Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
File:                     6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa (raw, json)
Hash identifier:          ZbHQ2W6TSLvnqDCGfAI3Tt6oTKwsCIBUv5s7ah6aLhw=
Subject key identifier:   7B:E8:AD:55:23:6D:A9:1B:B6:74:D0:FA:7B:E8:7E:DB:EA:55:B1:D0
Certificate issuer:       /CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
Certificate serial:       010D0C9F43285849A3547DE39430D8569C5A1380
Authority key identifier: 72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     27373
IP address blocks:        104.193.248.0/23 maxlen: 23
                          192.251.197.0/24 maxlen: 24
                          204.10.107.0/24 maxlen: 24
                          204.10.108.0/24 maxlen: 24
                          2602:fa37::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:7d:e3:94:30:d8:56:9c:5a:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=60359188-ec2e-4c5a-ab41-3848d23db34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:0b:5e:f7:38:f2:dc:d4:cf:f9:eb:2f:00:
                    72:da:e3:f8:37:37:8f:a1:41:ce:ed:50:a7:66:be:
                    62:8b:59:eb:d8:c0:64:82:82:6e:39:fd:7d:fa:c8:
                    9f:1b:a3:bc:2b:f7:fa:89:cb:6b:d5:ec:da:f5:53:
                    bf:32:ab:0a:6d:33:31:0d:45:09:de:c5:85:ae:5c:
                    6f:cf:41:22:e2:fd:d0:69:9a:67:d2:c8:21:d9:29:
                    bf:66:fe:ae:ee:96:87:8a:0a:15:d2:99:ab:d7:70:
                    df:81:ea:36:3d:15:52:29:6b:e8:12:fc:ee:64:5f:
                    49:ad:7d:29:1a:1d:a2:55:a5:54:a9:5f:05:11:7d:
                    e9:ad:ea:14:e9:bf:bb:58:6e:73:70:38:b2:1e:e2:
                    9b:65:4f:10:fd:5b:d7:ca:bf:aa:25:03:60:c5:4d:
                    c6:5b:f2:b2:19:dd:a0:07:3d:1a:31:cf:5a:9a:63:
                    ba:bc:2f:29:70:03:1d:89:a0:04:37:63:2a:bc:ef:
                    c1:50:18:56:c9:bf:69:b2:63:cc:5b:2f:b1:11:49:
                    1e:5a:17:99:c2:db:c2:de:5a:f6:33:80:75:b4:3e:
                    b5:5e:4a:c4:79:9b:c2:23:36:18:5a:0e:dd:9d:24:
                    79:a3:92:ef:d0:9c:bf:49:e1:52:08:86:59:81:62:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E8:AD:55:23:6D:A9:1B:B6:74:D0:FA:7B:E8:7E:DB:EA:55:B1:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl

            X509v3 Authority Key Identifier:
                keyid:72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.248.0/23
                  192.251.197.0/24
                  204.10.107.0-204.10.108.255
                IPv6:
                  2602:fa37::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:59:30:41:2f:e1:dc:14:f2:7a:ff:b2:d1:4f:11:4d:60:95:
         67:43:41:a4:ca:5c:8c:0e:ff:dd:4d:e8:4a:26:fb:87:6b:67:
         70:2f:a0:68:7e:85:f4:cb:6b:0a:a9:4c:04:0d:97:a9:14:50:
         f5:c6:11:42:f3:de:06:9b:31:86:61:af:28:c6:48:08:c7:be:
         8a:5f:38:a4:77:02:94:ff:4a:3e:54:fa:58:53:b5:02:f5:0f:
         69:19:17:55:38:33:9d:0c:3f:3a:15:fd:25:04:c5:67:a4:04:
         01:f5:99:1d:ec:e7:d3:4d:3e:ac:4a:e1:71:dd:17:47:19:3d:
         09:26:80:5c:dc:b1:4a:e8:44:22:30:5a:7b:ae:91:9e:06:d9:
         c2:f7:6a:60:57:d9:bb:b2:8b:2c:e0:f5:bb:6c:1c:3f:c8:25:
         13:ba:51:72:6c:d1:1a:5c:56:18:41:b1:aa:0e:99:a7:f1:7f:
         2d:4a:bc:08:96:ae:cd:7f:bd:b1:a3:5b:34:d8:d2:a0:95:d8:
         f9:fc:d6:df:0d:16:07:38:fb:9f:3e:d8:4c:20:cc:c1:1d:c2:
         1c:ee:dc:ab:47:16:f8:ff:3e:3f:b2:33:3c:a1:68:15:c6:f7:
         8e:1d:78:b7:bf:5d:3b:70:09:3a:b3:aa:16:65:58:0f:36:e2:
         f3:83:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:25:42 2025 by rpki-client