Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/ee71e5ac-df57-3cf7-a4b2-90e429a0cb4c.roa
File:                     ee71e5ac-df57-3cf7-a4b2-90e429a0cb4c.roa (raw, json)
Hash identifier:          Ap1/gx3RcRQbGoaeauj5/mA0TqL6wysKbxS0XZ6jLfU=
Subject key identifier:   A6:4B:90:15:38:6F:EC:92:1C:00:D6:E0:90:DB:2E:0D:B5:B1:D0:B9
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584A612B13AD8EE1B4A1FB172680
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/ee71e5ac-df57-3cf7-a4b2-90e429a0cb4c.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     26533
IP address blocks:        104.167.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:13:ad:8e:e1:b4:a1:fb:17:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=d5bd48a6-cd30-4181-9996-fd8b722fb1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:96:cc:16:70:c0:be:14:67:e2:43:d9:e4:
                    a5:32:57:8f:80:f1:0c:23:1f:89:b3:8f:88:91:51:
                    28:1f:5d:c8:2a:97:1b:ef:db:61:8b:88:ec:b4:52:
                    52:ec:af:7d:4f:62:4b:63:c0:56:13:55:79:d8:f0:
                    c4:b3:f5:cd:0f:46:75:15:c2:b3:29:50:5c:61:d5:
                    da:97:25:29:ec:f6:58:08:a7:52:07:db:83:eb:87:
                    7a:65:ab:5f:42:07:af:cc:c9:38:be:12:85:22:57:
                    2d:f6:d4:e6:ac:2a:65:bb:38:7f:9a:3c:1b:92:1c:
                    1a:18:c8:31:46:5e:c7:56:fb:74:08:a5:b0:d6:a9:
                    ad:b6:05:c9:53:18:ab:a6:f4:c9:a2:80:3f:eb:b8:
                    df:29:92:68:aa:b6:e2:33:b5:c2:54:fe:b8:3a:1c:
                    56:08:bb:37:73:ac:11:33:a1:19:0e:8a:c8:7c:10:
                    8c:f8:12:f9:36:00:29:b9:5c:da:c3:1d:22:ff:3b:
                    10:41:04:41:c8:93:ec:96:30:c7:76:99:e5:56:c0:
                    cf:86:69:23:3c:5c:22:17:e0:00:94:ad:dc:f0:57:
                    56:a7:2b:00:89:60:28:eb:26:b3:d8:80:92:1a:39:
                    3d:1e:41:00:f0:de:e6:a6:a0:3b:15:01:bc:21:a4:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4B:90:15:38:6F:EC:92:1C:00:D6:E0:90:DB:2E:0D:B5:B1:D0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/ee71e5ac-df57-3cf7-a4b2-90e429a0cb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:63:23:77:58:f1:10:62:c8:d4:7c:76:ea:27:72:3a:94:
         d8:47:2d:a2:fb:75:c1:4f:d5:b1:2f:58:dd:b4:03:fc:93:4f:
         51:ab:41:36:85:d6:99:38:a9:f6:7a:ce:07:1d:3b:ac:13:28:
         7a:cf:73:88:3f:59:3b:aa:0f:49:3f:a3:3c:e5:8d:55:27:56:
         11:26:0a:e5:ba:b5:ff:65:31:2d:50:47:89:69:8f:e4:84:a2:
         25:19:cc:44:1d:bd:40:87:db:c9:d2:5a:e2:36:be:25:36:03:
         4b:75:5f:c4:e0:60:30:d8:a1:39:e6:9d:ab:18:ba:a1:44:c5:
         9d:7d:13:74:20:05:6b:7d:8d:51:4a:ca:03:1a:d6:3d:43:24:
         3a:35:0b:d8:31:52:9e:b7:d4:e2:01:c5:52:10:9c:bf:83:95:
         ee:86:3e:6f:dc:5c:09:17:67:52:61:01:e6:12:83:90:a3:5f:
         fd:27:25:6a:75:6f:b7:88:42:73:2c:ef:11:c2:39:39:20:e1:
         62:8e:b9:bb:34:75:12:47:d1:f0:bf:3b:d8:85:5b:95:83:2f:
         72:06:95:e9:d5:ed:51:00:2b:c2:b0:d8:62:f0:93:10:59:31:
         fd:c4:7e:89:79:0a:13:f6:27:97:d6:d4:94:6b:2f:fd:bf:c3:
         1e:fe:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:44:44 2025 by rpki-client