Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa
File:                     87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa (raw, json)
Hash identifier:          w+ibROyQIYFSKykFWy8ixG/AMnGPRmDHdcBC7Og3bzA=
Subject key identifier:   CE:0B:65:B3:A9:84:A3:86:A8:70:33:F6:74:46:EB:06:02:36:26:5A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAF14A7D7E3FF2E4533240
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     54858
IP address blocks:        104.152.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f1:4a:7d:7e:3f:f2:e4:53:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=866a9822-2f83-4be5-9cc8-efa517443466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:8b:3e:3d:b9:9c:b8:11:fc:3b:ab:07:9e:
                    31:89:ed:aa:8b:0a:6a:60:d4:3f:61:ed:04:b2:4f:
                    6c:fc:aa:5f:0c:1e:98:fb:9f:39:df:bc:74:a5:49:
                    eb:b1:89:3d:76:88:fa:c4:54:25:da:c9:b8:c4:77:
                    46:5c:11:c9:5b:aa:a8:30:b9:b1:df:7d:99:4c:45:
                    48:d1:40:b2:ed:4d:9a:17:8c:03:7f:2d:1c:5c:c8:
                    a7:d7:25:d4:5f:30:d9:98:fa:0e:02:f5:63:58:a4:
                    66:85:ac:9a:cd:13:32:45:eb:8e:9f:fc:36:e0:01:
                    65:b1:88:d3:4b:23:ed:97:76:49:07:bf:46:43:7f:
                    97:3c:51:50:ba:13:09:d9:db:80:e9:d7:1f:0a:2e:
                    6c:63:31:80:54:6a:6c:8d:db:86:c5:d2:fb:f5:58:
                    8d:26:4f:58:9b:1d:4c:fc:f9:67:c7:95:fe:a0:75:
                    0c:a3:04:92:d2:1c:de:bc:88:48:50:ac:2e:0f:96:
                    65:6f:15:af:84:94:04:4c:63:6e:cf:8d:7c:49:b9:
                    e1:d6:74:69:86:17:bc:94:4d:d0:5a:df:71:f2:9f:
                    6b:8c:ce:29:e4:5a:d4:ba:d4:78:64:b6:98:21:f0:
                    4e:13:75:be:6d:3f:3f:41:1f:27:24:c7:21:78:c1:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0B:65:B3:A9:84:A3:86:A8:70:33:F6:74:46:EB:06:02:36:26:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:40:8f:ba:08:58:03:b9:5c:34:00:2d:b5:39:1c:4f:9e:
         52:0a:4c:53:ec:23:8d:c3:f2:72:19:ed:a7:1b:c9:ce:ca:88:
         dc:2b:10:ff:a3:07:44:10:6c:35:2e:43:4c:33:bb:d3:75:a6:
         41:aa:e1:57:fb:32:73:22:0c:a7:68:fa:1c:2f:e6:18:02:61:
         24:d9:19:38:a2:83:d1:da:36:2d:6f:ae:11:5f:d3:9d:ea:cf:
         db:fe:47:b5:a1:44:f5:dd:d9:08:01:2c:81:5c:9a:e7:81:9f:
         7c:a7:b9:f4:39:ba:9f:e3:4d:e6:e6:d8:83:1a:ca:02:42:38:
         9e:e1:3c:3b:9b:a5:c2:27:57:32:9d:e1:89:9b:60:87:67:ef:
         44:57:9d:7f:8f:61:e0:ac:e3:fd:6b:29:05:da:d8:7d:1a:d5:
         3c:45:b3:f9:e0:5a:48:62:38:84:14:e9:7e:33:81:06:a8:52:
         5e:65:43:81:58:d6:be:aa:0f:b3:32:09:1a:f7:cc:55:91:e6:
         3b:81:f0:b1:bc:de:8c:7e:26:1e:40:79:0b:72:73:ca:c8:9c:
         ad:d8:20:b6:5f:1b:5f:fb:ee:1d:6f:97:da:7f:6b:f7:c2:24:
         2d:da:f8:7a:5d:59:8f:c0:55:05:9e:39:ae:ff:97:51:9b:9f:
         2a:1c:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:14 2025 by rpki-client