Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/108ccdd4-1b27-3819-a595-93a368ad0f30.roa
File:                     108ccdd4-1b27-3819-a595-93a368ad0f30.roa (raw, json)
Hash identifier:          xfODa41SMV8lbtvnsA3MPSComdvItoahMIEclyE1+Rc=
Subject key identifier:   F0:DB:05:16:A7:07:00:E4:2E:2A:02:8E:CB:5E:AF:1B:9F:96:45:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C073A5920F6314EF4F1A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/108ccdd4-1b27-3819-a595-93a368ad0f30.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        174.52.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:3a:59:20:f6:31:4e:f4:f1:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=384e45c3-bbb4-48b8-87d1-e95e9788a36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:15:a2:82:df:87:c3:e2:8f:e4:5e:80:c2:
                    ec:12:78:fd:ac:1b:ac:d6:6d:17:3e:4f:f2:09:f0:
                    af:80:e5:bb:e7:c5:c7:b7:72:f8:64:99:fa:93:cb:
                    dd:75:13:ed:17:ae:c6:ce:08:be:91:10:e8:c1:7d:
                    ab:ef:6b:6a:40:31:cb:27:00:52:95:9f:17:a6:73:
                    63:1c:a5:28:cd:91:ec:2b:79:d2:c2:76:0d:49:9c:
                    12:84:67:fa:bd:55:8c:d2:74:c1:b5:29:23:e1:08:
                    cf:73:f4:1c:46:9e:a3:b9:c9:d6:69:54:f8:e0:5f:
                    aa:0b:a2:17:e5:df:18:20:c9:f5:eb:72:67:2f:7c:
                    8b:2c:96:9b:a7:1d:1b:55:3b:f4:07:97:cc:c0:b7:
                    c9:91:bd:11:09:89:6a:29:af:fd:a8:b4:c0:45:21:
                    7c:6f:9d:43:82:e0:53:6f:2b:45:45:12:65:e1:6d:
                    07:aa:43:28:c5:00:ca:9b:65:0a:35:00:49:5c:40:
                    25:30:1c:cb:d7:58:e7:78:16:22:eb:3a:69:92:b6:
                    d5:83:5a:7e:b1:f4:70:68:c8:75:6e:98:9a:c7:13:
                    57:7c:02:6a:38:2a:f8:86:7f:9e:b3:b1:be:44:a6:
                    7a:c4:73:9f:07:4f:6f:ba:85:c3:ab:ce:18:cb:1e:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DB:05:16:A7:07:00:E4:2E:2A:02:8E:CB:5E:AF:1B:9F:96:45:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/108ccdd4-1b27-3819-a595-93a368ad0f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:43:98:c7:e2:bb:4c:73:45:b2:c0:84:26:b0:60:57:23:11:
         89:6a:70:a5:20:71:f0:f5:ad:b0:f5:d6:f0:ed:d1:ba:b5:c5:
         14:e2:7a:65:f4:b4:11:19:d0:49:f8:58:d2:77:1e:fa:f2:1e:
         fd:34:d5:72:1f:31:dd:3d:5d:9c:54:d2:20:c7:07:ea:5f:bd:
         41:a5:51:69:c6:29:2c:5b:eb:25:b0:0a:50:b9:83:0b:93:0c:
         fc:3b:40:ef:d3:b4:66:eb:31:8a:d0:50:ca:1f:21:63:47:03:
         07:4b:10:65:fd:c9:db:41:ee:ac:ac:e8:17:1c:ec:b5:42:cc:
         97:08:f6:53:f0:bd:9e:92:a4:b6:19:b6:27:11:cc:e5:9a:79:
         a8:5a:28:c2:aa:47:58:fc:7f:5b:80:e5:6a:bc:df:ba:7e:3f:
         a4:13:90:91:64:eb:bb:79:56:13:cd:9f:51:c5:12:31:1b:19:
         ba:51:fa:8a:63:0d:7a:3b:88:2b:62:f4:fe:71:e0:c6:9b:cf:
         02:7f:fa:53:5e:98:fa:1d:cf:52:f3:cb:d1:99:70:5a:dc:00:
         89:40:0a:79:d3:1f:eb:df:ce:d1:a1:99:c1:bd:ee:e5:e0:dd:
         ff:e0:bb:86:29:7f:f6:77:3c:53:74:2a:f5:6f:54:49:5d:bc:
         d8:e6:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:45:14 2025 by rpki-client