Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa
File:                     d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa (raw, json)
Hash identifier:          BBzGiMrONQdppB91CrBpIMHSr1buCZmV+XwW5x0phXw=
Subject key identifier:   E2:D8:CF:93:0D:C3:EE:F5:AE:7A:C8:70:25:CA:77:35:1A:C9:90:C6
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F43285849FCAA7D5778499906C71E6B00
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     1640
IP address blocks:        104.245.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7d:57:78:49:99:06:c7:1e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=5ebc8205-0317-470d-abb3-6ce45dca1f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:f1:41:0e:7f:63:09:b9:a7:d6:e2:6f:33:
                    77:dc:2c:27:ee:7b:18:af:09:1e:8d:cc:fd:2d:77:
                    44:47:40:19:d8:d5:69:bd:58:c6:0f:9a:3f:de:65:
                    e3:a3:5e:5e:bd:34:ae:fb:8f:68:42:41:90:86:b7:
                    d5:d7:54:52:ce:79:b9:43:11:7c:e6:ca:a1:3b:4c:
                    46:93:bc:5d:87:f0:4d:79:b7:a2:e0:f2:8c:04:37:
                    4b:8f:6c:34:6f:f6:e8:a8:62:5d:00:25:f0:32:1f:
                    e3:26:d4:bb:d9:33:ec:cb:20:eb:45:ed:cb:55:11:
                    10:37:70:88:5b:9a:b5:da:2d:02:b2:6a:df:00:65:
                    b0:98:2c:3d:a4:76:17:b6:69:51:e6:0c:dd:fc:07:
                    89:b3:ba:d9:e8:d5:93:1b:e6:9a:b1:4e:74:54:d9:
                    8d:72:10:7a:8a:c2:85:27:06:de:ec:2f:36:9b:72:
                    76:8b:33:19:29:3d:67:e8:65:15:6e:1e:18:fe:5c:
                    fd:c3:4d:17:30:d7:b9:db:91:f8:b8:9e:59:8f:97:
                    75:70:7a:6e:c8:3d:96:db:aa:b2:e7:fb:98:c7:b9:
                    23:30:4e:5a:36:75:cf:6c:16:bf:05:99:e8:4e:6d:
                    1d:59:d0:78:13:f7:40:a1:c4:ed:ae:c3:85:57:7d:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D8:CF:93:0D:C3:EE:F5:AE:7A:C8:70:25:CA:77:35:1A:C9:90:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:fe:70:8f:3d:36:13:b8:38:90:d6:56:c6:24:d1:90:58:
         7a:69:40:49:e2:ce:c6:93:64:ce:9d:1a:0b:a4:45:8f:2b:32:
         6e:1c:0c:29:a8:37:e4:3c:6f:54:87:33:06:2e:f7:0a:25:36:
         7c:f9:be:a3:64:b6:b2:4d:d5:0d:22:98:84:c4:a1:82:0a:66:
         d4:1c:8c:3c:cd:90:b9:fa:07:53:7f:ef:b5:fa:5f:a3:b9:d2:
         a6:76:5f:d2:d4:e8:33:99:86:c6:62:55:a3:59:85:00:ad:da:
         8c:f4:4c:cf:d6:90:a1:ef:9b:ba:ea:63:86:f0:dd:4c:f3:c6:
         3d:ac:2c:35:33:cc:dc:5e:71:be:bc:be:d9:3a:d5:69:eb:60:
         72:03:e9:88:c9:b8:13:e2:27:05:c8:ee:e5:25:51:62:04:62:
         ec:be:0e:b7:13:76:e5:fd:b8:e6:48:63:dd:e0:cf:bc:b8:e6:
         3f:a0:4e:11:1d:f7:02:8a:72:1b:bb:91:1a:e3:62:f9:39:3e:
         9b:52:3a:92:93:cc:a3:ae:a1:5d:75:4d:cc:cb:76:1a:c8:d3:
         95:be:59:7a:48:6b:e3:33:03:23:dc:0c:9f:5c:d3:09:ff:e0:
         3a:b3:89:21:ee:3e:27:8f:19:b4:4a:84:39:7c:f5:8d:af:0e:
         43:39:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:31:09 2025 by rpki-client