Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/574db24d-8675-308a-ac96-bd5f2889ad6f.roa
File:                     574db24d-8675-308a-ac96-bd5f2889ad6f.roa (raw, json)
Hash identifier:          xVpFNedyoTPw7EAGSLnOtTB9/rZMUCVYJvjudbb88qc=
Subject key identifier:   48:92:9A:AD:1F:0E:F1:C7:DE:F1:FC:D7:DB:51:00:08:14:9B:40:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC5151FF58FD6BD3B7B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/574db24d-8675-308a-ac96-bd5f2889ad6f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394996
IP address blocks:        184.105.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c5:15:1f:f5:8f:d6:bd:3b:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=16ffd72f-4944-42e6-b797-f72188a9eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:7f:8b:37:b3:2f:8f:01:0c:ff:36:af:3c:
                    41:80:df:13:00:35:91:6a:1a:25:cf:f1:00:9d:5d:
                    c2:ef:20:0f:63:c3:5f:aa:b2:89:aa:85:6c:23:46:
                    2e:00:72:8c:fc:41:5e:60:b9:56:58:af:11:89:34:
                    59:ee:03:49:58:d3:cc:c5:9b:06:36:86:b1:0c:28:
                    d6:d4:c3:7b:e6:09:7d:ba:ca:93:9d:d3:a7:6e:69:
                    f9:00:d1:93:c2:a9:1d:60:93:3a:54:ec:5f:d2:7c:
                    47:6b:84:37:99:a7:61:73:78:f0:9c:c6:a2:89:e3:
                    6b:a3:6c:7e:2f:0e:8c:f3:87:78:af:72:1d:23:18:
                    f9:a0:61:14:9a:d5:06:8c:a8:24:9f:f5:e9:76:11:
                    58:ba:b4:e6:d0:ad:71:30:fa:96:b2:b3:93:1d:55:
                    3f:ab:29:7b:de:86:dd:19:24:ce:36:18:2e:b1:72:
                    79:13:ba:43:f7:9a:73:4b:e4:df:19:eb:ac:a4:bc:
                    e7:84:7c:1f:8d:76:19:74:8d:8e:73:3b:4b:f9:a3:
                    88:45:2b:86:fb:17:2b:dd:bf:d6:27:c7:14:e4:41:
                    ea:eb:86:63:b1:77:87:48:cb:fd:d5:44:01:a2:9c:
                    30:5d:57:8b:56:3f:6b:c4:c0:35:8b:4d:04:1b:d8:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:92:9A:AD:1F:0E:F1:C7:DE:F1:FC:D7:DB:51:00:08:14:9B:40:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/574db24d-8675-308a-ac96-bd5f2889ad6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:b6:08:e8:07:12:45:84:39:fd:3d:04:25:1d:70:4a:7b:
         d3:44:53:85:b8:f5:86:12:29:45:b9:bf:7e:86:bf:f4:86:98:
         d8:95:5a:2d:4f:e2:8d:8d:5c:81:e3:00:fa:2a:5b:c0:a1:f9:
         b8:c7:08:62:59:b3:25:98:99:90:a2:74:bb:75:d3:04:9f:98:
         67:41:d6:2b:48:a5:8b:44:9d:3f:3a:3a:af:22:c7:11:70:6c:
         3e:84:ef:e2:6a:2d:e8:2e:da:ca:49:aa:d2:bf:d9:4e:fb:26:
         58:fa:0a:a1:c1:dc:39:0c:4f:d8:12:47:f2:0c:d1:f9:68:06:
         f6:8a:be:0b:29:b4:55:b9:2e:b2:7f:d0:6f:40:b0:0f:62:e1:
         6f:ae:29:39:62:68:aa:67:f4:79:9b:ea:b3:59:03:68:31:2c:
         08:f6:0e:10:17:20:fc:22:3c:1c:95:59:af:ad:42:0f:13:02:
         29:02:97:c4:61:59:e4:3b:51:ba:14:8b:f9:f3:7a:ca:87:51:
         3e:73:fa:6f:79:fe:83:38:e7:55:1f:9f:c9:05:7a:f7:06:4a:
         88:d5:b5:7b:57:1d:6e:37:05:bb:0c:8c:e6:8a:7f:f4:d2:71:
         a6:6f:9e:f2:1b:ba:96:9d:46:02:17:22:72:62:bd:cd:e1:fe:
         47:9b:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:00 2025 by rpki-client