Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1586ab30-975d-376e-9986-d1813ef25879.roa
File:                     1586ab30-975d-376e-9986-d1813ef25879.roa (raw, json)
Hash identifier:          8L6TMx2fQndRLREKHzNq0t3UcoiRrUjibWD6w3LfiqQ=
Subject key identifier:   55:90:39:24:E0:8B:62:0D:03:70:8B:72:0C:6B:54:A1:C7:BB:32:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A146583545137C42C11657C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1586ab30-975d-376e-9986-d1813ef25879.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        104.89.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:83:54:51:37:c4:2c:11:65:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=7b6dbfda-8c0e-4320-b3af-2ef27875951b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:aa:d7:43:69:53:d4:1c:a2:0b:5d:17:46:d9:
                    b0:b0:66:5e:ed:21:2b:03:c3:0e:f0:62:b2:89:71:
                    3f:55:27:01:ef:1f:df:1f:43:5e:ae:59:5e:be:6a:
                    8e:ce:95:b1:fc:a1:90:49:c8:f8:a6:bb:50:bb:b0:
                    96:11:d4:ca:7c:bc:60:c8:15:f2:6b:76:86:e5:dc:
                    17:97:28:91:7e:aa:21:4a:f1:e6:0d:eb:be:d9:56:
                    e5:6a:ef:3f:b2:e5:d5:29:a6:c0:bc:b3:70:e5:b0:
                    08:ea:04:b3:a3:3a:57:3e:b7:cf:13:4f:f8:58:76:
                    16:27:df:21:de:d5:23:6a:3e:93:a5:dd:db:f8:4f:
                    64:3d:5b:4d:c6:1c:a6:6d:ce:51:fd:d2:75:f2:f4:
                    66:ea:89:6c:cb:0f:ce:71:94:dc:97:c1:c9:00:12:
                    f1:fa:1e:a5:d2:8c:95:3d:b1:68:56:ae:c0:0a:03:
                    28:e9:a1:fa:14:3b:d7:34:3f:0a:a1:71:3c:51:31:
                    7a:e2:4b:37:74:1d:3e:75:77:6b:1e:e7:7d:7e:7b:
                    ab:a2:85:9b:fc:a8:c8:82:8b:0e:c8:be:87:16:d5:
                    a8:69:3b:2f:b4:c1:de:00:8a:1e:34:3a:0d:e7:38:
                    90:9a:ed:ad:e3:59:52:eb:77:da:2b:eb:1c:03:8b:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:90:39:24:E0:8B:62:0D:03:70:8B:72:0C:6B:54:A1:C7:BB:32:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1586ab30-975d-376e-9986-d1813ef25879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.89.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:95:5c:16:a1:eb:32:c6:df:b1:c0:b6:52:aa:9b:e7:b8:
         ce:83:ce:db:76:d6:b5:61:4b:7e:e0:40:35:9a:5a:22:c1:cc:
         73:12:a2:c7:df:87:98:cf:dd:c8:9f:30:72:21:7a:27:5e:1a:
         01:5b:f6:12:47:29:59:ff:ab:90:60:2f:68:a4:6e:e9:3a:03:
         fa:f8:ef:15:85:17:ff:6b:96:5c:6e:61:e0:bc:3e:09:03:e3:
         c4:54:1a:a1:05:0d:98:a2:9f:be:f8:a8:a6:6c:ab:24:45:09:
         01:a2:4a:0a:3b:d9:3a:64:27:20:cd:bc:46:99:bc:17:b8:81:
         a5:fe:6e:45:4b:72:7a:5f:ff:ab:04:4b:b4:78:0b:6c:05:4f:
         bd:3b:52:79:bf:d1:40:2b:ae:5e:db:51:6a:ab:d5:34:56:e9:
         8b:e6:d2:8b:04:e7:91:31:98:9c:42:af:05:b2:a2:cc:cc:f8:
         64:b5:e5:5a:67:8e:68:0d:de:5b:cf:af:12:55:0c:9b:16:2a:
         cc:bd:6d:3a:da:f0:65:4d:07:de:ba:56:82:92:bc:89:6f:8e:
         ba:2c:2d:44:35:2a:dd:83:79:56:10:cf:1c:fe:0c:45:85:09:
         91:7e:0a:db:99:47:fe:db:e1:04:08:63:0d:dd:d2:92:e2:bb:
         61:8f:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:46:04 2025 by rpki-client