Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4808f904-800f-3ab1-b818-82b92d05c8ad.roa
File:                     4808f904-800f-3ab1-b818-82b92d05c8ad.roa (raw, json)
Hash identifier:          x3K3cmCwX//guH/j+p0+PwEmfMTc7ymGwNh09GbXc0E=
Subject key identifier:   85:FA:76:B1:DA:7E:68:39:ED:D0:5B:22:0A:DA:46:EA:84:96:5A:A0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBB878DCA9CD0078987300
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4808f904-800f-3ab1-b818-82b92d05c8ad.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b8:78:dc:a9:cd:00:78:98:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=edc80bc7-c88f-48c4-8fcb-b49c228c9cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:ef:85:d9:7c:6b:fd:3a:f9:4e:ac:a0:03:
                    e8:b5:c5:eb:a6:fd:e4:7b:cd:c3:c9:3d:5c:c2:11:
                    2b:a0:26:00:0a:76:3f:b6:1f:e4:c8:7e:66:87:e5:
                    54:a1:e4:e5:de:57:5d:a0:af:2f:6a:6b:e3:86:9a:
                    aa:d5:82:28:3f:42:27:5e:f8:e0:d5:bf:22:d2:11:
                    da:1e:da:7b:7b:0d:0e:70:6d:37:40:c7:41:55:6f:
                    c7:05:6f:16:d0:28:b1:ef:2c:6f:bc:c8:74:02:3f:
                    0c:0d:70:dc:15:41:47:7d:59:88:d6:b3:c1:79:57:
                    22:f6:f7:79:40:6b:94:30:56:d3:49:c3:43:26:e0:
                    56:59:76:19:a8:b8:b8:dc:da:de:b8:37:9f:ce:f6:
                    5f:e8:72:2c:5f:c1:0f:32:ed:62:24:0b:59:c2:a8:
                    bc:c0:23:b9:cb:7a:e4:bc:09:fc:f4:62:a3:e7:7f:
                    2d:46:6a:3c:ec:ee:2f:8b:94:ae:f5:21:77:a9:81:
                    ff:df:91:46:c9:b3:07:ec:97:6a:3b:49:b9:db:0f:
                    ca:b3:33:b9:9b:db:58:b3:f0:f2:7b:b1:99:b1:6f:
                    05:e8:d4:b2:ae:0b:10:0f:78:92:8d:64:1e:b8:d1:
                    8e:09:6b:91:bb:98:14:68:69:31:c4:20:89:00:48:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:76:B1:DA:7E:68:39:ED:D0:5B:22:0A:DA:46:EA:84:96:5A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4808f904-800f-3ab1-b818-82b92d05c8ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:66:35:4d:36:f4:10:da:ca:03:f8:6f:72:18:58:89:42:
         66:41:79:c5:01:54:85:05:c7:85:ed:87:8e:28:5f:3a:cc:1d:
         f4:8a:8a:63:60:f0:4e:98:98:d2:67:b8:cc:d3:46:92:be:38:
         0b:09:e0:10:8e:43:c2:df:7d:03:24:9f:80:3b:55:a0:8f:ec:
         b1:8a:2f:68:ef:cc:54:09:ee:15:58:89:a0:57:8b:a0:fc:cf:
         13:1e:ad:a5:cd:da:cc:c0:b2:5a:50:52:b5:1b:42:e7:24:48:
         64:83:b2:a1:a5:0d:79:f8:c9:fb:df:07:43:91:b4:a5:a1:f4:
         47:40:ce:07:4e:6e:01:4e:c0:74:96:f0:ad:53:63:b3:7f:6f:
         b7:3a:ed:3c:a7:f0:72:01:ac:04:2f:bf:18:da:c5:65:99:80:
         32:b4:e7:29:de:4d:15:fc:b6:8f:b3:fd:73:7c:85:bc:50:77:
         3f:87:09:c1:57:e1:29:02:94:b5:7f:63:d7:de:bc:08:5e:92:
         83:39:4e:66:4b:9f:50:39:0a:ea:ca:0b:8a:83:7d:cd:77:08:
         fd:68:43:fa:21:89:7e:f6:de:c8:1d:b8:98:58:c3:ad:58:c7:
         70:19:d3:4f:b9:0c:b6:fc:29:d9:a3:5f:2a:5a:bd:51:9e:7c:
         8a:e2:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:24 2025 by rpki-client