Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
File:                     8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (raw, json)
Hash identifier:          u/UaUbA+fPsI0l2Zzc628RAIOCsgjjXd6Z/6xfLVaF8=
Subject key identifier:   61:95:8D:8D:B6:9A:5F:C9:C8:2D:A4:AB:22:C3:EC:55:15:43:34:5B
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285849DF5A5E2996BA29BA6F6F72C0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     1239
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5e:29:96:ba:29:ba:6f:6f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=bc1ea5fe-8658-49d5-a9f8-9154a2f99765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:fe:3a:aa:95:0e:0a:66:33:94:0f:9f:8a:
                    15:43:4d:e9:db:b6:58:42:c7:a4:be:13:d6:17:b7:
                    fb:1f:75:35:3c:7e:1a:58:5f:64:99:58:dd:13:4c:
                    4f:d4:b3:83:37:2b:36:6f:71:e9:d0:39:de:59:ca:
                    ff:20:56:76:41:e2:61:05:fb:4d:a9:c3:49:7b:75:
                    f5:13:35:f0:0e:95:cc:29:22:b6:21:b7:35:4b:50:
                    d2:88:8f:8c:73:af:72:3a:72:0f:9f:83:e7:30:a7:
                    6f:81:27:c9:1e:fc:e4:93:ac:8e:37:ec:93:19:9e:
                    44:28:9a:ac:97:99:af:01:55:89:70:08:d2:38:dd:
                    8e:bc:80:19:cd:17:07:a2:40:f5:e0:ab:2d:fd:cd:
                    80:dc:2d:06:1a:8f:14:86:bc:18:41:ae:e6:78:5a:
                    02:f8:37:cd:bc:e8:46:da:d9:a2:55:bb:9a:24:17:
                    00:0e:83:6d:9e:78:82:d7:42:84:b5:c7:67:84:dd:
                    e6:ce:ad:13:ee:60:1d:4d:6f:45:a0:12:f2:3e:62:
                    f8:04:3f:21:3b:4a:37:0a:08:69:a0:6a:9d:05:c2:
                    ce:b0:94:6f:5b:bf:8c:56:5a:0c:40:8a:b9:c9:36:
                    f4:62:19:ec:53:55:5f:eb:8d:d6:03:fa:93:01:6c:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:8D:8D:B6:9A:5F:C9:C8:2D:A4:AB:22:C3:EC:55:15:43:34:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:00:41:85:35:ff:2a:30:ea:0d:dd:c4:7a:a2:ad:49:45:38:
         bf:f9:f8:0f:c6:fd:07:34:e9:49:b9:c3:f0:13:32:86:a6:16:
         67:cb:94:3d:9e:49:55:35:1b:48:9d:c7:05:c5:8e:a0:fd:85:
         24:73:11:08:9f:e7:fc:19:c1:6f:16:84:49:67:98:fd:8c:68:
         ee:52:0c:5f:58:f8:76:71:e7:58:93:a1:3c:0d:ad:0e:7f:09:
         4c:f8:3a:75:a1:81:97:74:db:83:db:22:5d:0f:56:38:07:89:
         2c:35:ca:6d:c3:a3:49:45:f7:e8:39:47:83:1b:f2:c0:3f:b0:
         7c:68:fa:c3:41:b6:9a:d8:f4:46:90:34:33:67:89:d6:f3:59:
         36:90:e6:4d:28:bd:54:84:df:4e:75:e3:e6:ad:0d:b5:9e:b9:
         eb:14:18:4a:be:e5:9a:a9:0a:8a:b2:b4:8d:89:bd:60:a7:55:
         15:e5:d5:93:07:fb:29:c7:dd:c8:36:5b:9c:f4:61:8f:07:a6:
         f6:b7:6c:57:5b:17:42:4f:d9:56:b5:06:53:6b:59:14:79:9d:
         bf:96:20:d5:b5:b8:62:e5:04:8c:aa:f1:e6:01:79:43:8f:35:
         96:42:aa:dd:5d:ea:80:6c:97:42:de:fb:47:20:30:2c:fe:06:
         69:17:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:29:35 2025 by rpki-client