Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
File:                     6e71f7f6-1874-3623-9d1c-fe8383f37047.roa (raw, json)
Hash identifier:          1xUo1DpiljYvg//OZQpecbF3I4DN/7SC/FAYalIO+9c=
Subject key identifier:   AD:0F:C5:C4:CA:46:6C:25:62:80:85:A6:2E:08:D9:75:BB:DD:C8:0A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849EA85192DB0D5CBBFFE8C9380
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     19437
IP address blocks:        104.254.236.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:19:2d:b0:d5:cb:bf:fe:8c:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=da136a8f-1725-420c-a95a-20e7562cc30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:de:f5:d9:95:30:6c:b8:bd:2f:1a:57:27:
                    35:f4:52:f7:b0:23:bc:90:78:70:d8:3a:1f:ab:48:
                    b8:9f:9c:50:45:7c:d8:69:01:7c:ab:71:51:b8:79:
                    f3:0d:40:8c:62:a1:99:c1:d9:15:c7:87:71:c0:2c:
                    b2:5d:4a:0e:7a:5a:c3:b3:23:7b:37:ff:9d:91:14:
                    10:bb:30:4b:aa:c5:ae:d5:3c:47:2b:a3:f7:b2:79:
                    90:aa:0c:a3:40:94:8a:85:9f:ba:69:94:5e:02:8a:
                    5b:a1:76:db:83:91:bf:1e:e1:aa:2d:0b:64:59:82:
                    5c:eb:25:9f:c7:ba:f0:4e:c9:ff:2c:e0:a3:f8:d9:
                    29:ed:c1:1e:13:f6:fb:21:f3:8d:ad:8b:29:65:23:
                    74:9a:bb:ee:bf:76:97:93:3e:25:74:7b:4b:2e:5d:
                    01:a4:59:32:30:25:5d:5b:19:2b:65:ee:d2:05:6f:
                    01:14:23:0a:dd:db:fd:91:22:11:de:1a:3c:68:94:
                    22:36:11:3c:f9:3e:35:fe:f5:db:91:47:f9:70:1e:
                    94:c4:0c:fa:66:80:79:3d:3f:c9:1b:e9:79:84:ab:
                    81:eb:92:e2:df:3a:0c:1f:97:61:43:88:e7:33:a3:
                    b0:8f:81:b4:c6:1e:26:04:8f:7c:e3:52:b7:1a:a0:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:C5:C4:CA:46:6C:25:62:80:85:A6:2E:08:D9:75:BB:DD:C8:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:7b:73:eb:9e:35:41:fc:e3:26:46:1c:aa:40:33:32:4f:4e:
         12:d7:ba:24:f7:e7:2d:be:01:f9:65:93:73:b6:ed:37:72:a0:
         6b:74:d9:56:21:fe:48:b1:6f:90:0b:ad:35:e9:e6:b0:53:1b:
         c3:a7:ff:f2:c0:b0:af:0f:8e:00:ce:50:7a:f7:59:58:ed:06:
         2f:21:2c:94:f1:cf:ae:f5:84:25:e2:f2:0e:e0:37:7e:60:e8:
         bb:e0:18:f3:5b:48:ca:a1:74:97:f9:92:6b:7e:25:4c:f5:10:
         7b:dc:2d:7d:85:44:02:e7:4a:80:c3:54:76:69:89:d8:41:94:
         8a:e0:66:f3:90:25:59:be:d1:b6:6f:07:9a:b1:4a:b8:0c:df:
         11:da:0c:f4:1f:b8:49:6f:50:2c:fd:9c:4b:12:12:09:41:cd:
         e3:a0:91:49:50:3e:57:69:6b:cf:af:5a:c2:65:60:9f:0b:6e:
         e4:a9:fe:8f:0e:10:f9:76:a2:e6:95:1e:bd:fd:f9:c1:bd:6d:
         1a:49:00:35:15:00:9b:0d:48:1b:dd:fe:83:f6:b4:9b:a6:2f:
         a3:79:d7:a1:07:26:d8:cb:52:b0:dc:34:d3:de:63:33:90:ab:
         5c:fa:10:d9:fe:43:dc:f8:49:c2:c6:36:be:37:ab:30:3f:e5:
         cc:b6:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:01:17 2025 by rpki-client