Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
File:                     eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json)
Hash identifier:          uCPZ/g8LXqKnyS7KI/HgbD0owhEJ58qY+bnutevQyKo=
Subject key identifier:   B4:67:EF:C4:6B:93:7B:8E:D8:31:EC:05:EE:0B:CC:6A:F1:45:A1:6F
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584A305037A8C019EC0842024A00
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     21559
IP address blocks:        104.238.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:37:a8:c0:19:ec:08:42:02:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=7d56a71f-3d7e-42ef-af5c-3037c02714b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:48:c7:f2:bc:1e:56:51:50:38:ac:51:8b:
                    d0:27:bd:ec:7a:1e:c6:ad:3a:73:dd:d4:01:8f:b8:
                    b7:d7:37:fd:41:56:8a:be:c8:c3:51:ff:a6:b3:9a:
                    93:77:6f:8c:a1:00:7e:1a:d4:bc:da:7f:47:19:5b:
                    45:d8:bb:93:c6:13:89:a1:87:7b:e3:bc:b6:b5:3b:
                    38:fb:7a:e9:76:df:f3:14:fd:c9:51:01:cb:13:34:
                    03:b6:a9:82:46:de:a8:3c:4d:4c:60:03:8b:fd:7a:
                    67:ee:0a:a0:e2:81:d8:e3:bb:07:80:be:e2:56:2a:
                    3e:2f:80:7d:44:95:c1:e8:3a:90:81:0f:ae:73:a0:
                    68:73:82:57:43:2e:12:a8:cc:3b:c4:41:9f:1b:df:
                    08:3d:fa:40:2e:a2:45:0e:df:2b:79:a2:6e:0c:57:
                    8c:9e:40:e1:e3:7d:5c:62:d1:39:3f:2b:d3:5a:02:
                    aa:99:d5:0e:a5:0e:b4:01:b2:7e:83:79:30:eb:96:
                    da:33:3f:36:b8:65:ad:81:7e:f3:6c:1d:ab:d4:c7:
                    bd:9f:78:87:c4:b1:18:50:9e:85:9a:4c:01:29:f6:
                    62:ea:be:32:18:51:4a:bc:3e:3c:3b:4a:e7:13:e9:
                    17:92:01:86:9d:7d:ab:c0:8e:11:5d:db:76:81:44:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:67:EF:C4:6B:93:7B:8E:D8:31:EC:05:EE:0B:CC:6A:F1:45:A1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:ca:99:1e:b1:84:84:fe:54:0c:88:3e:11:ec:e7:1d:79:
         97:8b:8b:c1:4c:60:91:e8:00:c6:b0:0c:b2:78:66:b0:d7:6c:
         c9:98:bb:10:5f:5e:e0:c0:76:50:25:d8:bf:72:7c:d6:1d:d6:
         6d:fa:7a:9d:79:ad:a8:3a:4c:54:04:da:8e:37:a2:15:95:95:
         ff:d1:40:1f:9b:ad:f1:fc:83:5f:c7:a1:65:72:ba:36:af:9e:
         37:cc:6f:28:af:1c:2b:ab:10:19:e5:f9:41:f5:30:12:5a:58:
         03:d0:24:88:5c:fa:6d:a9:3c:16:7e:f8:cf:e9:ae:15:7c:c0:
         49:b5:ac:ea:c7:2e:63:8d:04:5e:e3:d7:00:08:83:b1:d7:a7:
         16:10:5a:13:b8:b2:32:2b:0f:1d:03:a8:cf:e7:ef:af:15:d7:
         27:b3:b3:4c:61:d8:f6:b4:e0:8c:47:f2:ea:9a:d2:a3:45:4a:
         0d:b9:5c:c9:d8:73:05:22:56:73:87:cb:90:ae:31:6c:b5:29:
         57:5e:7e:1b:a9:53:c0:4b:ca:24:d0:48:80:69:ff:4f:13:b8:
         60:75:c4:99:0e:a6:cd:f4:1e:28:58:b8:c8:29:dc:94:01:a2:
         9e:cc:83:4a:d7:04:d0:a7:5c:21:0d:e2:63:52:97:c7:b3:48:
         a5:a8:4c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:47 2025 by rpki-client