Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9ccebb3-72cd-34d6-8f5c-c679d693f0c3.roa
File:                     d9ccebb3-72cd-34d6-8f5c-c679d693f0c3.roa (raw, json)
Hash identifier:          P9nGHz46CSI1hjB7XNYCuMQmh2+Gce8VC/qYXnloY1s=
Subject key identifier:   05:A3:62:BF:B9:6D:A9:0F:C2:85:01:EA:4F:03:E9:95:71:46:5A:E6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068ABCFF1E3FC27C433FA0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9ccebb3-72cd-34d6-8f5c-c679d693f0c3.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        104.137.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8a:bc:ff:1e:3f:c2:7c:43:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=5bee7c81-5d2d-4043-b174-3f35c3331d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:86:56:28:6c:a3:d6:4f:6d:53:bb:ab:b6:
                    8e:bf:60:8a:5a:9c:91:08:60:5a:fb:3d:08:81:cc:
                    17:12:21:8a:cd:3a:b0:34:7f:8c:1f:e1:c6:2c:e0:
                    bb:2e:08:23:60:8a:30:a3:11:1e:e2:d6:e7:5d:1a:
                    43:01:d2:4f:f0:40:9b:8d:48:be:20:cd:5d:24:38:
                    6b:45:2e:01:43:23:4d:55:70:11:82:02:22:69:b1:
                    d2:27:81:8d:2d:2a:e6:6e:02:dd:f6:5c:30:37:88:
                    33:13:12:60:ce:2e:cd:0b:ad:85:8f:da:a4:4b:63:
                    da:70:ec:64:a8:98:aa:b1:dc:f6:3c:de:f0:08:00:
                    73:a5:b1:08:69:34:a0:a3:50:2c:56:78:e1:f0:8a:
                    5f:1e:93:03:24:26:d7:ab:ae:b5:ee:2c:b9:7a:93:
                    e2:37:54:1c:85:5c:69:db:64:fd:ba:94:da:6d:18:
                    d9:f2:f2:c7:4b:80:6f:ac:3c:d5:0b:85:bf:2f:73:
                    fe:0b:46:6d:d1:e2:93:58:8a:79:7e:b7:a2:27:7c:
                    fb:41:36:d8:d8:46:3f:57:38:86:40:9c:8e:ec:42:
                    89:b3:3c:44:0c:88:4e:e5:67:46:a2:02:0b:0b:55:
                    50:84:fd:0a:6e:77:ad:c9:e4:a6:d1:10:5d:12:19:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A3:62:BF:B9:6D:A9:0F:C2:85:01:EA:4F:03:E9:95:71:46:5A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9ccebb3-72cd-34d6-8f5c-c679d693f0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:53:93:be:b6:51:f9:90:95:93:6f:db:b5:2d:41:79:4f:
         04:c4:ea:ab:5d:a1:5d:65:cb:88:41:38:9e:26:de:82:58:6d:
         13:e8:b9:f0:9a:8f:d7:4b:ad:5d:66:74:0c:5e:a7:39:f3:db:
         e7:c7:0c:00:60:4b:8b:0b:da:cc:ed:8b:96:e4:2c:8c:85:ec:
         ca:51:0f:5e:e8:1a:4e:63:00:5e:2f:b4:15:0f:79:c6:38:99:
         e6:a9:2e:96:e6:c7:36:b3:fc:07:9b:cb:38:0b:ff:d6:e2:6a:
         b1:0c:f8:98:16:ef:e5:d6:33:71:b5:4e:f3:5e:78:04:64:ee:
         28:6c:3b:98:6a:04:f4:2c:a4:bc:f5:be:67:28:20:b3:e7:3a:
         20:53:97:4e:23:46:be:cb:f4:1b:c1:29:6e:81:67:56:d6:a4:
         13:5b:a6:48:59:54:7a:a4:78:8c:2a:dd:0d:f1:f2:88:8c:1b:
         73:7a:ac:7a:6e:ec:27:04:39:75:ef:a1:6c:fe:20:94:45:50:
         6a:33:ce:00:bc:01:9f:8a:ed:13:a3:e8:c1:95:81:d1:9b:74:
         0b:e3:39:4d:f2:ac:9e:fa:08:12:11:19:c8:80:61:5a:c3:c8:
         3a:96:fe:5a:5f:83:ec:01:f0:92:f9:a6:2a:d4:dd:4b:4c:89:
         03:ce:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:08 2025 by rpki-client