Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2211cab2-8c54-3ef8-9e8b-1c136f655034.roa
File:                     2211cab2-8c54-3ef8-9e8b-1c136f655034.roa (raw, json)
Hash identifier:          SrcJwo6zsiq5OosvRyEcpc7sogsTmGU7N0Tnze+cunA=
Subject key identifier:   BB:6B:7E:91:22:9E:A4:5D:EE:62:A3:20:E4:C7:C0:FE:53:F9:45:1C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBBD1AF9A778A3B52D3480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2211cab2-8c54-3ef8-9e8b-1c136f655034.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:bd:1a:f9:a7:78:a3:b5:2d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=c0f83558-cd6a-46c3-a3e4-161fccde22aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:23:b8:94:6f:07:bd:4c:51:95:67:4e:89:
                    8b:cf:08:18:e3:15:81:d3:b6:80:86:12:fc:aa:2c:
                    05:02:79:41:e9:70:39:85:32:26:16:7c:93:9f:e5:
                    9d:38:de:8c:ba:76:4f:56:0e:b1:74:fe:64:fb:4b:
                    52:c7:9f:16:a9:07:8e:a6:c3:6f:ee:5c:32:72:ae:
                    48:4d:6f:82:79:6e:33:93:c2:48:9c:4e:d9:33:9b:
                    17:ee:5f:28:3b:3c:35:16:29:05:31:e6:b1:4e:ec:
                    0f:9f:e5:c4:68:ee:99:ca:e4:b4:65:bb:cb:66:9e:
                    74:3f:3d:7f:f4:a3:a9:01:c4:6e:ab:65:d3:d0:6d:
                    50:ee:c6:77:a9:76:d3:47:8c:23:0c:0b:0f:fa:5e:
                    f8:2e:6f:45:93:4e:16:1f:02:7f:a7:8f:40:de:3c:
                    d3:c4:e2:e0:27:24:6c:d5:90:f6:88:f1:c9:b5:84:
                    68:2d:57:de:6d:77:8b:82:92:5c:84:d5:98:7d:45:
                    76:88:57:4f:82:5e:57:a6:63:86:01:f9:e4:35:3b:
                    2a:7e:65:a8:34:4e:87:85:59:f3:f0:72:4c:f8:be:
                    53:9a:2a:24:0b:99:2c:82:6a:df:ad:ae:06:d7:d8:
                    80:61:db:be:2e:58:75:c7:39:6d:70:1b:5d:07:9c:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:7E:91:22:9E:A4:5D:EE:62:A3:20:E4:C7:C0:FE:53:F9:45:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2211cab2-8c54-3ef8-9e8b-1c136f655034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:56:5f:d4:1a:8d:77:37:22:99:a2:2c:06:7a:47:0a:76:66:
         7b:c9:79:14:a3:27:58:eb:0b:2f:e9:f8:bf:0a:34:8a:29:22:
         f7:52:65:3d:ae:67:fd:1c:58:1f:b6:aa:f4:a3:32:0c:c2:48:
         50:25:86:91:00:c3:bc:9b:2a:3c:6f:a6:b7:27:90:ef:db:07:
         90:7c:3a:fb:5a:5c:03:ad:68:09:90:8c:8c:d0:e3:61:6b:f7:
         f9:ae:9e:ea:1b:aa:82:4c:6e:45:df:57:f8:44:dd:da:66:af:
         6e:35:4e:da:5e:a9:da:38:21:d9:79:aa:f4:79:0f:77:4a:f8:
         76:ff:38:7f:b6:7f:7b:b6:6f:fe:f5:5f:c2:50:4b:72:b8:6f:
         cb:2c:85:2b:5d:62:36:6b:cd:12:fa:d5:1e:62:e0:e6:75:9b:
         2a:c8:cd:3c:b6:c3:ab:58:92:30:a7:97:54:9a:e5:9e:9e:02:
         f1:3d:68:dd:2d:62:18:d5:13:37:2a:f1:07:25:b5:46:a8:61:
         ce:0f:f6:47:1c:ee:e2:f8:86:b1:9a:e2:90:c4:40:b9:09:01:
         36:6a:93:c2:f9:53:76:d0:6c:6e:51:8f:8f:de:5c:65:93:92:
         c7:fc:d2:96:0a:7c:d1:35:09:e7:5e:42:6c:50:c1:d6:c2:52:
         03:7f:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:55 2025 by rpki-client