Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
File:                     af0871d5-e0fa-3865-8cdf-a359d771daac.roa (raw, json)
Hash identifier:          FTgbXNNMIZ9kgQrJQJ8cFn/wpKFPtEJYJKLxak1suiE=
Subject key identifier:   48:6D:D6:14:10:01:4E:A5:47:C6:95:8C:FD:8B:18:3D:0D:D4:F9:0E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B8B616C2FB9896B1A5C40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8b:61:6c:2f:b9:89:6b:1a:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=f44b6ac9-aa8a-4867-83b3-defef797dad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:2f:37:42:83:6b:d7:18:8c:7b:4a:cc:15:
                    0e:ba:d5:d1:dd:f0:0d:ca:8b:2e:88:4e:80:51:67:
                    dd:8c:2b:c2:8f:df:50:d3:e9:b1:5a:ac:57:84:d3:
                    22:53:a6:66:f0:da:ce:a5:6b:49:07:3a:ec:d9:e2:
                    ea:38:2e:90:00:9c:d7:26:d5:22:41:9a:ae:e8:5f:
                    a9:b3:55:50:a0:c2:67:38:75:fb:fe:aa:42:f7:6b:
                    58:0d:74:25:31:24:2b:df:24:a3:e8:55:8c:f6:82:
                    9e:02:1a:86:74:76:24:0f:74:df:9e:47:5d:63:a6:
                    31:ad:ae:3e:ba:47:3e:2f:c6:91:9b:5e:c7:f8:3b:
                    55:43:a4:94:3e:b2:47:35:8c:0e:8d:c2:f9:e6:65:
                    8b:78:8f:07:d9:e7:d6:28:68:b5:c5:de:00:1e:47:
                    e3:75:c8:36:56:ef:b7:2a:0d:51:44:39:96:3b:c0:
                    85:e8:30:05:a5:4d:2c:eb:60:0a:69:4d:17:1c:00:
                    15:98:61:d7:f5:34:25:85:af:af:8d:60:b6:df:90:
                    48:2c:03:50:27:aa:b1:1a:57:0f:0c:52:84:c8:4e:
                    60:15:ef:e4:26:06:62:84:77:31:50:c9:b3:4d:76:
                    56:c5:92:0e:7a:9d:22:ad:11:1b:3c:58:be:2d:45:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6D:D6:14:10:01:4E:A5:47:C6:95:8C:FD:8B:18:3D:0D:D4:F9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:6d:d4:24:87:d8:ea:dd:ac:00:e2:99:94:c3:80:16:19:e5:
         71:fc:e3:cf:78:77:48:47:f1:29:e0:41:e9:10:bc:cf:68:50:
         56:26:6b:4f:b1:68:2b:9c:02:4f:38:79:12:73:d6:1f:14:d5:
         2d:8a:28:0f:d3:4b:1b:ec:60:5a:a8:bf:5e:83:40:95:0a:5e:
         b7:f4:83:7f:06:5a:3b:ea:0e:ef:0b:24:99:05:4a:78:58:88:
         62:21:a9:29:01:83:ef:f0:72:a3:bc:01:e0:00:2e:95:bb:12:
         de:01:e4:24:64:4a:1e:0c:ec:e4:f0:45:d9:ea:4c:34:9c:7c:
         93:f9:84:23:ec:5d:39:b7:ab:92:c2:90:1b:ab:76:52:39:a2:
         f8:3d:3a:1e:12:c7:36:de:e5:7e:82:bc:fe:da:c7:ad:f9:4a:
         46:34:cf:15:c0:6b:9b:5b:92:c8:44:7e:02:c7:15:14:37:38:
         ca:f5:47:7b:43:4a:49:fa:6d:05:17:26:f4:78:85:5d:2d:17:
         ee:d6:26:48:ab:bf:96:df:e6:b4:d5:e5:47:aa:48:1b:61:e3:
         4e:79:e5:fa:86:08:f6:4c:21:b1:16:27:1d:bd:e0:99:d0:7d:
         e8:40:af:2d:e9:d0:9c:2f:bd:aa:90:d9:11:05:be:e3:55:56:
         be:29:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:13:02 2025 by rpki-client