Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa
File:                     f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa (raw, json)
Hash identifier:          WBY7YvdzQIfZB+Ke6KlJSx+DDES9qgzoFQFD9G4s8WQ=
Subject key identifier:   F3:4E:2D:BA:62:0D:75:2A:3C:1D:1A:7E:95:82:85:27:78:20:5C:E6
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B9BB50E13630E1AFE3180
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9b:b5:0e:13:63:0e:1a:fe:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=02d0d7ca-134d-4fed-a910-86d002efb9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7e:2a:51:53:e8:94:66:e6:4e:4a:fb:c9:53:
                    23:76:49:25:8d:0b:91:7f:ab:74:cd:0f:e6:a1:37:
                    98:6e:ca:63:bd:3d:7d:36:82:29:df:ea:ce:79:1e:
                    a9:5e:b4:af:98:97:9b:d0:74:af:ce:cb:a5:ee:cb:
                    1b:d6:19:69:82:7c:c6:95:a0:75:07:34:66:60:c1:
                    33:37:34:75:3d:83:ba:43:62:25:f7:80:7e:d9:91:
                    25:f1:f0:43:a4:77:62:7f:32:cc:41:f1:4c:dd:29:
                    af:77:b3:66:f3:f4:d6:33:bc:7d:22:fa:70:75:ac:
                    73:33:2e:34:00:8f:d3:e7:df:45:7d:0f:75:6e:bc:
                    60:75:a2:da:8b:eb:83:18:ff:d8:e2:bd:11:e2:44:
                    94:db:e5:83:01:5c:0c:03:f6:12:69:57:ac:a9:fb:
                    57:c4:ff:6a:20:54:1e:dd:fd:00:b4:02:48:1a:4d:
                    87:f2:76:b7:f9:82:8c:8b:a4:7a:f8:13:7b:05:4c:
                    52:28:f3:1a:7b:07:68:79:dc:75:93:41:7e:23:c3:
                    91:99:9d:06:a7:b1:20:95:44:a1:93:6f:3a:ec:12:
                    1f:b2:e5:9c:6b:ed:5b:d9:1b:dc:19:37:d0:2e:47:
                    59:a7:b9:ff:a7:80:aa:93:86:bd:77:4d:d7:33:5e:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:2D:BA:62:0D:75:2A:3C:1D:1A:7E:95:82:85:27:78:20:5C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:3d:60:5e:73:81:54:e9:48:a7:09:44:47:d0:74:7f:6d:
         9b:71:28:47:89:0e:4d:f2:2b:57:28:25:33:d5:8f:5b:67:6e:
         23:02:89:29:b7:ba:6b:73:86:4f:48:60:27:be:b8:d7:12:5d:
         7a:29:67:79:ab:7c:3d:0b:71:ac:b0:d8:64:11:33:36:9c:cb:
         cd:38:90:30:87:4b:5c:ba:a8:93:c1:39:8c:a0:31:0d:87:4f:
         c4:55:32:05:a9:1b:9d:96:8d:58:9d:fc:b2:c3:71:61:f9:b8:
         fc:5c:d2:1d:6c:f0:ec:6a:e8:a8:df:32:70:74:07:99:11:1d:
         d6:f3:22:de:7c:78:04:96:dd:44:07:31:da:f7:ea:55:b6:32:
         04:a8:48:97:08:21:49:39:87:ef:32:b2:bc:1e:37:d5:5a:7e:
         cf:27:c9:c3:8d:66:d3:05:35:e0:57:35:80:39:70:05:d3:e0:
         ae:52:fa:e1:95:92:f5:5d:5f:1d:e5:cb:36:51:56:24:b1:1e:
         ef:b3:2d:01:2e:71:a1:17:ac:be:b8:a2:ff:27:3c:81:f7:e5:
         ee:84:50:f1:9e:c4:e3:b7:58:07:d0:6a:3a:36:a0:1f:20:ad:
         42:5d:5a:9f:65:a6:59:ec:06:b5:98:e1:8a:82:e4:b6:d6:80:
         fc:8c:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:01 2025 by rpki-client