Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa
File:                     9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa (raw, json)
Hash identifier:          7qoiCtV5qBozqJwFI3+2fBwtBR7fx+lQifsj8aDjijI=
Subject key identifier:   D7:46:E2:5B:AB:70:EC:E0:BA:B6:D3:D0:C0:D4:19:5B:24:0D:48:FD
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F432858491246AA77A97E3275F62BFA40
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     398493
IP address blocks:        104.250.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:aa:77:a9:7e:32:75:f6:2b:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=31b64b35-e298-419e-9dc2-f071ad80bfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:7b:63:41:a7:b5:d9:1c:9a:d6:42:11:d6:
                    d3:22:dd:55:8e:d6:81:0e:2a:5c:74:42:b5:0d:89:
                    0c:dd:95:ff:be:7e:31:92:0a:b3:48:7d:3e:50:78:
                    85:93:aa:65:d6:1c:dc:eb:8e:a3:45:26:65:4d:5f:
                    98:b3:2c:2d:28:3b:a6:38:dc:ec:c8:67:ef:a3:5e:
                    c1:04:08:8c:05:d2:16:0f:a7:3e:2e:02:23:f9:13:
                    f9:31:de:81:3a:27:c5:4c:44:22:74:17:67:17:e0:
                    9d:4c:14:ce:3b:8d:3e:3b:f7:8a:1a:46:72:8a:6d:
                    0c:05:8e:e8:66:38:cc:78:e7:4f:5c:0f:0c:f3:ac:
                    bf:7e:0c:6e:e6:35:f4:c4:85:bc:0a:67:e3:ff:94:
                    78:b1:67:ac:3d:53:2c:f6:aa:34:6f:ee:94:83:4a:
                    5c:dc:b3:64:6c:32:f1:9f:e2:c8:98:1a:80:5e:d4:
                    3e:84:ec:4a:05:a2:fb:18:ab:af:de:36:9c:3e:f3:
                    a0:97:12:10:59:64:71:d8:d5:91:30:91:86:58:38:
                    f8:ff:b4:1a:fb:56:42:e8:07:c3:2b:e9:49:6c:f9:
                    5f:0c:6b:ad:bd:f0:6b:6b:6c:f9:f3:bc:2a:da:f3:
                    c9:c5:f5:89:84:6a:4f:4f:ff:b5:79:bd:e4:77:e4:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:46:E2:5B:AB:70:EC:E0:BA:B6:D3:D0:C0:D4:19:5B:24:0D:48:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:1e:6d:44:6c:f9:1b:bb:a2:ea:10:15:ef:80:9e:a1:9d:
         cd:a9:e6:f1:60:80:24:a3:3e:13:74:3b:35:b2:d6:40:81:9e:
         f0:5a:e3:44:4b:79:97:66:ec:28:47:2a:98:35:91:01:86:b5:
         41:81:14:40:6e:f2:f8:ae:44:d4:dc:56:3a:ff:cb:ab:8d:ed:
         b4:f3:4f:f1:e5:d4:7b:40:d0:5e:52:fe:a3:0d:fa:80:bf:54:
         7c:cc:e2:0e:44:7b:f5:8c:bd:33:fe:31:51:0c:9d:c9:53:08:
         74:e8:06:7f:73:7c:aa:29:e5:a9:68:96:92:9c:5a:ce:82:47:
         75:7d:21:18:0d:77:e2:ab:e9:aa:b8:ff:8d:42:65:06:54:b4:
         43:bc:4c:53:78:2c:ae:03:c4:6c:11:40:bb:a0:01:29:23:d4:
         d5:76:ee:d3:a0:ce:08:a1:9c:13:ee:0a:74:43:69:f6:4e:b6:
         aa:0c:f0:69:61:dc:ea:64:0b:cf:52:2f:31:db:87:49:57:00:
         7f:6d:aa:3c:73:d2:dc:3e:6d:ac:4d:1c:2f:41:cd:9e:81:b4:
         79:07:bc:7c:d9:45:a7:83:36:d4:c2:c5:e1:02:e3:c9:94:5c:
         90:7a:e1:d6:0e:4e:29:f3:73:4b:7a:b3:7d:e7:a9:27:f1:b6:
         24:21:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:26:02 2025 by rpki-client