Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/1b57cc1c-5d54-3195-ae74-2cd422785ed1.roa
File:                     1b57cc1c-5d54-3195-ae74-2cd422785ed1.roa (raw, json)
Hash identifier:          qUR5n9SXnAwNQnPsppJITz4aidlb+YJOkaVUnN6dMeQ=
Subject key identifier:   34:7A:8B:83:D0:55:EE:8A:DA:7F:94:37:1E:F1:8D:16:2D:C3:56:D2
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F4328584A5DA0E833D2357CE69C5FA7C0
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/1b57cc1c-5d54-3195-ae74-2cd422785ed1.roa
Signing time:             Mon 30 Jun 2025 18:35:09 +0000
ROA not before:           Mon 30 Jun 2025 18:35:09 +0000
ROA not after:            Sun 28 Sep 2025 18:35:09 +0000
asID:                     834
IP address blocks:        104.251.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:a0:e8:33:d2:35:7c:e6:9c:5f:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Jun 30 18:35:09 2025 GMT
            Not After : Sep 28 18:35:09 2025 GMT
        Subject: CN=30982439-c996-4eaf-95bf-5a3daeaff33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:35:84:02:82:37:a9:dd:f3:18:e1:25:e4:
                    70:80:94:e5:fb:c1:82:f6:09:ca:a9:2e:f5:85:73:
                    b2:dd:e8:15:c8:ec:80:f5:4d:4f:fc:65:c0:70:d9:
                    f2:fc:77:b7:31:83:8c:99:b3:bd:9e:91:6e:c2:fc:
                    17:16:6b:2c:a8:6b:eb:76:6c:b2:2a:71:02:86:0b:
                    e6:6b:cc:a0:47:36:bd:26:ce:55:d0:c7:e6:28:e2:
                    cb:b8:18:4c:a8:a6:00:d9:dd:38:1a:b3:f2:b4:3a:
                    93:f1:22:26:c2:62:79:c4:54:63:f1:73:a2:f8:3c:
                    68:1e:03:83:7a:43:6d:6f:6b:8f:8a:9a:66:b2:c3:
                    b0:b9:79:e6:26:7d:3e:8a:bf:5a:c5:93:83:dc:46:
                    80:11:de:f9:35:17:43:6a:97:2b:5a:ff:11:ed:43:
                    bd:3e:d5:e5:80:ae:a5:81:ec:11:d4:4e:94:d8:40:
                    dd:49:70:fa:29:2d:9f:e0:9d:49:b6:6b:43:0b:12:
                    c8:98:98:37:5f:e3:ef:42:f7:50:50:04:2f:25:d6:
                    b0:5e:a2:4f:e7:f9:e1:85:99:b7:38:1f:09:ba:ad:
                    b7:38:8b:e3:01:b8:fe:53:d5:a5:c4:fe:16:d7:b0:
                    bc:e8:36:f9:b2:3e:cd:8d:57:c9:56:97:a2:cc:9f:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7A:8B:83:D0:55:EE:8A:DA:7F:94:37:1E:F1:8D:16:2D:C3:56:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/1b57cc1c-5d54-3195-ae74-2cd422785ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:67:d5:2f:fc:6e:22:75:c9:2a:37:75:ad:54:72:24:c1:
         d3:de:d9:7b:f9:24:0a:31:d0:8f:f4:76:11:a9:47:dc:ca:35:
         9f:5a:74:b1:85:25:35:18:1e:96:3b:fa:c1:a1:05:4a:3f:bc:
         24:9d:ca:50:e4:e4:c2:b5:62:82:5a:ee:5b:9e:d6:c9:40:4b:
         b3:22:a4:e4:28:cf:79:92:e8:54:f1:87:15:b4:23:87:99:8d:
         4d:72:1a:b4:bb:f5:8b:c1:63:c6:1a:4b:51:90:1e:21:65:04:
         70:e8:79:74:0a:7f:5e:e2:d5:28:29:a1:33:93:d6:5f:b7:6d:
         eb:1c:c7:d0:c1:73:4f:c6:16:a0:43:7e:2f:21:1c:fd:85:09:
         18:37:96:c0:64:5a:8f:96:4f:e1:d6:68:89:19:d7:8c:7f:83:
         f2:c4:ad:1d:89:7d:74:5c:80:4b:c4:d0:5d:66:5f:59:0f:04:
         1e:55:59:d4:8c:d8:15:ee:77:73:31:c4:59:27:4d:31:07:1b:
         15:d7:77:b8:29:ae:78:71:1b:2a:ac:63:3c:1b:b4:4d:a7:cb:
         a8:64:96:72:a0:f0:c0:5f:76:7c:b2:6c:32:0a:fa:b1:44:90:
         8f:71:39:26:61:8e:33:7a:5e:0d:c3:78:19:2a:b8:39:86:5f:
         32:27:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:27:59 2025 by rpki-client