Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d75a056f-366e-383d-90ed-f5527e6c9312.roa
File:                     d75a056f-366e-383d-90ed-f5527e6c9312.roa (raw, json)
Hash identifier:          uD7uk+Sz87sCXIaoiTeyPPkbwHO753MX1buFHP7Fg88=
Subject key identifier:   EB:59:14:0A:07:CE:40:62:06:DE:44:AE:E1:16:8F:E2:36:97:1A:2C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A121259E7DF8FB0E724591000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d75a056f-366e-383d-90ed-f5527e6c9312.roa
Signing time:             Tue 03 Jun 2025 17:02:17 +0000
ROA not before:           Tue 03 Jun 2025 17:02:17 +0000
ROA not after:            Mon 01 Sep 2025 17:02:17 +0000
asID:                     400175
IP address blocks:        104.129.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:12:59:e7:df:8f:b0:e7:24:59:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  3 17:02:17 2025 GMT
            Not After : Sep  1 17:02:17 2025 GMT
        Subject: CN=368fc7f9-4378-4412-9917-55c3375d4d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:b0:d1:74:c8:d3:65:16:3d:e9:1e:1c:2b:
                    1c:61:52:0b:12:39:06:8a:34:8d:30:a4:2d:a4:02:
                    5e:bc:8f:03:e6:46:f1:ca:5e:a7:fa:4f:e7:f5:0f:
                    67:1e:06:48:51:a8:1d:96:41:ac:29:41:3e:58:ae:
                    ca:5d:45:64:f6:df:96:33:aa:d3:6f:c2:e4:89:3c:
                    e8:fb:a1:3d:dc:18:d0:37:8d:3b:8b:9f:3b:c9:d9:
                    7e:28:ef:a0:6a:75:2c:69:3a:00:e2:9b:44:29:58:
                    b0:73:a6:80:fd:72:d4:b7:f9:da:d5:d3:03:d0:38:
                    28:eb:17:cc:ed:ea:1a:93:a1:14:84:be:02:ed:bc:
                    de:c1:94:7c:9d:3b:86:e2:68:20:a6:96:a5:b3:64:
                    b5:86:3a:56:df:e3:02:1d:19:94:13:3a:93:5a:54:
                    e6:fa:06:9b:45:b3:81:55:f6:91:02:64:3a:95:81:
                    b8:14:b6:85:df:94:c4:b7:66:63:f9:57:3a:a2:91:
                    d5:ab:2a:34:ec:03:f0:c7:32:1a:a8:dc:c6:a3:b8:
                    17:f7:cc:04:f3:21:7a:23:f3:40:d7:99:74:8e:c0:
                    e8:de:4f:9a:98:a0:b6:4a:03:e4:15:92:50:77:f9:
                    b3:d9:48:a2:26:49:09:0f:0a:ef:61:fb:37:54:87:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:14:0A:07:CE:40:62:06:DE:44:AE:E1:16:8F:E2:36:97:1A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d75a056f-366e-383d-90ed-f5527e6c9312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:29:57:a0:bd:b7:15:5c:4f:d5:d7:2d:e1:67:0c:75:94:6f:
         51:54:24:fd:d6:2d:1a:68:1c:57:f4:64:78:43:7d:b4:51:e4:
         99:aa:ae:9d:f3:c7:dc:97:75:11:d3:67:ca:9d:ca:43:0f:72:
         35:b6:0e:2f:ec:d4:a9:86:14:a2:c6:a2:11:ed:e2:fc:2d:ca:
         93:1f:76:1e:18:82:06:4f:2d:37:04:c4:ae:98:02:57:d7:d0:
         79:fb:53:4c:6d:7b:e4:77:df:3f:91:2e:59:09:2d:ec:84:6a:
         f2:66:0c:2d:0d:16:bf:af:1c:fa:85:53:5a:14:58:b6:8e:ad:
         ac:dc:ac:99:ac:b4:45:2c:4a:b1:cc:f6:41:b0:1d:98:75:08:
         d8:2f:d8:d1:55:16:54:6e:94:a6:12:bb:f8:85:8b:6b:de:ad:
         7f:63:c0:1d:04:87:4a:a9:51:d5:aa:21:e0:b3:34:0b:98:68:
         6d:4b:ff:f7:6f:13:36:65:45:8f:66:46:db:22:5f:a4:cf:ee:
         46:af:93:8f:c6:a7:6c:09:26:af:23:64:48:8c:c8:4c:c5:d2:
         88:43:e7:38:0a:93:7e:92:6a:53:60:59:75:05:5a:73:a0:5d:
         8a:86:c7:17:0f:1a:b9:e4:6d:c8:11:e8:cb:b4:e1:6e:30:63:
         ed:65:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:43:19 2025 by rpki-client