Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d844260-77a8-3729-8f04-ff361e70e094.roa
File:                     3d844260-77a8-3729-8f04-ff361e70e094.roa (raw, json)
Hash identifier:          d6lO35RlyLEolhtLSK6y+xgPMMoX8eOfCd3KBDOBlQM=
Subject key identifier:   1B:8E:8C:89:EF:7D:0E:03:EC:24:60:6B:E3:92:3D:06:9D:6F:BB:DD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A7E7B7970BFD65E5DE93AA400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d844260-77a8-3729-8f04-ff361e70e094.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        104.154.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:79:70:bf:d6:5e:5d:e9:3a:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=ee1534af-73fc-4481-8b71-548f676b009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:03:a3:cf:8e:04:c1:d4:c7:f8:7d:ca:d7:
                    b5:90:7c:44:89:f5:a8:25:cb:95:f6:98:17:34:62:
                    3e:d5:c4:50:82:a7:76:53:33:72:c7:42:42:f7:04:
                    41:7c:3e:7b:9c:b4:95:cf:73:7a:d4:8a:90:61:d7:
                    4c:f8:82:c8:f7:ff:b3:aa:af:96:ec:90:a8:1c:ef:
                    28:5d:f4:3c:dd:39:e7:0f:69:e3:ec:9f:af:6c:4e:
                    ec:76:03:cb:c6:c7:5d:c8:6f:cc:ae:20:69:b6:55:
                    fd:c4:28:13:97:59:55:1b:ca:6d:c7:f8:4f:9d:05:
                    f3:f4:5c:c4:da:79:ac:6b:f8:6b:96:27:25:99:6a:
                    1a:78:3a:cc:7a:0d:8f:6f:5c:7e:fc:a0:1a:03:5d:
                    64:ba:c1:c0:0e:d2:82:3a:80:b9:96:85:50:92:db:
                    33:27:85:5b:c3:83:88:5f:60:bc:05:8d:ef:d5:99:
                    d1:b6:9c:3b:76:c1:aa:76:ca:ee:f8:9e:36:58:99:
                    87:86:eb:04:b6:30:14:87:ac:8b:2a:c4:6f:32:0d:
                    c4:c1:4d:04:50:e1:42:28:dd:fa:29:62:94:d1:90:
                    89:14:96:67:32:05:92:b4:2a:e6:a2:97:a9:ed:cb:
                    ee:ab:63:ea:08:e3:60:19:e5:c8:6b:79:83:bd:48:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:8C:89:EF:7D:0E:03:EC:24:60:6B:E3:92:3D:06:9D:6F:BB:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d844260-77a8-3729-8f04-ff361e70e094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:47:8c:d3:80:b9:e7:37:17:a4:d5:75:17:43:89:db:8b:0d:
         f3:15:c5:3c:90:5f:a1:dc:86:b8:77:ac:51:59:66:e5:30:38:
         f0:c0:b3:c4:b1:ea:b1:02:5b:c8:a1:26:ad:25:7d:22:08:6d:
         e9:9d:35:39:d2:2d:8c:af:9f:f4:88:75:34:2a:b4:03:df:3f:
         4f:6b:c5:1f:11:59:04:f8:cd:b1:6a:48:4e:0c:c3:d9:a8:f3:
         02:75:7e:dc:e5:a0:99:fa:0c:0f:ca:25:2b:37:d1:0b:f0:4f:
         4d:91:54:ce:ca:75:47:78:ef:49:61:bf:c2:8e:50:b6:f0:37:
         c2:2a:5d:47:c1:e9:a5:ec:8b:95:28:4b:e2:f4:4a:cd:6e:a9:
         d3:ee:a4:70:5f:76:80:ff:bd:ff:8a:db:12:af:55:49:a1:78:
         c8:40:3e:e4:36:cb:03:98:24:f4:7c:11:2a:d0:e4:de:be:2c:
         81:9d:aa:de:b9:fd:04:4a:6d:73:28:15:e1:db:1c:55:e5:d8:
         b7:97:92:93:6e:8f:34:69:43:d3:8f:60:d5:8a:bf:a3:0b:f2:
         b7:80:bd:d2:f0:73:f3:93:f5:13:dc:da:f2:a8:69:b7:b2:43:
         43:13:64:a0:52:d9:25:41:34:84:a7:3f:34:bc:31:bc:57:dc:
         51:fb:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:24:58 2025 by rpki-client