Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/be628792-a09d-3a7d-a5cf-3896494455f9.roa
File:                     be628792-a09d-3a7d-a5cf-3896494455f9.roa (raw, json)
Hash identifier:          kgXOeIQ1Dj06LBlYXyMy4EI96UuBzNlKSiZxtjVGtr4=
Subject key identifier:   DB:6B:CF:76:36:A0:D2:7A:A2:AE:39:BE:E2:3E:EE:5F:C7:19:04:C2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858499F24DA3F451EDA233E6A2B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/be628792-a09d-3a7d-a5cf-3896494455f9.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.197.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:da:3f:45:1e:da:23:3e:6a:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=673a07c4-8659-4b2d-b9af-87a88e70e3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:39:18:9d:5d:e2:96:40:12:8f:16:fb:25:
                    0a:32:46:71:52:66:67:87:9d:00:df:ac:49:ee:5d:
                    57:7c:e4:94:f8:1f:6d:b6:52:fa:d6:48:94:79:36:
                    b6:56:1d:39:1a:c6:13:9c:22:2a:0e:e0:53:39:85:
                    a5:04:9c:e1:29:78:f5:d4:03:86:3b:92:06:0a:f8:
                    60:ce:ed:c3:59:11:f9:35:f2:b9:b6:18:b5:60:00:
                    f3:4a:a8:9b:62:c9:25:2b:b0:74:9a:bb:55:b6:76:
                    04:ef:ff:cf:9a:15:1a:35:41:f8:ac:28:b5:61:66:
                    4c:ea:15:e0:0e:02:ba:26:7d:56:24:63:ad:40:b3:
                    b2:0e:6b:1e:dd:5a:1d:8f:6e:5d:e3:6d:09:78:95:
                    5d:04:d0:cb:1f:aa:77:6a:92:3d:52:93:87:b9:e5:
                    fa:15:17:df:1f:f5:6d:ba:c6:01:38:2d:43:63:22:
                    9e:69:78:4e:92:c9:a7:57:a5:1c:96:cb:69:06:46:
                    4e:99:ff:0b:1c:c4:1b:c3:84:2e:75:06:dc:e3:4f:
                    25:4d:20:c9:60:45:c6:c3:80:43:36:d7:21:16:cf:
                    83:69:83:b1:5f:61:b0:98:27:6f:d0:4f:c6:66:ee:
                    97:45:90:61:54:af:d4:7c:4c:66:78:57:61:4f:ea:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:CF:76:36:A0:D2:7A:A2:AE:39:BE:E2:3E:EE:5F:C7:19:04:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/be628792-a09d-3a7d-a5cf-3896494455f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:7a:bf:62:6b:2b:91:1c:28:2a:a5:d9:90:3a:08:b8:7d:
         c7:78:7c:ae:9e:19:b8:2c:64:13:3e:37:bc:bc:8d:a9:5d:97:
         c2:74:a1:20:4d:21:e9:e2:08:58:6b:8c:a8:6c:be:4c:7d:e1:
         ec:66:55:db:02:5a:aa:c1:c3:97:69:c5:0c:2a:53:82:80:58:
         f0:5b:45:c5:e0:46:15:b3:07:8e:98:e8:bb:82:89:0b:92:c5:
         51:0a:51:88:a9:2d:92:6d:b1:f8:33:c5:e7:65:25:18:0e:ae:
         85:62:fb:b9:97:c6:a1:c3:36:34:ab:da:68:48:d4:4d:8c:65:
         4d:53:73:22:dd:37:a7:6e:99:e8:9f:37:44:1a:b1:93:5f:5d:
         13:6a:1e:7f:99:8a:81:a3:4b:d5:86:f2:db:f8:04:30:18:40:
         70:28:a6:c0:fc:56:b6:bb:9c:78:49:7b:91:b6:e2:06:36:9d:
         ef:c4:95:c1:f5:d8:92:a2:ee:79:ab:2a:90:31:2e:88:6a:bb:
         41:6c:eb:1f:ca:0d:3c:ca:d6:11:ee:66:52:23:cd:b2:97:53:
         06:49:6d:a3:0c:3b:b6:9c:e8:5d:5b:4d:aa:de:c2:42:6e:6a:
         d4:d5:8a:18:20:ad:9f:79:c1:f3:5b:12:b4:a4:96:b8:f4:27:
         ab:9b:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:55 2025 by rpki-client