Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6514575e-8468-3907-b58e-f5d423e664e2.roa
File:                     6514575e-8468-3907-b58e-f5d423e664e2.roa (raw, json)
Hash identifier:          VF8fltkFnCj236BXUmYJO/fE0UsOvl5hbYI4xnUmvbw=
Subject key identifier:   0E:93:77:2B:6A:15:C9:5F:EC:C3:6B:F2:E2:F0:6F:0C:B5:49:19:48
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A066DACBEC422F670F9F06940
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6514575e-8468-3907-b58e-f5d423e664e2.roa
Signing time:             Fri 30 May 2025 12:56:36 +0000
ROA not before:           Fri 30 May 2025 12:56:36 +0000
ROA not after:            Thu 28 Aug 2025 12:56:36 +0000
asID:                     208485
IP address blocks:        104.250.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:6d:ac:be:c4:22:f6:70:f9:f0:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 30 12:56:36 2025 GMT
            Not After : Aug 28 12:56:36 2025 GMT
        Subject: CN=78be696c-699d-4ec7-b5fa-3be0dbe05dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:d5:17:b2:5a:d0:a2:06:54:c2:ca:99:69:
                    50:34:d0:18:d2:61:35:09:7f:d4:17:a3:08:73:d8:
                    56:fd:d9:6d:ba:27:ba:5d:64:f0:96:39:fa:69:c6:
                    67:c9:18:24:83:55:a5:65:de:ad:2d:e9:c2:e1:d1:
                    ad:c9:5e:cb:05:85:84:ec:0c:2a:04:03:9d:0b:0f:
                    3b:a7:51:08:9d:87:95:bc:4d:2d:7d:8f:78:ee:9d:
                    2f:8c:6f:85:70:ed:60:d2:05:16:19:cf:ae:5b:53:
                    b6:63:62:0b:73:a5:d9:37:40:10:f0:96:6d:2a:36:
                    3b:ca:fa:f9:47:c6:59:74:34:94:e1:3e:4a:ee:af:
                    c1:3f:ed:0e:29:50:29:03:7e:07:38:e2:fa:87:b9:
                    5b:11:f1:9f:78:83:56:bd:d7:60:50:8e:ac:d3:6c:
                    5c:72:dd:b1:db:b1:2b:6d:3f:64:bb:6c:b7:dc:64:
                    33:6c:19:53:bc:1a:88:ac:dc:4f:59:e3:87:dc:40:
                    de:23:8d:a9:ca:07:ca:0a:e1:07:54:b1:1f:83:94:
                    6b:22:9f:2e:9c:2b:b2:73:f8:00:1e:a5:80:56:83:
                    2e:1a:89:40:bf:07:1e:0f:d5:8a:8c:94:b0:3f:d5:
                    54:9b:21:37:51:c0:bc:c7:6b:a2:65:ea:50:48:2f:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:77:2B:6A:15:C9:5F:EC:C3:6B:F2:E2:F0:6F:0C:B5:49:19:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6514575e-8468-3907-b58e-f5d423e664e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:94:f8:39:e7:bd:8c:a9:6f:9e:68:f6:a4:ea:dd:d9:d7:
         ae:07:c6:15:fc:3a:22:d4:94:55:ef:ac:42:65:51:df:0b:21:
         43:bf:58:19:d5:9a:79:aa:c3:ac:79:73:bd:b5:12:de:1a:41:
         d6:65:03:0a:97:d1:de:f0:b8:f1:60:f9:5e:24:1a:a4:27:0f:
         81:e5:20:71:08:66:7a:44:9e:82:a1:91:21:94:8f:73:26:cd:
         d8:78:6e:9a:b8:f0:97:53:8d:9d:65:47:98:97:e8:f4:4f:04:
         0e:f9:ef:9d:80:c4:41:05:fa:ee:bd:62:0a:0d:5f:51:eb:56:
         7d:7f:2b:e0:5d:12:42:a6:d7:2d:97:74:41:86:2e:06:1c:70:
         4e:e0:e6:d4:a8:22:d8:c4:9a:30:02:83:e2:4a:2e:dc:45:57:
         7f:79:71:af:c3:54:c7:8d:23:3b:b1:9b:1d:96:18:84:f3:ac:
         5b:c9:97:02:44:5f:81:15:47:9c:7c:f7:31:15:7a:58:53:59:
         60:63:8a:95:f4:c2:14:39:63:f7:d7:af:3f:50:b0:d7:d8:c7:
         09:3f:4d:9b:e3:77:29:79:b1:0c:ff:a7:ba:74:a6:8a:d3:fc:
         8d:d2:eb:ef:62:2c:86:eb:3c:de:78:3f:20:cd:1d:7c:0b:bb:
         db:43:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:50:03 2025 by rpki-client