Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fe5d542a-dbc7-3de1-96a1-90f789c26df0.roa
File:                     fe5d542a-dbc7-3de1-96a1-90f789c26df0.roa (raw, json)
Hash identifier:          hiRV6P/MfN9qIgyJr6gNffjy1+Hs8sDg/cyfGxGbIQI=
Subject key identifier:   6A:31:5C:81:1E:C5:5C:41:6A:FC:6D:EB:23:A1:6F:64:43:E6:3D:AD
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BBBB77611B4CE73A991E4980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fe5d542a-dbc7-3de1-96a1-90f789c26df0.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        104.205.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:77:61:1b:4c:e7:3a:99:1e:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=a1438c74-df6a-46d9-8817-0ecc38e352bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:bb:d9:65:21:a9:ec:a3:6d:07:8c:29:2b:
                    bf:b9:cc:41:bb:39:ba:67:3b:1a:c6:87:23:35:17:
                    45:eb:68:3c:fd:9c:8c:1c:c0:29:2b:34:eb:2a:8f:
                    1c:9d:12:70:fb:2d:f9:40:38:2b:87:b0:a1:d4:38:
                    8f:b8:f9:bb:1a:f5:e5:e8:f0:92:ac:c6:af:99:f7:
                    62:76:b8:c5:f2:13:76:2a:d0:8d:d8:4b:86:a8:23:
                    b3:27:48:33:50:44:bf:32:79:f3:9f:1a:23:8a:89:
                    8f:60:94:1a:33:e5:45:60:81:64:be:c6:a4:a3:e8:
                    3a:4f:cf:ae:c4:0f:7b:c3:6c:92:ae:b7:eb:38:b4:
                    80:bc:dc:83:72:6e:5f:71:52:a1:ad:6a:a5:bf:60:
                    07:04:8a:fe:f0:df:c9:ef:1a:70:3f:d2:16:36:dd:
                    ec:60:f8:31:29:e0:a8:a5:f7:0e:c2:78:1b:81:15:
                    38:18:a7:f5:96:f0:fd:fe:e6:49:c0:18:70:93:78:
                    b9:48:ac:8b:d7:c7:36:c7:e2:cb:5c:d6:7a:5e:ac:
                    2d:e8:60:b8:f8:ef:99:ad:7e:d2:02:1d:a5:bf:fb:
                    dd:36:57:47:55:b2:91:ea:2e:b1:bf:06:d4:57:91:
                    8d:e9:d9:5b:6d:f8:98:b1:9b:97:98:b1:51:b5:2d:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:5C:81:1E:C5:5C:41:6A:FC:6D:EB:23:A1:6F:64:43:E6:3D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fe5d542a-dbc7-3de1-96a1-90f789c26df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:75:26:1c:e6:9d:36:09:2e:86:66:84:cb:20:48:49:cd:
         29:0b:e6:99:9c:bc:32:da:33:a4:51:7e:06:14:7c:61:30:35:
         f5:da:9a:d2:c4:c3:5b:2e:6e:da:69:b1:07:e4:02:75:56:1d:
         b6:80:47:c9:ff:28:8a:06:05:fd:7c:d2:be:b9:f4:9a:5f:ee:
         a0:ea:ff:69:0e:c2:16:a9:87:ac:6c:e2:b3:e8:99:2b:d7:d3:
         64:61:0a:b2:31:40:2a:8d:87:4f:b8:da:42:a8:6c:fb:bc:9d:
         73:ea:97:49:f4:25:f7:96:4f:2b:91:8a:b6:9a:f8:d1:5a:88:
         93:28:c6:d8:a0:7e:bc:62:ed:69:ab:17:10:33:ab:a6:d7:e0:
         b8:f9:f3:18:45:fb:4e:d7:61:9e:f3:88:4f:97:0c:ef:51:3c:
         7f:09:0f:68:41:ee:28:6f:36:85:ff:65:47:1c:31:de:c1:7d:
         84:ba:1b:ab:82:4e:16:6d:a2:bd:b2:f3:71:87:25:44:7a:b7:
         d3:8a:92:b3:91:d6:40:b6:8b:ea:d6:c2:d7:ac:ef:ac:41:1c:
         c7:ee:ac:62:6b:a8:a8:2b:8f:24:b4:6d:f5:0d:e0:dd:8b:c6:
         1e:c7:39:5a:67:0c:75:4c:f7:7a:5d:e7:cb:d2:1c:b2:f5:44:
         ba:22:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:13 2025 by rpki-client