Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa
File:                     97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa (raw, json)
Hash identifier:          3wwLMM+UGsCCk6S72frVrMLHcdk35FgmZgfRX8rpvdI=
Subject key identifier:   EF:6B:ED:B3:F4:1D:5D:C1:C7:75:E7:B1:D3:8C:7F:F0:BF:FC:E8:61
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A30502FBB15F10108D9F29600
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     395092
IP address blocks:        104.225.128.0/22 maxlen: 24
                          2607:a680:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2f:bb:15:f1:01:08:d9:f2:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=4468058b-fba5-4887-be22-bb3f1d5bf059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:a7:6c:b3:58:45:41:ba:d9:91:ad:25:88:
                    69:0c:3d:77:f3:e3:38:d3:37:ed:60:78:f4:de:76:
                    dc:d0:a2:e4:ed:bf:58:fb:88:02:bf:a2:77:7a:f4:
                    65:67:00:95:d8:94:d0:aa:5b:cd:8c:10:1c:13:85:
                    93:fa:49:f6:e7:d3:b1:c1:87:ba:a5:67:c6:4b:73:
                    b8:4d:7f:4f:97:0f:3a:01:5b:13:2a:88:29:02:27:
                    ca:46:5a:3f:24:1f:94:d6:ba:8e:4e:bb:61:71:f8:
                    e4:3a:7a:85:6f:82:a9:d9:c9:c6:72:48:b1:be:5c:
                    1b:3a:c1:c0:d0:32:d4:df:66:93:25:ec:43:8e:9e:
                    13:73:6b:83:85:66:53:27:cc:33:bd:9c:59:05:4b:
                    73:08:20:5f:15:2d:0e:1d:df:7d:94:f3:ad:ec:06:
                    17:1d:e2:fb:8a:3a:d7:5d:b7:ce:1e:fb:41:97:13:
                    a8:c8:56:e5:f1:e7:6f:66:46:9e:9b:fc:c1:99:75:
                    92:10:58:47:8a:cd:f6:91:ae:42:a5:1b:76:a8:c0:
                    00:b1:33:22:08:8b:1e:4b:2a:a2:cc:42:84:a2:d2:
                    55:8c:b8:67:48:07:d5:ab:54:72:63:a5:7c:cf:3d:
                    84:0b:51:ae:11:f2:03:4c:0f:f2:64:8b:4a:c8:dd:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:ED:B3:F4:1D:5D:C1:C7:75:E7:B1:D3:8C:7F:F0:BF:FC:E8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.128.0/22
                IPv6:
                  2607:a680:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:cd:b4:36:8e:93:cb:9d:51:25:91:52:fe:85:bf:56:29:
         87:78:e5:eb:9c:e3:a5:33:dc:c2:1a:12:58:5d:83:16:3b:70:
         7c:23:8d:da:05:78:fd:04:0d:72:33:c4:7a:01:3b:fc:eb:c0:
         7c:46:67:06:95:64:d9:12:90:66:b3:18:a3:f3:06:ac:c6:c8:
         20:97:07:1c:65:26:bf:9d:25:b3:17:e4:2d:4f:8b:e4:b2:9b:
         d1:90:6b:6d:77:96:04:2b:c9:2e:50:71:6c:d0:84:c9:d9:35:
         ee:11:f3:e6:d4:f8:61:84:ec:17:8a:54:0a:3b:7c:e3:24:10:
         9b:e1:6a:7e:7f:d7:63:0a:39:13:5e:c1:7b:10:49:dd:48:db:
         eb:03:f4:a1:9e:ff:ff:f6:b5:75:2f:c4:01:5b:ce:da:96:de:
         15:99:0b:85:39:d2:9f:94:41:c3:cb:13:9f:88:b7:69:2f:37:
         95:b6:03:22:60:61:f2:32:0d:6c:8e:f9:5a:47:f0:31:23:84:
         a1:a6:f8:8a:53:98:4a:5f:f8:0a:88:66:29:f4:54:55:24:8f:
         27:d7:2c:b3:82:c9:27:34:ae:03:b8:10:67:b5:42:3f:ec:e5:
         ce:11:c3:11:64:71:16:33:f7:ae:0e:a4:3c:80:ca:e6:1f:05:
         7f:55:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:14 2025 by rpki-client