Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa
File:                     c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json)
Hash identifier:          xX3R0BeGbOK2zchk0ivy5EgmFpWZMfzPmr85+I/Jq50=
Subject key identifier:   46:79:0A:97:D2:83:F0:3B:EC:E9:B7:54:16:27:7C:1F:54:0B:40:80
Certificate issuer:       /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Certificate serial:       010D0C9F4328584A90A0C292A4AC8A679225C300
Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     23393
IP address blocks:        104.37.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c2:92:a4:ac:8a:67:92:25:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=bffb04eb-e914-44eb-89f7-8e8e5297d4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8b:e0:46:07:55:b0:e1:67:9a:00:31:60:85:
                    a3:88:c0:6e:be:e2:12:bb:90:aa:b9:44:cb:83:59:
                    17:40:e8:c1:80:7a:b6:cb:32:df:df:4f:fb:8e:b7:
                    82:9e:dd:85:f2:28:ca:fe:fb:b9:d0:ad:4a:aa:3c:
                    5f:5a:b5:d8:2f:b3:42:ed:ae:01:2b:0e:40:c8:1d:
                    5b:cb:b3:93:36:11:f1:e5:e1:26:1b:6c:fb:5b:dd:
                    d8:9d:5c:f7:0b:94:33:fc:75:25:e7:56:0c:00:29:
                    fe:38:a8:3c:a9:74:ef:65:88:96:75:78:5c:f3:7d:
                    75:71:39:96:80:3f:e7:6a:23:b3:82:63:34:3c:5d:
                    f6:d3:20:6a:69:9b:d1:be:f1:85:05:e4:26:d0:3d:
                    76:81:7c:2a:eb:67:56:17:0c:91:a8:d9:c5:c6:9f:
                    ce:52:06:40:a9:4f:5f:8f:c3:c8:06:42:50:c0:0e:
                    ae:02:ba:4d:3c:f2:36:7f:03:90:a8:2d:e6:8d:eb:
                    07:c4:2b:06:d7:11:1c:d0:d9:0a:80:12:d3:db:3c:
                    87:0a:59:a8:1e:01:2f:50:2c:17:4b:1f:ba:96:f8:
                    66:0d:e3:ec:d1:2f:5d:3b:d3:76:1b:5c:68:a2:39:
                    f4:ac:01:40:df:fc:ed:df:8a:6b:41:4b:b0:c1:f7:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:0A:97:D2:83:F0:3B:EC:E9:B7:54:16:27:7C:1F:54:0B:40:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl

            X509v3 Authority Key Identifier:
                keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:91:cc:f4:d7:31:b6:d5:50:da:7e:22:7b:79:3e:d0:33:
         83:56:17:d4:92:7e:c2:0a:76:4b:69:76:f7:cb:48:f9:93:86:
         60:24:9f:a8:6c:70:e0:66:fd:7b:39:5b:56:b5:d2:8e:52:c2:
         22:0e:b3:88:dc:c7:0c:20:68:d6:42:5e:66:93:ae:01:33:19:
         11:42:53:8d:68:71:02:b5:34:bc:b0:f5:a0:9d:d3:9a:f5:03:
         fd:af:54:9c:62:74:73:ac:10:26:ba:3c:89:a9:c0:3d:fb:1f:
         88:6a:65:48:1d:c6:68:5d:4f:36:8e:66:dc:e2:42:70:cf:ab:
         bd:a7:fa:df:b5:45:19:8f:30:6f:a3:ea:b8:c4:04:1a:7a:86:
         15:67:bd:7a:e5:d3:0b:3c:3d:ce:08:b7:f5:6f:ba:d9:b9:9a:
         ab:d8:be:58:a3:9a:75:93:f7:60:1c:66:be:45:1a:05:85:06:
         c3:97:66:ab:e8:3d:e3:0f:99:a6:66:75:cc:e9:c8:ce:c2:00:
         00:cc:df:9d:15:88:b0:0c:01:2b:85:e7:fb:6c:f7:86:64:24:
         30:cb:e3:25:23:e6:14:18:74:16:f8:d9:0e:ca:c4:f3:a3:82:
         91:38:99:9c:36:19:ab:aa:5c:b0:1a:a1:33:9a:1b:17:f1:f8:
         11:9b:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:52 2025 by rpki-client