Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ac9e1c56-6cac-3110-acd0-364d84886057.roa
File:                     ac9e1c56-6cac-3110-acd0-364d84886057.roa (raw, json)
Hash identifier:          7wcdA5Cp+7IVHW2qO54x/MKnmF/Z+qfOi2vke67ocos=
Subject key identifier:   41:1D:BE:7B:7D:EE:60:75:26:09:BF:15:9C:85:01:B4:EB:92:8B:DF
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285849F7150E671CF449313FE2EC83
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ac9e1c56-6cac-3110-acd0-364d84886057.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     398465
IP address blocks:        104.171.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0e:67:1c:f4:49:31:3f:e2:ec:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=d93de2c8-090d-492a-aa20-6b4295c3c841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:17:04:fa:a8:38:ed:29:b2:fb:4d:41:ac:
                    6d:57:a1:d5:1a:1d:d8:90:28:76:8d:36:d4:cd:be:
                    0a:44:6b:32:b3:cc:ea:7c:9e:74:d9:bc:32:7e:62:
                    6c:44:1d:73:b4:c6:ff:8d:cd:46:6e:3f:1c:36:9d:
                    fe:3a:00:de:80:15:33:15:b1:59:ca:ee:82:43:3a:
                    d7:75:78:0c:0b:f9:98:ab:01:d2:32:e9:77:d9:3a:
                    47:0a:82:e5:b7:10:27:0b:83:27:59:74:82:b7:65:
                    04:5f:f2:66:b8:0a:82:a2:9d:ac:9b:cf:2b:84:74:
                    92:bd:31:c5:cd:68:65:cc:fa:ef:af:5e:d6:84:3d:
                    6f:83:40:30:51:f0:36:6e:2d:c5:8b:d5:81:6e:56:
                    d9:2b:40:a5:63:df:cd:80:d4:b2:a8:bb:77:8a:7b:
                    66:a1:58:64:f9:ba:4a:f9:e4:03:9e:e6:c9:d2:05:
                    f0:70:a9:55:81:89:cd:b9:9d:85:49:7f:3e:ea:24:
                    b4:0a:17:b1:4c:22:9c:1e:fb:dc:56:df:16:5e:aa:
                    ef:33:ad:ba:b4:89:67:64:1f:0d:0f:b7:46:7a:b1:
                    80:8f:83:92:71:22:23:6c:e9:52:c7:68:8f:85:ff:
                    19:b8:a2:4d:5c:4e:0b:4e:5a:e2:72:49:fa:de:73:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:BE:7B:7D:EE:60:75:26:09:BF:15:9C:85:01:B4:EB:92:8B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ac9e1c56-6cac-3110-acd0-364d84886057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:8d:df:cc:8f:09:22:00:31:ee:95:f2:80:b3:03:e4:4e:
         a1:c2:e4:2f:2f:a4:53:30:a3:2b:dd:38:e2:9a:35:c1:91:c6:
         ac:72:53:77:72:71:0f:42:40:05:b5:11:d1:ba:39:f7:44:c9:
         4e:15:e7:35:1d:b9:3d:5a:95:e6:3b:36:5a:96:78:42:95:7b:
         22:7c:e9:9a:ef:9e:af:ad:cc:25:75:bb:06:0c:b1:44:c0:df:
         a4:00:ee:f6:8d:93:64:20:b6:23:64:3f:f3:78:42:a4:6d:5e:
         15:de:e8:b9:75:63:c5:b2:cf:af:85:16:6c:cd:de:f3:87:1f:
         68:4d:fc:9a:b4:e9:fd:89:6e:10:44:3b:5d:f9:6b:09:73:5d:
         81:11:a9:b4:51:f9:eb:c6:ca:1b:be:ea:0a:bc:ad:bc:ae:74:
         7c:00:29:bc:09:2e:7b:d6:7b:1c:33:c7:d9:33:7b:8d:09:b7:
         25:32:ae:d0:44:07:d4:6a:c8:dc:dd:29:3c:d5:c2:68:67:f5:
         64:17:50:9a:7e:58:71:3c:4c:7e:71:65:ce:d2:64:1d:a9:4f:
         af:67:99:df:40:a2:d6:91:ce:7f:43:56:03:86:30:df:2a:77:
         68:d2:d7:0c:45:d2:16:0d:3b:1b:92:ab:73:74:9b:43:ff:7a:
         79:83:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:37 2025 by rpki-client