Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa
File:                     58f3b9ab-ee81-3efb-90a1-932f6856911c.roa (raw, json)
Hash identifier:          wX8Q+VjFA/ZLlm0yUHTByFYspPevCQgUeuMfhp7uJjo=
Subject key identifier:   A0:2F:36:7A:44:5D:6B:32:1A:9B:A0:EC:46:CD:9F:DA:74:DD:A2:77
Certificate issuer:       /CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
Certificate serial:       010D0C9F43285848E16BD4EE2D23428300776A80
Authority key identifier: 5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     393431
IP address blocks:        104.219.100.0/22 maxlen: 22
                          2620:80:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d4:ee:2d:23:42:83:00:77:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=21395eb3-857e-495d-8b2b-cfccbf7def35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:6b:0e:62:e7:16:b9:b0:33:9d:45:7d:f2:
                    43:dd:d5:f9:e0:32:49:5c:8b:ed:3c:e8:e6:b2:7a:
                    8c:81:9d:25:fb:f3:60:f0:8a:1b:90:7d:0e:03:32:
                    29:40:36:a5:22:c9:f8:7e:4c:09:3e:b9:84:f7:b5:
                    09:93:70:86:c5:fa:99:29:f8:fb:fc:f7:4e:88:60:
                    22:ee:42:53:88:11:56:b4:3c:88:26:9b:6c:db:dc:
                    dc:0c:a8:f1:bc:72:ef:ce:81:d8:3b:e1:7b:05:21:
                    ec:51:02:07:1c:b0:42:10:5b:9c:ae:7b:ce:e9:38:
                    d9:96:81:1c:7f:30:8e:26:85:7a:c8:20:af:a2:20:
                    e2:61:69:62:0a:d5:76:74:c7:7b:ae:7e:45:d7:b2:
                    b2:40:2e:1b:2f:ef:49:39:b6:68:8c:ac:da:5b:ee:
                    2c:55:2e:2e:cb:a0:70:be:ce:d0:a9:3b:0c:96:f3:
                    85:22:eb:75:95:af:1e:66:5c:7a:2c:e7:18:90:c9:
                    ec:df:1f:3e:e1:33:de:57:bb:4e:ee:40:9f:32:ba:
                    9a:85:6c:6e:cf:4f:0f:86:d2:21:67:46:1c:d8:4f:
                    55:43:80:65:fc:24:bf:c0:f5:9f:78:b2:4d:72:fe:
                    b9:6b:dc:12:2c:9c:67:8d:f6:09:55:50:cf:7d:71:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2F:36:7A:44:5D:6B:32:1A:9B:A0:EC:46:CD:9F:DA:74:DD:A2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl

            X509v3 Authority Key Identifier:
                keyid:5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.100.0/22
                IPv6:
                  2620:80:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:77:22:12:b3:b6:82:76:1a:f5:60:21:b9:42:6c:1f:08:
         27:60:82:2d:a5:43:1f:70:5c:2e:f7:ea:a3:1f:7a:dd:58:3a:
         e2:3b:db:d2:fb:34:26:fc:2b:a3:5d:34:aa:e1:11:61:ed:40:
         55:fb:2b:54:30:93:c6:97:c6:57:a0:a4:2f:87:01:ad:76:d4:
         3c:19:36:35:7e:9a:39:86:25:14:25:d8:a1:57:46:5d:7c:a5:
         c2:9d:76:81:51:b3:76:41:eb:bb:7f:cc:14:e1:36:2c:c9:08:
         e8:0a:ba:81:a0:3f:b0:c7:96:e9:1c:49:5b:6e:5b:e2:d9:4c:
         c9:fc:95:73:77:bf:be:d2:bd:e5:9e:63:ef:8c:d1:93:5e:b2:
         04:cc:0a:1a:1f:3b:e9:a8:20:4f:73:a3:91:b7:13:32:f7:b2:
         66:67:ab:51:75:52:bf:52:fb:72:05:9c:a9:f1:42:e3:35:8f:
         d0:9c:1b:54:81:8e:ee:ac:68:d6:5b:84:85:d5:d9:7e:4c:d6:
         31:e1:ec:0f:87:51:c2:a0:94:3a:f0:06:2d:e7:e1:81:0b:3d:
         ec:25:53:b8:18:fa:5f:d5:d6:35:1d:5d:12:19:3c:22:c0:6c:
         03:c7:f3:5e:9e:4c:e1:6d:8f:cc:e1:1d:7f:fc:75:64:35:d4:
         02:6a:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:47:24 2025 by rpki-client