Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa
File:                     ecbf30c8-7329-3304-805e-346857b377f6.roa (raw, json)
Hash identifier:          /mghKwg96KFzeh9bsWfhNS36CWMd/qdKU0ANZZRPQbU=
Subject key identifier:   AA:DC:C1:5D:B7:AC:FB:46:0E:B0:B3:2C:2F:22:06:F6:80:EB:2F:BA
Certificate issuer:       /CN=12e1088c-ebe4-47cb-a051-5344b3551a83
Certificate serial:       010D0C9F43285849EBEA4FEBA95808B4F0A06D00
Authority key identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     13621
IP address blocks:        104.128.78.0/23 maxlen: 24
                          198.190.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:4f:eb:a9:58:08:b4:f0:a0:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e1088c-ebe4-47cb-a051-5344b3551a83
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=61d4bf1d-5c20-42fd-a089-6c06a4e2a74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:a1:4d:4f:e9:28:99:49:a6:d2:5a:0f:c3:
                    00:d9:66:e8:96:c1:8f:3b:02:d2:5c:41:3b:ed:c2:
                    78:d2:59:c5:80:5b:99:8c:a2:3e:cf:d2:75:f8:45:
                    8a:99:19:3e:32:c4:52:cc:de:27:cf:1c:04:a9:79:
                    35:10:62:02:f5:c0:bf:41:42:65:0c:98:af:08:5c:
                    82:27:14:fa:3d:37:47:6b:6d:ef:de:f2:b5:dd:32:
                    ce:4b:ef:61:c7:78:8c:44:a8:45:b2:84:45:3b:27:
                    46:56:97:d2:b0:e6:58:82:b6:3e:c1:21:11:da:be:
                    5f:d3:29:5f:b6:2a:ed:87:53:78:c8:e5:99:32:40:
                    fd:a6:12:b7:49:62:5c:14:ab:81:9c:fb:d3:3f:22:
                    fa:ea:59:ca:0f:ea:56:78:2f:94:64:67:e1:16:7d:
                    c9:1d:e7:cb:36:5c:a4:63:ad:f8:7e:74:f2:86:d9:
                    ce:b3:0f:7a:d6:40:6a:0f:50:56:b6:0f:b8:5c:95:
                    bb:50:33:48:2d:e5:7b:fd:3f:40:fb:54:d9:09:f0:
                    a9:8c:64:ab:a8:7d:d4:cb:f1:69:5f:65:b4:2d:7d:
                    1b:74:b1:0b:b3:83:9b:26:cf:bd:d6:b9:8b:3e:c9:
                    5c:ab:67:4b:1c:67:69:ee:70:d2:55:9c:ac:85:5f:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:C1:5D:B7:AC:FB:46:0E:B0:B3:2C:2F:22:06:F6:80:EB:2F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.crl

            X509v3 Authority Key Identifier:
                keyid:8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.78.0/23
                  198.190.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:9b:2e:e9:69:b4:6a:b0:94:b0:71:a4:d0:4f:11:67:20:
         33:9a:51:c9:56:73:82:4f:78:0f:d0:c6:96:5a:b5:77:a0:f2:
         38:50:82:1b:ca:ef:4e:7e:dd:e9:80:c1:85:f0:b5:60:37:e9:
         c2:57:dc:d8:bb:42:ef:cb:bd:7d:3d:17:86:eb:2b:b1:ec:e8:
         44:17:51:7f:a0:2b:ef:a4:4e:40:d3:91:16:86:ab:72:c5:71:
         6f:0b:8f:7f:98:c6:2a:4e:8e:f7:8e:ed:9f:93:e5:92:e6:7b:
         eb:94:12:72:df:1b:7b:2f:e8:ea:ac:8c:31:67:6d:26:d2:da:
         c1:4f:5a:a6:5d:85:4d:08:e2:b3:e6:a1:99:07:cc:85:76:f8:
         4e:29:c1:95:79:e9:b6:29:c7:f5:30:ae:09:bd:98:66:04:3d:
         ac:20:e3:97:91:01:2c:05:c6:c0:e9:d8:b3:bd:e9:35:cd:d2:
         55:1d:6c:3c:09:d5:51:0d:a8:bd:de:b2:72:78:0d:95:2f:db:
         5b:54:b8:59:20:af:8d:6f:27:7d:81:a5:a1:94:4d:20:ac:fe:
         3d:a5:e3:74:a5:07:01:7b:a0:c2:78:1b:e2:f8:1a:f5:f5:cc:
         3e:31:25:e9:d1:a7:d2:9c:4e:1a:97:d9:fa:30:c4:e3:9e:85:
         32:91:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:12 2025 by rpki-client