Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa
File:                     7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa (raw, json)
Hash identifier:          fv0Er1E5r7iMVjdf5+Gu7BMq7NrJfL7gT6EfprKJ9Gw=
Subject key identifier:   E5:10:ED:8E:59:87:FE:31:19:53:39:D3:38:AE:22:2D:30:E6:68:AA
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584A14655F2460334FCFF1060180
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     211936
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
                          202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5f:24:60:33:4f:cf:f1:06:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=1bcdc549-cead-4165-8812-602c20fa9f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:48:01:b2:b8:80:ec:c9:d6:17:2e:0e:f5:
                    84:1a:bd:9e:9e:0f:c9:d7:76:f2:b6:98:6f:43:c5:
                    55:b5:c6:b7:26:c4:d3:97:d0:42:ca:ae:df:f4:1d:
                    b2:1e:e6:92:b4:81:6c:30:0b:d5:a9:e6:ab:79:ce:
                    1a:f0:bc:ed:0c:53:fd:f9:e8:17:19:9e:81:15:2a:
                    ef:2e:c5:82:e3:d4:d1:80:ec:56:05:1a:d2:4d:78:
                    74:59:47:27:24:52:c7:67:7a:3e:d1:53:fd:eb:1f:
                    5c:f3:31:93:19:c6:bc:90:15:d0:47:63:85:68:80:
                    31:3c:19:85:f4:3b:83:74:6b:ab:37:f2:25:38:13:
                    81:4b:08:05:47:35:9d:70:d2:3e:9a:33:12:92:fd:
                    95:0b:9c:f6:f1:d0:e9:78:8d:08:00:b3:3a:90:3e:
                    0c:f2:f1:af:db:f3:77:87:bc:ac:8a:3c:f9:c7:23:
                    1a:b0:63:d4:08:bb:59:fb:02:20:92:6a:fd:97:4f:
                    42:74:5d:a0:84:28:14:78:a2:04:9c:41:4e:57:44:
                    92:af:98:fa:b7:af:89:d9:ce:f4:33:7f:78:38:57:
                    d6:39:0c:b2:a3:9c:df:c5:b1:57:88:e0:2f:65:6b:
                    66:84:fc:75:d0:79:3f:5d:65:75:f9:23:3d:b0:60:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:10:ED:8E:59:87:FE:31:19:53:39:D3:38:AE:22:2D:30:E6:68:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21
                  202.165.72.0/21
                  202.182.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e2:6a:15:ad:13:da:28:27:0f:e2:0c:9a:db:b2:93:24:28:
         c6:83:d6:22:6a:c4:86:30:73:45:e7:00:b7:bf:18:23:6d:7b:
         24:8b:e6:9a:64:f8:49:a8:6c:28:9f:a5:53:eb:ff:07:1c:0d:
         97:d2:c6:b1:1f:b6:6b:6b:b6:ec:64:fd:5a:de:3f:c5:f0:7d:
         30:1e:0c:0e:a0:20:9a:6b:81:b4:63:83:54:e0:93:d9:35:2c:
         dc:72:47:82:58:58:b8:e6:b0:de:98:b8:52:e4:1d:79:0d:b3:
         3a:11:85:ad:05:88:14:f5:48:ad:ab:a3:f7:06:df:b4:08:d9:
         33:cb:c1:35:cd:0a:52:5e:17:e4:43:f3:e0:57:08:4e:38:39:
         a6:da:1f:da:a8:1e:f1:1d:ca:18:a6:69:c0:57:87:0f:b3:d4:
         3b:4d:c9:db:39:f0:09:b0:d9:ab:b9:8e:4e:86:d0:23:b7:08:
         8e:ab:55:26:3a:87:5d:90:fc:2b:66:0d:b1:c3:e8:ce:1d:38:
         ab:c8:3e:b2:b5:c2:83:b4:4a:8e:c5:5c:50:fb:e7:77:5e:11:
         9c:39:43:07:29:15:9b:25:97:30:59:b6:78:81:97:73:2e:80:
         9b:7e:bb:a6:d9:43:0b:19:ab:a3:12:bf:76:40:8f:88:fc:3e:
         8b:f2:aa:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:05:59 2025 by rpki-client