Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/03b0f1d7-2f7e-3ad4-9425-e3322bf01c4d.roa
File:                     03b0f1d7-2f7e-3ad4-9425-e3322bf01c4d.roa (raw, json)
Hash identifier:          7rZWdUz/koXUvpRAY5skcSNf/2DWXd0HLIzimkaGHD4=
Subject key identifier:   FA:62:17:99:12:0D:31:4A:5C:47:BA:86:B1:6C:A2:1F:D3:D5:40:E2
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBBBAF3338050612876400
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/03b0f1d7-2f7e-3ad4-9425-e3322bf01c4d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:bb:af:33:38:05:06:12:87:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=f982dce0-81f5-4e2b-b5ad-bae98bbc9d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:a3:39:a8:a7:d9:6e:b7:df:89:31:c8:5b:
                    29:39:b4:47:62:08:5b:64:c4:39:c1:69:a4:7e:58:
                    2e:4a:ca:f1:c3:40:53:f8:cd:ae:0f:6c:60:80:4a:
                    01:06:85:4c:52:6a:1b:07:d6:89:2b:cf:9e:ff:7a:
                    95:0d:91:d3:b6:59:5e:7a:f6:ad:bc:16:47:9d:0d:
                    3f:d9:c5:81:01:af:9f:90:57:e0:e9:47:3d:3c:8b:
                    93:99:e0:e5:0c:ad:c7:94:5d:a8:8f:95:d4:a1:e3:
                    74:dc:e4:85:f9:16:aa:2b:1d:43:18:6d:bf:e2:53:
                    a2:dc:ec:b4:a2:fb:44:08:79:6d:4a:b4:7e:eb:c5:
                    d0:b9:09:34:b1:13:e6:6c:ec:c0:3d:93:60:ee:d9:
                    bc:d6:52:ec:d9:71:b4:0c:0b:59:7d:96:a1:53:77:
                    c8:0c:0e:7f:5f:8c:8d:27:1d:d2:bc:dd:78:1e:a0:
                    41:1e:22:d0:58:72:37:b8:48:e0:81:e0:90:63:29:
                    38:52:54:24:d8:1e:54:60:16:18:36:e1:46:36:36:
                    13:42:6f:6f:7e:e0:f9:aa:7b:8d:7b:52:a6:a8:a6:
                    36:82:d2:a4:7c:49:be:d4:89:3e:1f:53:3a:18:24:
                    43:a5:8a:cc:84:e6:63:12:7a:4d:61:79:18:86:3b:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:62:17:99:12:0D:31:4A:5C:47:BA:86:B1:6C:A2:1F:D3:D5:40:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/03b0f1d7-2f7e-3ad4-9425-e3322bf01c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:f6:9d:6e:8c:0e:1e:71:b1:58:c2:a2:58:34:6f:f6:fe:
         c9:51:d0:f3:59:9f:c7:be:b5:7d:4a:4c:d1:c2:7a:42:62:49:
         7c:e9:2b:b5:2e:b3:20:11:8e:ad:b8:e0:5a:cb:ce:22:39:a6:
         dc:e5:57:68:48:87:17:cc:47:bc:fd:70:7e:49:43:77:bd:93:
         e5:91:5e:83:d8:b6:af:57:21:aa:88:ae:28:9e:29:de:d5:8b:
         55:33:cc:a4:ce:af:c5:c1:a6:ec:18:2d:16:d7:3e:a1:3c:be:
         43:91:df:52:fe:8b:c3:fa:b3:4e:c2:07:50:ec:c7:35:7d:18:
         0d:f1:03:62:c7:cc:d4:1e:6d:f8:a5:00:d7:1d:09:3e:15:26:
         5a:30:0d:54:f6:08:99:49:76:38:fc:4d:2b:97:bf:74:2b:64:
         55:bd:64:fc:ae:f8:63:29:73:11:ce:d8:33:c4:c4:87:5e:fb:
         3c:87:9f:78:d8:03:89:14:59:f2:c9:1a:8c:18:db:be:cf:ac:
         2a:d0:c1:fc:59:e1:6a:3f:d2:5a:1e:b4:a8:91:4d:9b:96:3b:
         d1:3f:a8:dd:d0:e2:51:b3:4b:4d:39:1f:dd:8d:0d:7f:3c:a3:
         00:e4:d2:53:96:d4:fd:58:eb:c5:2f:bf:3e:1e:b0:4e:bf:40:
         b6:57:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:54 2025 by rpki-client