Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa
File:                     a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa (raw, json)
Hash identifier:          Ct4x9D1R5N94NIN8EtKlk92/zv99d6xPKXhl23jASes=
Subject key identifier:   F9:36:64:57:EC:8D:BA:38:7A:ED:34:5E:40:32:3B:64:11:0B:E9:F3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBC1AD5CE4926BF3E19F80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:c1:ad:5c:e4:92:6b:f3:e1:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=63406ffd-26b4-4797-ab8e-166171f66234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:4d:63:1b:0e:ef:5b:78:be:49:35:d1:9a:
                    e6:b4:12:d1:c6:47:85:75:da:6f:01:3c:59:1b:23:
                    2e:7a:98:c9:21:6d:73:04:df:4f:71:05:fe:cd:49:
                    60:ea:fd:f7:30:5a:00:26:27:40:e1:43:0b:02:00:
                    c5:36:f5:10:0b:1b:7a:3d:46:cc:13:d9:8c:66:f8:
                    03:fb:68:98:86:1b:99:de:a4:b1:3d:59:84:b7:df:
                    f1:1f:83:7a:5e:f7:86:e3:2a:77:5b:83:a5:26:46:
                    13:51:2a:fe:8d:cf:bb:ea:cb:14:26:a6:5e:00:0b:
                    54:93:c7:10:00:7a:a5:a5:2c:80:89:79:bf:ad:a0:
                    3c:7c:8d:3c:55:e7:a2:ad:78:b9:55:6a:07:56:cf:
                    76:c0:f5:fd:e0:7f:0d:e0:14:d7:97:e0:01:98:25:
                    fe:27:53:29:5c:21:e1:a4:a7:0a:45:9c:42:6a:a3:
                    56:fa:8c:a7:29:0e:a7:c5:33:9a:3f:a8:1d:44:e3:
                    52:ab:c7:77:80:a4:c6:37:8e:58:db:c1:4b:7b:ab:
                    41:5a:07:75:9c:38:49:16:d0:05:f2:53:ef:fb:6d:
                    30:9a:ef:95:f0:82:f6:45:0c:3c:90:8f:67:c0:57:
                    4e:b3:ab:61:cc:78:d9:82:c1:4a:80:67:e8:29:3f:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:64:57:EC:8D:BA:38:7A:ED:34:5E:40:32:3B:64:11:0B:E9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:ff:ab:9b:a0:4c:6c:5d:2b:26:86:23:ee:40:02:5a:01:
         77:36:85:1e:d5:c5:05:67:4c:70:8f:80:21:ae:9f:2c:01:1b:
         55:d2:75:ea:b8:da:76:7f:6c:a0:ac:0c:fd:cd:cf:c4:bf:0b:
         44:10:e2:dd:26:e1:a4:9c:fc:60:71:f4:f2:04:4d:06:8f:34:
         d8:9f:4d:70:04:e8:fa:1c:1d:2a:8c:97:f0:e1:b5:c6:fa:49:
         8f:3d:9a:72:48:9c:3f:2a:fa:c6:f0:aa:11:10:3c:5e:26:2c:
         87:68:2e:b5:79:2b:c0:f8:96:2f:3f:33:14:ee:38:5b:10:9d:
         7f:5b:98:41:c3:c9:ac:c1:f7:20:e6:25:ad:81:f4:8c:ae:a7:
         11:67:23:ff:2b:86:3b:7f:fe:a6:e0:4c:85:76:05:80:60:e0:
         f4:af:b9:d4:9d:9a:28:a6:a1:9a:32:d1:25:fb:bb:4c:14:01:
         a3:83:ad:71:8d:1f:d7:8d:b4:53:d3:61:ab:af:6a:58:fc:a6:
         1e:1d:ca:46:d5:29:54:98:ac:9e:68:86:3b:8d:7e:27:29:11:
         cc:f5:6b:0c:35:d4:7d:a9:8b:e5:a7:d0:3e:53:62:84:cd:e5:
         b2:00:2c:e1:42:41:0c:53:e7:99:58:85:84:8a:9c:8d:ff:57:
         37:6e:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:33 2025 by rpki-client