Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/278877ab-3f8f-3b7a-9803-9b8f3cc2a1eb.roa
File:                     278877ab-3f8f-3b7a-9803-9b8f3cc2a1eb.roa (raw, json)
Hash identifier:          LgTfl91bmTAzDRLz98cqUyCfo4ds9aDyoIDLl8TmGqs=
Subject key identifier:   81:CF:E4:57:66:22:D7:05:C9:AF:C1:D1:D5:CA:66:4F:E2:90:75:B7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849350EBF77CEFB73F11188A300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/278877ab-3f8f-3b7a-9803-9b8f3cc2a1eb.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        104.85.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:bf:77:ce:fb:73:f1:11:88:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=2aad95b6-10e2-465d-a38d-3b3109dca30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:92:3f:4f:86:14:32:a2:37:19:c5:45:ad:
                    ae:a2:a1:f6:3c:fa:59:ef:4f:44:6a:57:b9:1b:c1:
                    56:57:7c:23:fd:d0:e5:e9:5e:9a:23:3c:2a:ac:61:
                    aa:3f:f1:66:55:78:90:c7:31:16:10:3f:5b:96:3a:
                    72:47:3b:c9:6b:30:15:5c:97:18:62:d9:b9:d7:21:
                    6a:3a:cd:44:d8:5f:95:08:aa:11:b5:99:d7:db:de:
                    97:30:16:38:cb:cb:c0:97:07:b1:58:1e:31:57:5b:
                    a8:93:76:c3:51:a8:2d:bb:01:b5:d1:0e:ec:09:12:
                    80:64:cd:02:b2:ce:cf:17:f0:c1:d3:89:8c:d6:cc:
                    1b:e6:2f:88:3f:fd:b2:b8:76:01:aa:fd:4f:05:1b:
                    cb:13:e5:7c:d7:3a:86:be:9a:bb:cd:da:e6:d9:6a:
                    39:04:6f:29:c6:f4:56:fa:95:b1:75:33:8e:20:c4:
                    32:0f:6d:83:3a:d1:d5:61:38:2e:c4:69:be:b0:25:
                    96:24:99:87:87:86:db:85:c7:72:e7:9f:18:6e:a8:
                    bd:09:6b:3e:1d:3a:3d:36:d3:bd:0c:3d:f7:5f:e4:
                    01:fe:49:e5:63:60:a3:ac:db:06:f1:96:9b:99:e3:
                    60:1f:96:f2:05:96:ee:8b:cf:1f:86:4f:5d:2c:52:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CF:E4:57:66:22:D7:05:C9:AF:C1:D1:D5:CA:66:4F:E2:90:75:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/278877ab-3f8f-3b7a-9803-9b8f3cc2a1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.85.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:a2:f7:bd:0c:52:e2:9f:8b:df:82:ee:59:b8:fa:06:f3:
         b7:c3:70:b2:72:e5:f2:79:d1:7f:8a:b5:f3:b1:15:d5:47:8d:
         1a:e6:72:31:d7:ef:d8:b8:60:30:85:82:16:c3:ff:af:05:d3:
         da:be:cf:52:d2:52:cf:b6:7c:e7:5c:af:61:08:1f:e8:cc:6d:
         c4:d3:3a:8d:7c:64:aa:f0:86:2e:f1:fd:94:12:6d:f0:8f:8a:
         b2:f7:90:12:d5:62:36:45:cf:00:0c:ad:08:7a:f1:e4:b4:9b:
         db:f7:7a:01:b9:79:45:9d:2c:ec:a3:48:f6:bb:a0:12:7e:58:
         0d:80:ee:8e:6b:e9:9b:07:6f:57:24:0d:ef:f8:97:18:0c:3b:
         bb:32:c1:cc:cf:8e:15:84:fc:37:4e:20:34:2e:e2:5f:af:41:
         a2:70:f8:a9:29:70:67:80:0c:82:0c:6a:36:7e:e7:75:91:92:
         29:76:1e:9a:94:76:96:4a:a8:ff:ef:78:f6:aa:66:39:fa:16:
         8f:79:f2:d8:25:eb:83:d5:e9:da:7e:21:c8:8a:33:a9:ab:4c:
         b1:27:ff:47:81:1f:30:a0:01:e6:92:66:07:f9:5a:bf:b6:88:
         3a:b1:f7:eb:80:ad:8d:07:a1:6a:bf:a5:37:fb:c1:f0:b6:ec:
         0c:4c:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:39 2025 by rpki-client