Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa
File:                     08032e54-8bac-3dc7-a02a-242753a12434.roa (raw, json)
Hash identifier:          fVYmTgvGKvr+4hsCv0BBncpgJBgoMzr/3/ezaXITd4w=
Subject key identifier:   84:6C:3E:91:25:FC:FD:68:DC:6D:73:92:5E:8D:E0:EC:44:56:0B:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A119AB9AF8F114D0929AF8C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        104.71.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b9:af:8f:11:4d:09:29:af:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=6df21e67-23fe-47f1-b4c4-d5a6f1805827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:12:cf:34:8c:e7:e9:2b:fd:09:b4:cb:af:
                    54:b1:56:7b:8d:43:e8:a7:3e:45:64:83:e1:a5:98:
                    00:3d:41:b5:31:62:48:41:6e:81:2f:3f:8b:ae:04:
                    83:99:1e:dd:22:95:c8:dd:87:3d:86:30:20:8b:9a:
                    80:c0:db:2d:7b:51:62:9e:0b:6b:67:26:c8:e7:6c:
                    00:87:47:be:7f:6a:81:7b:81:ef:fb:f0:13:3f:86:
                    85:69:dd:c0:f7:62:fe:cd:7a:5d:c0:33:91:be:78:
                    1e:01:53:b2:61:6a:6a:4d:94:e3:57:8d:e7:cf:53:
                    07:cf:3c:5b:65:ec:7a:ef:43:62:b6:b2:85:3d:ae:
                    48:f6:20:aa:9d:0f:59:71:d9:b5:9b:e7:41:53:26:
                    1c:19:e4:f2:11:a3:b1:9e:66:46:65:37:98:6e:69:
                    47:be:57:9a:f5:0a:54:3a:76:12:7c:cb:61:93:d0:
                    75:1c:64:cf:37:15:0d:13:f4:05:d4:9a:59:7b:21:
                    6e:ff:94:d2:ba:d4:cf:de:39:15:74:9a:01:c7:c2:
                    84:fe:68:7b:26:b8:f3:3c:c2:b3:a6:72:80:b3:6a:
                    ce:3c:1b:af:77:3e:14:b8:cd:17:27:84:d3:95:f0:
                    85:e7:fa:8a:71:8f:30:e0:b5:2c:27:33:c1:41:e9:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6C:3E:91:25:FC:FD:68:DC:6D:73:92:5E:8D:E0:EC:44:56:0B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.71.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:3d:6e:96:29:bb:2f:5a:aa:c2:30:4f:9b:61:00:a7:b5:
         ec:a5:d1:2d:40:2d:b9:8a:35:aa:37:64:db:45:3a:9a:49:4a:
         fa:ef:5b:4f:e6:78:91:53:09:fc:35:4a:f0:ca:5f:21:46:ff:
         c6:d4:cc:d0:3c:35:39:33:82:6f:3b:f0:e7:0d:16:f5:9e:13:
         23:00:aa:bc:b0:e7:9a:16:6f:eb:d7:64:85:18:4a:cd:fe:cc:
         9e:67:d1:a8:01:ea:4b:01:cf:7c:da:f7:eb:40:57:cb:61:34:
         55:06:87:f1:16:6a:4c:ad:1b:29:94:0f:3b:09:e3:88:b9:4a:
         9b:77:27:ff:d3:3d:73:75:12:79:75:05:97:3a:10:9f:0b:f6:
         9e:e9:47:81:5d:01:a3:23:44:ab:56:0a:60:29:c6:b0:4a:66:
         69:73:e6:4d:6f:7e:4c:74:7b:4a:6f:7b:12:8d:4e:84:05:77:
         f2:c4:4b:d8:aa:58:d6:31:00:16:4e:b8:27:34:09:de:5f:f7:
         84:af:7e:11:3d:95:33:99:04:52:9e:d4:94:d1:d5:f8:ec:84:
         b6:b5:1d:8e:19:e1:5f:1f:93:87:61:45:dc:52:09:c6:81:1a:
         1d:20:89:b9:6e:a7:7e:56:cf:5b:db:6c:60:5d:f4:c4:16:82:
         57:65:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:32:50 2025 by rpki-client