Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa
File:                     453ca86f-265f-305d-a6a1-203e03a97f05.roa (raw, json)
Hash identifier:          9NhjFr8zO05UsrNza4V52eLDTnvkowOEdDsaFuIr9qg=
Subject key identifier:   C7:F3:28:F2:93:EB:14:CC:B5:62:FD:7D:C6:13:68:90:86:28:1A:2A
Certificate issuer:       /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Certificate serial:       010D0C9F4328584A103543BBD5E719F3755D9860
Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     64236
IP address blocks:        104.254.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:43:bb:d5:e7:19:f3:75:5d:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=d5186603-ff75-4594-a298-b812eec192d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:b9:22:a4:b9:d0:bf:94:7f:ae:c7:9c:5e:
                    4a:d6:45:17:cf:e8:ca:47:9a:71:d6:34:43:15:5d:
                    c7:e5:4a:8d:e8:a0:a9:b0:2d:fa:43:80:f6:93:b7:
                    a4:13:30:d9:d0:96:16:6b:aa:b3:d5:05:de:14:77:
                    5c:c1:4c:2f:99:ac:80:4a:f4:aa:7f:d6:4d:b5:58:
                    7b:2c:65:62:20:ac:f2:68:40:cd:32:43:a0:2e:68:
                    3c:3f:88:22:5b:33:d7:05:9e:72:40:81:99:52:f2:
                    0a:a3:13:0f:d3:26:06:31:81:33:bc:13:45:da:b8:
                    8b:b7:2f:35:9a:35:c8:2c:8c:f1:56:20:f9:07:d9:
                    11:af:a9:92:2e:a6:46:06:0e:28:35:26:30:d4:46:
                    b4:a3:9d:3f:82:ee:68:d9:3f:3b:da:d5:15:04:8b:
                    ef:a8:e7:e2:8a:da:5d:26:c1:69:eb:64:6b:21:1e:
                    f2:72:de:7d:cd:7e:92:6a:21:ac:ec:e9:df:d8:33:
                    21:e2:1f:48:ee:a4:a8:e4:a5:e1:3f:84:41:a8:cd:
                    40:a4:04:7f:77:61:71:d5:74:5c:5d:3d:e8:cb:0e:
                    b4:59:71:8a:8c:55:3d:9f:45:89:8c:24:fa:fb:51:
                    c8:ea:39:f1:90:7a:74:70:71:5e:17:32:a2:53:a0:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:28:F2:93:EB:14:CC:B5:62:FD:7D:C6:13:68:90:86:28:1A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl

            X509v3 Authority Key Identifier:
                keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:55:40:bb:4a:b2:3e:3b:37:2f:c5:cc:6c:d7:e6:e3:1c:30:
         b4:89:96:a9:a8:13:35:28:d5:74:b2:2e:07:59:06:bf:b5:ab:
         45:52:02:bc:d5:f8:08:03:40:da:01:c1:c8:ba:76:ce:c5:7d:
         b0:92:50:b5:4d:3a:b7:f0:b1:8a:72:6f:d6:98:31:5b:47:53:
         09:1b:7f:84:f2:c8:f6:b1:a2:3d:84:29:b6:74:ed:ef:b1:1d:
         74:69:2f:35:41:0b:b0:95:4b:60:13:1e:3f:86:13:26:a2:43:
         8c:be:7c:45:f2:2c:34:2b:b7:b7:0f:ca:d0:64:9c:21:96:99:
         6f:5b:e0:e4:db:aa:db:1d:6c:58:ed:78:68:28:ff:40:b7:07:
         61:20:98:41:d0:47:ef:69:0c:ad:14:8e:49:8e:7d:3d:11:cf:
         04:9c:20:99:13:4a:28:f8:89:40:46:dd:ae:a5:93:64:ed:f9:
         a4:3c:b8:8c:a6:f5:21:ba:70:ba:40:c6:ab:b5:a5:3d:db:bc:
         b2:2f:40:9e:ff:f5:ce:8f:b4:53:cb:b7:ce:62:18:f1:fb:a1:
         02:a8:0d:c1:f8:c6:17:e8:68:6f:4c:eb:e1:b8:67:13:93:14:
         5e:a4:7b:b5:e3:04:dc:31:58:dc:d9:1b:e2:17:1f:fe:fa:ce:
         ec:74:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:19:15 2025 by rpki-client