Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ce2770-74df-3520-80dc-efc4b42b36e1.roa
File:                     19ce2770-74df-3520-80dc-efc4b42b36e1.roa (raw, json)
Hash identifier:          5d9dFu02DXWfKfvFhtfR53b1dStdjaUfkQ3Y+9KL9Y8=
Subject key identifier:   21:95:07:87:DF:DB:C5:E2:00:73:EF:20:B9:06:69:51:81:BA:09:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A119ACA254C58B71D9F286F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ce2770-74df-3520-80dc-efc4b42b36e1.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        104.76.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ca:25:4c:58:b7:1d:9f:28:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=0bacca14-09aa-4c14-9c91-36bd4bdf3407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:06:41:17:77:7e:f6:c6:c6:d4:3c:f8:eb:
                    cb:2f:6d:28:14:48:3c:fe:8b:ac:25:2b:a6:c3:58:
                    51:10:f2:a3:a7:98:aa:59:b9:6f:9a:63:07:e8:82:
                    10:dd:d3:99:95:3e:74:0f:9d:1f:73:c8:70:3a:4a:
                    05:cf:f2:f6:e1:07:16:a4:4f:27:d4:2c:5a:36:61:
                    52:a3:5e:67:1d:e2:fc:85:af:89:3e:21:46:ab:72:
                    62:df:d9:cb:95:fb:d9:64:51:39:a8:46:0d:2c:19:
                    45:69:73:60:8e:2d:6a:9c:3c:c7:b6:b6:a0:37:10:
                    83:23:58:df:0a:46:66:da:ee:bf:78:55:67:a4:86:
                    0c:1b:c6:46:18:e4:3f:ff:8b:01:ca:1d:f4:f7:ab:
                    97:b4:6b:2d:61:10:60:cb:c4:0f:96:da:64:aa:91:
                    5a:5c:8c:f2:66:b6:89:30:68:f9:94:f8:b9:b5:83:
                    06:12:3a:1d:14:89:5d:b9:1b:dd:50:90:0a:40:ee:
                    1f:9a:9e:d9:2b:5b:f9:cd:f6:01:9f:f0:22:04:9c:
                    c9:12:72:5d:63:de:a2:e1:90:6a:a8:62:8b:a6:d8:
                    25:33:fb:7f:c2:89:d9:8c:97:18:52:99:a1:29:9c:
                    44:38:66:2d:71:c5:40:39:8d:e6:df:75:cf:e8:9e:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:07:87:DF:DB:C5:E2:00:73:EF:20:B9:06:69:51:81:BA:09:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ce2770-74df-3520-80dc-efc4b42b36e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.76.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:03:28:96:1c:86:fd:ac:0d:42:20:f6:50:a5:59:c3:53:12:
         c9:45:aa:df:5f:cf:de:82:75:fe:fe:b7:c7:aa:7c:7b:04:87:
         12:f0:3e:65:0e:51:cd:0c:d7:a0:1d:89:6f:7f:f6:26:cf:56:
         82:7c:76:12:8c:58:ea:d2:aa:8c:48:b8:be:84:f2:a1:60:6f:
         e1:c9:c9:bf:bc:d6:87:f4:52:d7:90:27:86:f8:0d:3a:b4:70:
         e6:ec:b8:f6:c3:c6:fb:b5:b3:64:13:8f:42:2f:b1:ea:1f:61:
         a5:c5:d1:fb:aa:92:71:92:9f:c5:ad:a7:61:9b:d6:40:9d:f1:
         2e:15:a5:01:62:9b:36:53:18:52:5f:be:05:cf:05:9d:81:9b:
         d4:86:83:99:a2:db:f1:2f:50:5e:00:1b:fb:94:36:f6:b6:aa:
         ee:62:72:63:7a:1d:d2:af:07:5f:98:55:26:6e:f2:ee:60:2d:
         eb:6b:8b:9c:91:8c:8a:98:fa:bd:80:d0:16:fd:1d:04:c5:33:
         8c:a8:36:3b:5a:aa:18:2e:b7:b6:f0:c3:c4:e8:14:9f:c1:bf:
         f6:05:c8:39:c9:f4:36:fc:56:40:4a:b0:41:e1:76:9c:69:c3:
         9e:07:63:d8:b9:cb:7d:eb:f7:df:8f:11:6b:3c:83:5c:40:04:
         02:8d:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:41:44 2025 by rpki-client