Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa
File:                     ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa (raw, json)
Hash identifier:          tkDcpbCxAVwyL6USZaG7Cg3A1i8fmUYnOBVlHN881Pw=
Subject key identifier:   DC:94:AD:3F:7A:98:3A:07:25:F5:48:83:29:00:2B:3E:97:39:E9:A3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBB233204C0B9E3980E5C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b2:33:20:4c:0b:9e:39:80:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=737114dd-0c5a-418b-9072-542c1e98af27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:8b:f9:9e:a2:b7:6c:11:0a:fe:66:80:05:
                    70:c2:d9:8b:a8:cd:9d:a2:37:39:b1:e3:1b:d0:85:
                    c5:e0:ed:84:1d:f1:c0:07:63:e3:8e:29:ca:4e:71:
                    b7:81:29:7b:93:ff:e5:a8:67:53:0e:7f:5e:cc:ab:
                    a3:21:e5:eb:5f:49:d8:3a:77:1a:03:0a:e5:ae:d6:
                    31:1c:e3:79:a7:56:e9:d7:30:58:77:94:7d:f8:38:
                    55:90:a3:30:72:c4:ff:af:01:2e:52:eb:38:f8:54:
                    3a:5c:01:8e:7a:72:f5:c9:78:71:2f:1a:ab:a2:65:
                    df:96:23:56:28:18:18:ce:b5:64:bf:3f:4e:99:c2:
                    25:ca:74:3c:9a:5e:05:eb:7f:e5:b9:f0:67:fc:98:
                    8e:d7:5b:1b:46:9b:74:2e:b6:44:40:86:88:6d:57:
                    51:e1:a9:d9:2d:bc:50:39:77:2c:fc:8d:fa:6e:34:
                    88:af:36:c7:bd:39:cf:97:56:86:4e:5e:f8:49:71:
                    1c:ef:ac:41:e3:77:f4:9a:bd:f4:9e:80:9f:01:5a:
                    03:91:28:7c:ac:c3:4b:e7:b6:b1:2d:a4:ef:7b:61:
                    a4:4c:87:58:d1:a5:69:63:d1:d9:c9:9b:1e:c3:e1:
                    23:41:c0:2c:20:fe:fe:95:62:4b:8d:52:57:4f:4b:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:94:AD:3F:7A:98:3A:07:25:F5:48:83:29:00:2B:3E:97:39:E9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:7c:d6:af:b2:b1:0c:6d:4e:9b:a3:e8:67:d1:3a:57:a3:
         37:fd:6b:3f:4d:00:97:f1:a3:c6:cb:41:8c:6a:10:f7:74:a9:
         6d:e6:0c:22:20:9f:2b:4b:1f:9c:6c:ff:34:39:1c:6f:10:5f:
         6f:91:60:b1:2c:a2:69:a2:7a:68:3a:52:28:5c:38:2f:0d:81:
         b3:1d:06:f4:f4:c7:af:76:5b:db:10:8d:33:fb:be:23:b7:e9:
         77:49:0c:8f:89:c0:df:bc:fc:74:dd:2c:73:dc:71:6a:85:db:
         2c:10:7c:8f:a2:50:67:c7:97:b8:34:0a:e1:b8:3d:a1:e6:f1:
         32:1a:aa:e8:4c:2a:6d:c3:e7:14:80:18:0d:83:e1:db:73:91:
         7e:c1:ec:1f:ac:34:7f:df:86:c1:69:a5:d4:5a:be:3d:aa:d0:
         2f:70:ce:49:e0:59:81:37:88:90:84:c9:68:b5:32:91:1b:25:
         b9:9e:17:9a:b5:b8:5b:e6:f9:2a:8e:69:25:c5:d9:c4:47:61:
         e0:b0:05:c7:84:42:c7:63:70:e5:d0:f4:08:be:32:46:e5:4b:
         3d:fc:c5:a3:ca:98:9b:c4:22:8e:3b:fe:f6:23:cf:67:87:41:
         74:d9:07:54:7d:89:39:59:a6:74:3a:38:ad:f5:87:27:2b:83:
         0e:ba:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:25 2025 by rpki-client