Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54aad938-c5b6-3353-8159-87d90e5d24e4.roa
File:                     54aad938-c5b6-3353-8159-87d90e5d24e4.roa (raw, json)
Hash identifier:          Cz8rvE04eaUvlqJnpKnMG/jsNh9K7HCvfMmBd2itJgA=
Subject key identifier:   4A:70:35:B2:B9:E2:A6:F3:B7:51:76:D7:BA:AA:D9:BC:1A:1A:64:B6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBCF66B11AF332C7F5BDB0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54aad938-c5b6-3353-8159-87d90e5d24e4.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        104.155.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:cf:66:b1:1a:f3:32:c7:f5:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=e070641a-b5fd-4da3-94a5-625fa26923ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:a5:8b:55:4b:de:db:c6:c3:0b:b0:3c:84:
                    37:48:89:f7:4d:eb:7f:b0:15:e2:30:95:96:68:f2:
                    9c:71:c5:ba:59:5a:d5:43:a6:51:c6:ef:f7:a6:54:
                    11:00:05:24:29:8b:21:b7:75:2b:07:71:1d:fc:11:
                    74:7a:6d:88:af:6d:40:20:46:fc:8d:64:b9:e8:30:
                    f9:0a:f0:e4:7a:b5:ba:83:cc:4e:f9:fd:71:45:5d:
                    45:9f:eb:76:ec:3a:4f:d4:85:24:7e:0c:62:3f:81:
                    f8:cc:11:c3:62:f9:4b:fd:a1:0e:9d:b0:b9:61:c0:
                    08:f1:48:52:36:5e:fc:04:6b:72:06:a0:03:5a:3a:
                    ac:4c:22:38:c7:6a:76:38:58:ad:d4:ed:0b:f6:47:
                    18:97:87:52:2c:2e:41:de:58:15:f6:b4:0e:03:55:
                    ad:2e:cd:d2:57:a6:03:7c:f5:5d:ad:f8:f2:a4:51:
                    ec:9e:14:d3:0a:e0:6b:19:ea:95:14:26:fc:22:ae:
                    a4:bf:4c:54:eb:6c:0a:c1:fd:23:67:65:5c:ce:ce:
                    be:3d:6e:79:9c:12:97:f9:78:6d:d4:15:18:46:9a:
                    47:a6:7e:f5:d1:6b:89:3f:86:de:51:b7:bc:19:d1:
                    9e:58:e9:8d:7e:9c:33:f8:86:1c:12:44:2d:09:1f:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:35:B2:B9:E2:A6:F3:B7:51:76:D7:BA:AA:D9:BC:1A:1A:64:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54aad938-c5b6-3353-8159-87d90e5d24e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:df:88:92:24:de:a8:3a:04:22:eb:9e:99:56:ef:bc:b2:
         80:cd:63:20:17:ce:93:23:0b:e5:d1:59:60:83:a9:ea:47:03:
         4e:c9:1a:de:58:4b:8a:8a:0f:62:c3:ff:36:75:88:0b:cd:95:
         f9:1f:b5:a1:76:ee:89:2f:63:04:01:aa:18:32:50:a5:07:7c:
         ce:76:d2:15:cc:1e:e4:5f:be:c6:8c:3a:83:a8:d0:d6:8f:07:
         de:93:f4:84:81:2a:9a:f4:0c:88:9d:5a:56:c4:cf:07:82:df:
         7e:4b:44:8a:bb:37:88:bd:2d:2f:e8:48:db:35:8a:be:b1:a9:
         28:f7:d9:ec:bd:78:fa:17:2b:c4:bd:73:b7:e2:6f:81:7e:8c:
         12:7d:cb:f7:13:1c:7d:62:ea:e5:5a:d6:99:cb:65:66:61:b8:
         d6:52:08:85:9e:83:8e:3d:65:ce:79:0d:af:96:f4:67:b0:e0:
         68:d1:5a:51:9a:b0:bc:8c:bd:cc:6b:3a:6c:a3:94:91:c8:02:
         3b:a8:0e:4e:2b:33:77:91:3f:47:a6:1c:08:9d:3c:44:bb:ef:
         1e:2b:71:cd:52:97:ce:03:d4:eb:c6:7a:42:4b:15:72:77:77:
         0f:16:41:ae:95:2d:0b:b9:49:fd:ad:f0:24:98:52:84:fd:7e:
         88:16:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:16 2025 by rpki-client