Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa
File:                     86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa (raw, json)
Hash identifier:          PeYsRV1GSBXtohCPU6B+olFmBr+hLmVFpBOMcrEvUQE=
Subject key identifier:   83:D9:0B:DA:AA:09:F7:6C:C4:F0:4C:43:D5:41:93:B3:6D:41:8B:13
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F432858491AA6BA8C8113A2333B2C4270
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     23158
IP address blocks:        104.255.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:ba:8c:81:13:a2:33:3b:2c:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=de93fd79-696c-45c6-b660-64dfa44650f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:f2:7e:9f:41:44:a1:9a:a6:f4:b6:9b:de:
                    8d:0b:71:07:2f:f5:cf:7d:86:91:52:07:2b:f6:f4:
                    40:27:50:52:53:80:9b:1c:a9:be:56:fe:01:a0:3b:
                    51:07:40:e0:33:9d:57:78:fe:56:96:e5:f5:ae:f7:
                    0f:70:a1:e9:a5:fb:e4:df:56:8a:3e:ee:3a:43:ca:
                    d4:c0:96:b9:84:7d:f2:4e:e3:d2:51:f4:0c:8c:74:
                    f2:2a:ee:a0:fb:fa:15:d0:7a:4e:3e:66:96:2e:91:
                    23:b7:61:23:c5:2b:44:b4:ae:37:92:53:c7:e8:4c:
                    3b:25:ab:b4:f3:b4:18:cc:0b:d8:d9:16:e5:78:a6:
                    db:62:ba:c2:ee:06:ad:ea:15:17:a8:2d:ab:9c:d5:
                    53:10:80:29:78:d2:0d:5b:1c:e0:85:35:85:f7:69:
                    b9:79:fd:86:99:66:37:53:94:92:85:05:c1:b6:10:
                    b8:17:57:2f:bb:e3:57:71:be:8b:dc:73:af:cd:62:
                    54:c7:bf:6a:41:bf:2b:3f:4b:d8:a5:6d:63:b6:25:
                    6f:98:56:3b:83:bb:17:cc:eb:1e:fb:d6:d3:b4:84:
                    4a:d8:21:b8:db:75:ba:35:f4:f6:1a:72:4f:ea:e9:
                    c6:26:a0:85:e8:d0:74:70:80:10:6c:40:3b:38:00:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:0B:DA:AA:09:F7:6C:C4:F0:4C:43:D5:41:93:B3:6D:41:8B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:7c:30:ee:38:3a:80:fb:16:01:96:d7:8a:b6:a5:ec:58:8f:
         cb:96:be:12:c9:dd:61:1d:76:4c:02:96:41:49:7f:92:83:ef:
         61:00:f3:25:95:48:aa:f9:88:c6:34:20:0e:2e:8a:79:88:f9:
         95:1d:59:f0:62:b2:3a:b8:cf:22:d1:ee:ab:1e:54:01:85:40:
         bc:65:c6:9b:fe:0b:7f:c5:5c:75:58:9e:8a:8a:39:6c:91:48:
         6c:1a:69:08:cd:95:47:31:e0:19:d1:f3:f1:a4:fd:fd:88:18:
         47:cb:a9:b1:d9:d2:26:3d:7a:59:db:13:a2:c1:8d:87:24:73:
         9a:5b:5d:83:f8:f0:00:b1:b4:cc:a5:33:52:4a:bd:f1:42:60:
         4e:b7:c3:5b:5a:78:03:fa:d4:df:6e:73:8d:ff:e4:9f:1f:a6:
         06:a7:e0:28:8d:f6:12:75:35:de:70:ec:89:b6:73:6c:2c:f9:
         0f:d5:d7:80:9f:79:ed:19:f2:f8:34:12:2f:c8:09:b9:ef:85:
         d5:23:ab:50:62:69:33:38:64:41:79:5b:fb:03:1d:b8:28:41:
         14:7a:fa:ad:ca:ea:83:5c:df:78:42:41:e8:a1:e4:ea:d2:c1:
         11:fe:cc:1e:c8:51:b7:41:83:25:78:1f:a6:c3:d3:4e:e1:86:
         df:59:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:08 2025 by rpki-client