Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
File:                     735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa (raw, json)
Hash identifier:          bhxzaQqVJAy+4hEMGBJUnn4TJ2JQ2cCg+WhLWyg3tFo=
Subject key identifier:   B0:1B:C7:AF:95:C2:97:05:58:13:3B:D5:AE:92:69:13:A9:AC:7C:73
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F43285849674EF5E41E82149A99A45288
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     140224
IP address blocks:        104.143.46.0/23 maxlen: 24
                          172.81.96.0/22 maxlen: 24
                          172.81.100.0/23 maxlen: 24
                          198.176.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f5:e4:1e:82:14:9a:99:a4:52:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=d8126de4-4e92-4f90-a90a-c388350615f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:98:06:39:09:cc:55:22:9b:d2:f5:8b:ea:
                    a4:17:8b:96:1d:9e:4c:95:02:4c:da:46:8d:a5:9d:
                    ae:22:a8:ae:02:d4:aa:a5:8a:10:ad:a3:ac:00:44:
                    c5:96:1c:b7:90:9b:3d:5e:d4:0d:5b:88:50:83:13:
                    94:04:c2:62:ab:70:bd:12:e8:84:c6:2b:f0:e6:1e:
                    00:10:26:7a:39:74:bc:d5:21:9d:d6:01:0e:6f:53:
                    ba:ba:a9:f5:f8:c8:bc:56:97:4b:10:01:24:b7:d6:
                    08:c3:96:ac:14:66:dc:00:1d:97:65:55:c7:5d:05:
                    f6:7b:ff:4a:2d:33:1b:07:f5:8f:db:75:73:87:0c:
                    b7:6b:81:5c:c1:e8:70:dd:db:5b:52:ee:31:39:bf:
                    0c:81:ab:fb:2d:0d:6f:e1:18:19:85:6e:a1:84:23:
                    b7:3d:b8:10:39:1f:ba:2e:67:14:a2:40:85:a1:e9:
                    0f:4f:a4:9a:07:0f:b5:79:ab:fc:39:e2:ec:60:ce:
                    96:f8:8c:f3:97:25:12:77:5c:4a:d0:22:63:f2:88:
                    f8:56:30:04:70:30:89:c8:54:4f:40:85:17:df:c2:
                    5d:91:38:8d:e8:90:24:4f:83:75:79:ae:bc:32:45:
                    cc:e6:01:6a:41:4c:c6:92:90:a2:84:01:63:86:56:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:C7:AF:95:C2:97:05:58:13:3B:D5:AE:92:69:13:A9:AC:7C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.46.0/23
                  172.81.96.0-172.81.101.255
                  198.176.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:44:27:cf:90:9f:66:84:f0:ef:f5:1c:b4:ea:a6:28:45:
         3b:c5:b6:fd:c1:84:5e:b8:0e:2a:48:49:4b:9b:da:a0:9e:83:
         e0:77:46:5e:ff:cb:c2:d4:6a:b2:45:53:2a:f0:18:7d:9c:f1:
         87:66:b9:88:f7:21:ce:d1:ed:18:3a:5b:48:d8:94:1f:f9:72:
         14:71:93:76:37:19:4e:06:6b:65:16:dc:81:94:6f:24:66:16:
         49:cc:aa:5b:de:fc:6f:1e:9f:8a:bc:13:c5:a8:84:3b:1c:08:
         75:5f:d6:71:8d:71:b1:a4:4d:5f:c3:f1:2f:de:58:a8:45:05:
         c3:4c:4c:eb:32:c7:a1:f1:97:fb:d9:86:5a:f2:a3:c7:23:0f:
         69:be:69:5e:7b:82:18:fb:cb:6b:b7:89:53:3f:87:a1:02:cb:
         8f:b0:54:2d:4f:41:7c:ab:af:70:56:a3:39:bb:31:0e:82:a8:
         12:d9:9c:0e:44:99:4f:c3:b3:46:4a:ba:d6:24:76:1f:39:78:
         a7:ab:3a:71:80:70:a3:46:8b:fd:0a:ea:fc:08:a9:09:5d:23:
         bd:9e:03:fa:4f:b6:4b:1f:0d:b2:5b:53:f2:ec:c1:58:eb:dc:
         b3:ab:78:51:ab:25:1e:30:c7:e9:0f:18:be:94:e3:15:1c:68:
         ee:e2:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:17 2025 by rpki-client