Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/bd24ede7-95bd-3be0-9995-86905a63b155.roa
File:                     bd24ede7-95bd-3be0-9995-86905a63b155.roa (raw, json)
Hash identifier:          NAsYWN4q0iKBstUjt64w+yERMkHuWDufRApHr3Qbg94=
Subject key identifier:   B5:8B:B3:9B:88:B9:02:F1:BB:5F:3F:E9:12:04:4E:F0:9A:84:04:3B
Certificate issuer:       /CN=c9b2f783-ae49-438b-a994-34e0ab78157d
Certificate serial:       010D0C9F43285849F9DFDFE4E83436F09579F840
Authority key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/bd24ede7-95bd-3be0-9995-86905a63b155.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     36352
IP address blocks:        104.237.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:df:e4:e8:34:36:f0:95:79:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b2f783-ae49-438b-a994-34e0ab78157d
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=b27bc735-5790-4002-9a21-1f0239e400a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:e0:c1:ce:26:d3:44:35:d5:b3:fc:05:a0:
                    ca:c0:f4:dc:22:83:94:f4:44:ff:a8:be:e7:56:5c:
                    55:47:8c:b4:cd:d6:fa:f0:f8:29:17:2a:89:b4:1c:
                    9e:60:1d:00:5f:fb:88:63:8a:c2:74:5f:1e:50:fe:
                    40:4d:a9:9f:4d:bf:b2:b5:3e:2d:2f:f7:1e:86:74:
                    a7:dd:76:41:38:82:83:82:7c:d2:02:8f:f1:d0:6d:
                    46:e3:56:f1:da:f6:f0:09:c4:e4:40:4a:e5:c8:98:
                    40:68:4d:67:c4:47:b7:aa:16:57:e7:74:db:ae:11:
                    c3:13:17:89:be:e1:8d:73:99:17:67:27:51:9c:cc:
                    d5:f7:28:73:68:66:56:f4:20:3f:d3:6f:d2:52:db:
                    8d:0d:fe:fa:2e:02:e2:54:11:bf:45:df:24:8d:86:
                    fd:b1:87:10:a5:b1:d1:a6:8c:3a:97:fe:c8:1e:10:
                    f1:86:0e:a6:d8:93:00:e7:90:40:ea:28:22:a6:0c:
                    d1:5f:ae:11:c4:76:60:ed:33:9d:44:f8:96:dd:c5:
                    64:20:b5:b2:7b:61:e8:c4:94:f3:1b:94:78:54:78:
                    c3:c3:69:32:a2:b1:ca:1b:e6:2c:80:37:58:87:65:
                    e4:ef:66:05:e6:7f:27:04:4d:45:90:1f:98:1e:eb:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:B3:9B:88:B9:02:F1:BB:5F:3F:E9:12:04:4E:F0:9A:84:04:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/bd24ede7-95bd-3be0-9995-86905a63b155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:87:a6:3c:b2:c3:97:81:91:7a:75:ac:58:94:f1:e1:51:
         a3:a4:3a:1f:cf:ec:df:37:b6:2b:22:78:33:0f:43:3c:cb:78:
         aa:3d:4c:e9:44:b7:94:8c:e6:44:aa:4a:26:12:27:1f:6e:38:
         1c:24:94:6b:49:75:6a:f1:c4:f7:c6:27:b8:11:b7:72:50:9f:
         16:ef:c6:e7:a1:d9:d3:43:60:8c:3c:73:3a:e3:c4:c5:d8:40:
         fe:70:ff:8d:f0:13:38:14:f2:ba:85:87:e1:62:a1:3f:ae:63:
         f2:39:d0:a1:94:18:1f:87:17:39:ec:c1:e4:75:6b:2e:63:a5:
         b0:f4:2d:58:a5:1f:5b:bb:9e:59:04:1c:39:28:ad:7b:47:c8:
         29:cf:25:1b:2c:f0:01:23:bf:12:bb:03:d1:51:3d:d9:9e:ae:
         44:e4:d0:b6:fe:6d:39:8f:48:29:7e:53:b2:af:dc:68:09:29:
         37:52:e8:46:ba:15:33:5f:4c:c1:de:78:b1:c2:4f:c5:b4:c9:
         d5:10:ba:dd:6f:d5:f4:32:05:6f:26:da:ae:0d:37:3f:41:a4:
         12:10:74:8c:31:f4:c6:3d:db:c1:d5:00:de:94:45:f8:90:8f:
         6d:10:e2:b0:71:63:af:60:ba:f0:b2:92:e7:87:6e:f0:e9:15:
         36:81:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:46:43 2025 by rpki-client