Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4e2aa84c-d9e2-362b-b3fe-9cec7315e0bb.roa
File:                     4e2aa84c-d9e2-362b-b3fe-9cec7315e0bb.roa (raw, json)
Hash identifier:          Zhv9bkYfD2582KmARdEy+WwS/y90QR+AGeivvsoIRp8=
Subject key identifier:   71:CC:84:A8:59:BD:D4:C6:E4:29:B4:99:0C:51:40:38:0D:43:26:C4
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584900214A4D5C8B3EC35B56E980
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4e2aa84c-d9e2-362b-b3fe-9cec7315e0bb.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     26863
IP address blocks:        64.40.8.0/23 maxlen: 32
                          104.143.2.0/23 maxlen: 32
                          104.238.229.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:4a:4d:5c:8b:3e:c3:5b:56:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=482181b0-1715-4b54-98af-8f895a2c11cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:91:88:93:82:1f:5e:b3:37:35:5f:20:44:
                    de:85:16:84:3d:7d:73:c3:a0:d6:2d:b7:9d:2c:d6:
                    d0:63:d9:6d:81:aa:47:fa:6c:a1:bb:c7:1e:01:d6:
                    3e:33:f4:46:8f:5a:dc:c0:d5:13:b4:62:30:3f:45:
                    e3:9b:52:78:56:20:0a:6a:e2:b4:a6:de:a9:9b:1e:
                    0a:a7:48:83:b4:d8:50:75:c4:d7:96:19:57:12:45:
                    8d:b7:b4:93:e2:7e:36:67:67:2c:6b:cd:91:25:00:
                    a3:f0:bb:54:64:2c:ea:e1:73:58:dc:7f:3c:bd:84:
                    25:6a:b5:33:9a:7c:b0:a2:cf:dd:8a:c2:0a:a2:5a:
                    b6:fb:13:0a:1f:73:53:c5:55:21:64:78:06:39:4c:
                    aa:c5:80:ed:e8:c1:ef:bd:02:9c:47:1a:7b:84:5f:
                    28:4d:4e:8b:aa:06:bb:00:9c:08:7e:70:16:30:76:
                    ee:2d:5d:ec:4d:ff:44:1e:60:24:b2:d9:1c:74:c4:
                    3b:10:ed:a5:6f:56:df:2b:1f:00:7e:ba:45:f0:89:
                    63:bf:1b:33:8a:5e:e0:f2:a2:8d:73:6c:c7:6c:da:
                    96:9b:d4:e2:05:25:d3:fe:2c:8a:5a:d6:01:a9:c3:
                    6e:a6:4f:5f:b7:6e:23:23:3a:d6:fa:3e:69:9c:75:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:84:A8:59:BD:D4:C6:E4:29:B4:99:0C:51:40:38:0D:43:26:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4e2aa84c-d9e2-362b-b3fe-9cec7315e0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.8.0/23
                  104.143.2.0/23
                  104.238.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:17:98:9e:01:fc:86:74:b8:49:2e:2c:9e:da:de:f6:ec:9f:
         c8:1a:9e:cc:79:3c:bf:42:de:c0:6e:49:97:e0:25:b9:87:ee:
         b4:87:2a:a7:e5:cb:5d:54:bd:6b:6b:19:8a:f6:c6:6f:21:a6:
         af:18:6c:c9:31:7b:1b:49:af:f9:8e:8b:66:74:a6:28:43:74:
         ee:2a:9a:1b:01:80:ed:09:b4:a6:bb:83:19:65:fa:a8:49:db:
         e4:8d:e7:d8:35:61:29:c4:19:75:2f:e4:0b:c5:12:e8:ec:bf:
         93:0b:51:82:7e:12:49:70:f8:d0:93:6e:9a:9b:c1:ec:5c:a2:
         5c:82:b8:7c:04:40:b5:56:ab:bc:5b:c0:da:45:1b:54:5d:96:
         e8:ee:ca:3f:f4:fd:b3:f2:1a:57:45:c9:61:42:05:f0:ab:f5:
         89:8f:6e:ac:ea:a5:a7:35:00:21:86:27:62:ce:04:fd:fa:d8:
         09:d4:bc:f3:3d:d6:a9:7e:62:d6:7e:73:1d:c3:f0:8e:21:02:
         a0:ae:a6:e9:02:b5:bc:dd:c8:ac:e6:f7:03:8e:22:4b:a6:6d:
         33:99:2c:b6:c0:c6:eb:44:c6:71:bb:66:d5:11:4e:e3:ac:b2:
         26:dd:5b:b4:09:e5:5e:00:25:64:c5:07:84:ca:89:7c:c6:c1:
         7a:c3:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:15:03 2025 by rpki-client