Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1ba5bbf2-69ac-3ba8-9584-f575d2590ec5.roa
File:                     1ba5bbf2-69ac-3ba8-9584-f575d2590ec5.roa (raw, json)
Hash identifier:          UUHI+G5XWgwsPbePjDG5wFTZwdYtEDZ4EpvWQD+lAc0=
Subject key identifier:   51:4C:EB:63:63:09:94:B7:6C:3C:1C:63:BF:3D:79:0B:16:64:17:0B
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F4328584A78E5FC0EC1A69C9120000000
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1ba5bbf2-69ac-3ba8-9584-f575d2590ec5.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     209242
IP address blocks:        104.129.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:fc:0e:c1:a6:9c:91:20:00:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=02b4b04a-5690-466d-82ec-fb38edc147a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:ca:eb:1b:dd:db:60:80:32:56:ad:8b:68:
                    05:51:c2:02:e6:f5:cc:8c:83:de:4b:7a:a4:02:60:
                    b4:28:6d:28:03:2e:dc:0c:da:16:d4:97:7d:5c:e6:
                    c8:73:3f:09:6c:64:ba:42:bb:28:89:e3:d1:3f:e4:
                    2c:bc:e1:88:94:56:b4:23:e0:55:d6:fe:78:6f:cc:
                    a9:fe:2e:69:e5:0c:a1:5f:c6:7e:ff:3f:97:d9:7c:
                    bf:da:8f:c2:16:d0:67:b1:93:8f:d7:6d:5b:7b:24:
                    82:4c:79:d6:0e:57:c2:8c:92:88:6e:ec:b7:a7:8b:
                    e4:b2:2f:bf:7f:25:79:3d:42:f1:dd:31:f4:3d:b7:
                    99:70:73:8c:6e:b5:65:9f:74:f9:dc:98:45:4a:35:
                    c4:fe:52:d5:aa:57:35:34:63:e6:36:79:06:e8:6d:
                    f2:46:c5:c6:4e:45:e1:47:5e:89:36:07:c4:fb:19:
                    5b:91:fb:bb:00:2a:3f:61:86:3e:c5:69:48:b3:6a:
                    b5:c4:a0:63:9a:b7:f4:ec:5e:6b:bf:15:8a:eb:84:
                    73:c2:b6:fc:4e:30:33:f2:1d:ca:5e:13:6f:f9:90:
                    08:e2:74:ee:57:4e:32:1c:8a:a7:06:cb:1c:9e:6e:
                    fa:64:fd:07:51:89:94:12:9d:6a:dc:1f:1e:13:5c:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:EB:63:63:09:94:B7:6C:3C:1C:63:BF:3D:79:0B:16:64:17:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1ba5bbf2-69ac-3ba8-9584-f575d2590ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:ed:0e:8a:79:e2:4c:eb:44:e2:dd:b4:a6:36:2a:37:8d:
         17:50:30:bc:2f:4a:99:09:44:63:74:1f:90:1b:14:b0:98:72:
         81:98:93:e4:97:53:29:0f:49:be:da:98:9b:e8:1b:09:c4:d9:
         e1:ab:d2:5d:af:9f:53:ca:fd:1e:de:b2:86:0d:6a:00:12:b4:
         fb:97:f9:3d:ed:5a:56:03:56:7c:62:de:a6:f7:3c:3a:ed:31:
         3a:57:b8:c0:36:13:5e:53:a7:4b:78:d1:1e:f6:19:83:b8:16:
         00:b3:25:43:46:83:36:83:76:94:d6:c6:9a:97:6e:ee:91:98:
         75:6c:84:2b:68:e7:aa:fe:97:4e:e7:ae:ee:df:91:9a:41:38:
         d7:32:2f:76:4a:e0:03:30:9e:d4:20:46:01:c2:f9:ba:cf:c5:
         7f:9d:94:0a:85:24:a7:89:9d:73:d6:c9:9a:15:e1:80:c3:e4:
         83:ab:bf:a9:01:02:a1:75:45:b5:1a:cd:f5:75:7f:06:b3:c0:
         6e:9d:05:fe:bf:64:6b:f5:74:a9:9d:38:7e:e9:00:1c:d9:a1:
         f4:7d:92:fa:a7:f1:34:90:81:67:67:3a:9f:b1:41:a8:81:8e:
         86:80:fc:b5:c7:7c:9b:e6:d6:c5:44:9c:9b:d7:00:f5:b4:dd:
         00:bc:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:09:10 2025 by rpki-client