
         c4:45:60:32:43:6f:7c:1f:a0:de:84:d3:11:ca:2c:4d:b9:6a:
         85:89:7d:b9:e8:a1:6d:37:b8:8b:c8:6a:48:e6:4d:4e:62:7d:
         9e:58:0f:4b:9a:f7:d1:df:75:8b:08:fa:64:79:c0:6a:9b:48:
         70:6d:53:17:a3:9d:51:3c:9f:2b:26:54:7d:c2:f2:ad:35:b5:
         f5:f6:4c:9a:23:1c:83:b9:ae:3e:ec:be:81:01:1b:57:0e:57:
         8b:39:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:32 2025 by rpki-client