Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/307a90d8-fd1c-3f44-98a1-d9657c43fe2e.roa
File:                     307a90d8-fd1c-3f44-98a1-d9657c43fe2e.roa (raw, json)
Hash identifier:          bHbyXh1mV/3kxx/QnCDto7F1j5Hv+ORGfARTEgPcfZ0=
Subject key identifier:   06:FB:DB:7B:4A:90:25:D2:DD:C9:69:57:6E:0A:E6:77:FD:20:2C:38
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A7E7B73167824E68A2FA43C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/307a90d8-fd1c-3f44-98a1-d9657c43fe2e.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        104.154.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:73:16:78:24:e6:8a:2f:a4:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=422acb85-a4eb-4c2b-bde5-3d3622733704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:de:df:cb:14:b6:04:e3:8a:0a:3a:e2:7a:
                    e1:6e:48:5e:50:15:e6:8c:9a:c6:c7:d5:2e:4d:6d:
                    23:74:36:1d:49:7e:99:de:84:84:45:e0:21:0a:28:
                    b5:3b:fc:ea:20:08:86:17:1d:5f:da:f5:96:90:4b:
                    c0:b1:4e:fc:4b:1f:56:31:07:cf:29:ac:2a:48:46:
                    db:cc:c1:88:f0:3d:db:0d:47:d6:bd:fe:ad:7d:a0:
                    00:c4:c8:a8:ed:24:0d:96:d4:45:52:e0:7d:e4:f2:
                    b7:33:97:8a:65:38:3c:a8:66:e4:a9:9b:03:f4:45:
                    48:83:d4:ec:12:48:cf:63:98:ad:55:52:41:7d:2c:
                    e2:ba:1c:27:d9:1a:90:a9:89:7a:58:16:69:2b:7b:
                    70:c8:f3:35:7d:b3:a3:63:4d:17:e4:60:52:76:55:
                    16:a1:6a:d9:0f:2a:28:b6:00:41:fb:bc:3c:56:d9:
                    0e:e4:4a:e3:7d:3d:64:da:a7:4f:3f:f7:8c:1b:cd:
                    f1:92:46:d9:72:81:01:9e:cc:12:0d:2f:65:e3:29:
                    df:89:3a:9a:dc:c0:83:2c:ae:c1:05:a6:09:40:f7:
                    bd:1b:6c:e2:36:63:21:4f:ea:7b:de:8f:9f:06:ef:
                    4b:c8:7b:55:d0:02:bb:11:50:05:5b:83:5b:4c:7b:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FB:DB:7B:4A:90:25:D2:DD:C9:69:57:6E:0A:E6:77:FD:20:2C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/307a90d8-fd1c-3f44-98a1-d9657c43fe2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:d8:94:45:61:24:e7:38:88:f8:64:62:af:f7:a6:bb:5c:
         f8:60:33:4c:f9:4d:6a:c5:8d:f2:34:51:e5:69:7a:ed:cc:10:
         1b:0c:ad:18:ae:29:44:6a:64:78:f5:e2:23:0e:e1:c2:59:3c:
         23:3e:23:fe:59:6c:85:e1:7b:0a:4e:eb:4a:49:89:31:ca:07:
         5f:94:65:70:6c:91:d2:3e:3c:41:c3:d2:34:5d:d0:8d:dc:e1:
         e6:af:0a:ef:4f:21:e2:67:92:d2:a9:2b:b0:97:ee:12:76:be:
         f7:ef:90:84:34:8a:52:24:08:8d:59:a6:95:a4:68:e3:b3:04:
         f2:b6:58:44:4c:fd:6d:24:7c:e5:8e:e5:09:59:0f:70:e6:10:
         a1:aa:02:89:fb:e5:ca:0e:86:5b:40:d0:24:fd:38:4a:5d:a1:
         df:93:19:a9:35:1c:48:31:01:e7:d8:6f:97:51:89:00:c9:7e:
         70:8a:19:00:91:5d:f2:37:86:22:17:45:2c:5d:4c:6b:62:4b:
         e0:43:44:a3:c6:7c:46:22:6b:0b:ba:e7:3e:31:4a:3c:aa:22:
         fb:d2:70:69:9b:e3:ac:41:73:0b:5d:3f:d9:87:a0:ed:df:55:
         d2:7c:f7:ef:69:2b:70:f9:ce:37:53:12:79:a0:f7:53:a8:69:
         50:60:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:01 2025 by rpki-client