Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/31e50926-2ac5-3682-a9f6-c9321fc5b844.roa
File:                     31e50926-2ac5-3682-a9f6-c9321fc5b844.roa (raw, json)
Hash identifier:          ufDH4i+Fto4yQbNEMAPFGfR2SKkVBjDWflQifGry3/o=
Subject key identifier:   B8:0F:67:E6:53:AA:02:2B:3B:F4:35:8D:B2:CC:D6:EC:12:75:45:69
Certificate issuer:       /CN=0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e
Certificate serial:       010D0C9F432858494733DB2D9B62539D3564FCC0
Authority key identifier: 99:C6:6D:5C:07:3B:8B:AD:A5:66:59:56:D5:7F:FF:FE:26:D1:FB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/31e50926-2ac5-3682-a9f6-c9321fc5b844.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     22324
IP address blocks:        104.37.208.0/22 maxlen: 22
                          192.207.252.0/24 maxlen: 24
                          199.180.148.0/22 maxlen: 22
                          204.10.60.0/22 maxlen: 22
                          207.167.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:db:2d:9b:62:53:9d:35:64:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=f6ba4a5e-516c-43c1-b3aa-44decb163bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:34:69:29:e9:79:47:c9:92:02:de:2e:11:
                    8f:8e:cd:38:f4:4e:05:14:69:af:13:16:6f:c4:80:
                    b5:48:7a:dd:fb:0a:58:53:c1:36:e6:a3:b3:69:33:
                    f0:b6:a6:b2:33:0d:25:99:4c:ab:45:07:3f:90:1e:
                    24:3a:fa:73:47:6c:ea:db:5e:4c:b9:f0:23:55:0c:
                    72:5f:ac:89:4a:5a:4f:78:2e:de:79:b8:96:11:7f:
                    cc:8b:59:aa:d8:51:4f:16:ec:be:18:65:7e:38:61:
                    72:a5:26:13:32:bb:3d:4b:ea:88:d0:4f:de:f6:e2:
                    ed:2e:6f:ab:8d:76:a0:46:37:62:26:8a:e7:2c:77:
                    60:88:20:41:6e:10:17:76:57:79:63:ba:1f:f2:b6:
                    1c:88:40:3f:92:ac:b3:5e:d2:5b:06:95:af:66:28:
                    17:6a:2f:43:ed:2b:e3:63:99:3b:83:1d:62:06:2b:
                    a4:70:bc:e8:77:8a:dc:fb:1e:f3:4c:0d:a4:26:2b:
                    da:14:04:91:76:e3:60:16:7c:af:43:dc:74:a3:0e:
                    44:26:a4:84:a8:e6:1b:dd:67:54:15:04:3c:6b:aa:
                    34:67:88:44:04:00:54:97:fd:9c:a9:60:fa:81:90:
                    c4:5b:07:f8:03:19:a3:92:71:5b:1f:3b:fb:5f:da:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:67:E6:53:AA:02:2B:3B:F4:35:8D:B2:CC:D6:EC:12:75:45:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/31e50926-2ac5-3682-a9f6-c9321fc5b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.crl

            X509v3 Authority Key Identifier:
                keyid:99:C6:6D:5C:07:3B:8B:AD:A5:66:59:56:D5:7F:FF:FE:26:D1:FB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.208.0/22
                  192.207.252.0/24
                  199.180.148.0/22
                  204.10.60.0/22
                  207.167.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:50:1d:c0:ef:c6:5c:ef:42:46:a1:79:d1:53:34:cb:54:17:
         38:55:e4:44:dd:ad:1f:3d:90:1a:6a:a8:4d:12:f1:a8:18:3a:
         35:e1:9f:53:04:e3:6f:e6:fb:30:ec:eb:9b:b4:3f:c9:f7:bc:
         a8:c7:10:88:d3:19:f0:c4:81:5c:08:0f:4a:5f:a6:a9:90:c1:
         a8:9a:5e:1d:57:fa:52:0b:9c:30:ef:55:6c:3c:4d:cc:2f:b3:
         d0:f7:c4:45:1f:4a:c5:87:1e:0a:2e:76:66:f6:e9:d4:19:15:
         e3:b5:f9:1e:d6:aa:4b:9e:e0:2d:8f:87:58:a5:87:cc:56:e1:
         fb:9a:28:71:85:ea:8c:df:ce:ea:44:16:13:50:e3:89:60:4a:
         f2:37:20:3d:b1:4c:b6:cc:51:c8:d5:b5:e4:55:2a:a2:61:a2:
         d3:40:87:e9:93:31:7b:97:de:b8:56:53:c9:0c:23:8d:cf:c5:
         37:71:3e:ea:15:44:4d:8e:a9:d2:4f:bd:9d:ad:2e:a2:54:84:
         50:4d:ed:7f:ab:69:a9:0a:5b:74:d8:b2:1f:f2:75:ec:2d:1f:
         f0:cd:02:4e:b1:c4:31:bc:fe:72:13:9d:6b:47:9b:67:af:53:
         23:0e:a6:77:e7:38:f4:99:5f:ba:15:02:00:05:87:c9:aa:6f:
         0c:47:5d:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:02 2025 by rpki-client