Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa
File:                     1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa (raw, json)
Hash identifier:          Dr/NrDdn/vNI/oTlZSPa5JQRJDbPPLfNAveKMVW5ww8=
Subject key identifier:   1F:DD:51:8E:D0:26:FB:39:A2:54:1F:8A:61:69:17:24:95:80:DF:58
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584A093A94EC8FE0BBEC82FBA280
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     62874
IP address blocks:        104.37.24.0/22 maxlen: 22
                          104.37.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:94:ec:8f:e0:bb:ec:82:fb:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=ea2878e1-19a0-4f37-acc0-cf729ede3912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:bf:85:6d:7f:83:c2:37:66:d4:33:8e:57:
                    20:23:96:b5:6c:d2:46:54:46:2a:c5:e5:05:53:87:
                    01:06:88:86:89:86:bd:29:50:e7:ae:7e:82:60:9b:
                    6b:2f:55:3a:b1:c2:62:c9:b7:85:5f:a8:00:05:14:
                    f3:b4:23:d6:62:50:0b:f9:b9:4f:2f:22:07:42:cf:
                    1c:1f:14:17:be:7c:89:e1:15:f1:77:68:bb:a4:72:
                    14:a1:a5:bd:c5:56:da:9b:c8:95:92:46:db:3e:63:
                    53:fc:51:59:fd:af:84:b9:de:91:de:b8:78:45:3b:
                    33:4f:23:8e:35:09:83:b6:d2:ad:61:71:2a:8d:91:
                    7c:01:31:ae:ea:8d:e1:ca:f4:f3:4a:01:28:91:27:
                    29:cb:a8:bb:92:9a:d4:65:17:40:30:90:2f:59:40:
                    37:26:74:f0:b4:f9:95:ab:11:86:c6:09:42:65:1d:
                    60:6d:19:e0:e8:b3:5d:5b:bc:35:54:85:af:c7:1d:
                    e6:a6:e1:50:e6:58:be:20:4f:40:c5:f4:7f:ca:ac:
                    ee:c3:e2:b4:74:16:58:00:03:69:2f:bb:05:6a:b6:
                    7d:5f:fc:86:5a:b3:7f:be:4f:b8:4b:73:cd:c2:9c:
                    02:a1:7a:a1:1f:6f:9e:5b:b8:de:73:1e:dd:96:d4:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DD:51:8E:D0:26:FB:39:A2:54:1F:8A:61:69:17:24:95:80:DF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.24.0-104.37.28.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:d7:c2:4b:ad:6e:5d:6a:36:e6:5c:17:8f:b2:a2:02:f7:
         ae:27:ff:5d:3d:b3:04:8b:3b:a0:2f:b5:d9:76:08:54:f7:f4:
         4d:08:15:64:75:74:57:1e:d8:e1:08:90:f1:88:3b:4b:9b:69:
         fc:17:1e:45:6c:03:9c:56:e2:71:53:f7:9c:55:cf:c9:eb:6d:
         9a:2f:b4:5d:be:29:b2:b1:2d:57:4f:91:bf:c6:39:8f:39:e6:
         c0:d1:d1:ea:06:cc:97:cb:6f:e1:a3:24:fd:7b:68:bb:c2:15:
         de:7a:ed:0e:04:27:fa:48:91:61:45:f8:e2:07:88:5a:45:e8:
         42:cc:f0:9e:30:17:b9:73:f1:42:e0:49:7a:a0:3f:42:77:0e:
         47:4a:8b:f3:43:d6:db:6c:8e:af:cc:71:87:fa:fb:25:3a:df:
         fd:65:30:48:67:98:09:a8:82:a3:98:a7:0d:5b:84:14:70:f1:
         cd:7e:47:c6:1b:c9:fe:78:4f:d3:6b:ad:84:2c:08:15:41:86:
         45:d5:bf:83:e8:a1:41:b5:be:25:09:6e:a5:a9:b8:5f:ec:71:
         4c:8f:e0:67:a3:0e:45:2a:b9:cf:42:61:d4:c5:66:cf:67:66:
         b7:62:cf:77:54:44:99:d6:1f:0e:9f:c0:59:bd:15:88:6a:05:
         43:87:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:19:32 2025 by rpki-client