Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4caed1-e92f-3ece-a993-2c374f472a75.roa
File:                     2f4caed1-e92f-3ece-a993-2c374f472a75.roa (raw, json)
Hash identifier:          7z2LDBs3/AcC3fhDbl5f8x4ZI5z19FsLfv48TzU+KtM=
Subject key identifier:   A2:AD:30:B4:9E:59:4F:EC:BD:C0:9C:38:48:AE:F5:DD:0D:4E:6F:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A119ABA112419BF55CC851A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4caed1-e92f-3ece-a993-2c374f472a75.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        104.71.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ba:11:24:19:bf:55:cc:85:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=6a787cc4-0a9c-48d1-8311-11bbff7274c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:b5:c3:3b:14:a9:8a:74:55:13:16:8e:5d:
                    a2:54:d0:78:71:9f:75:59:0e:5d:dd:8b:fe:65:99:
                    38:47:d5:51:ec:d0:0b:8c:24:82:63:7c:f4:29:36:
                    2e:fb:1a:44:5b:39:5b:56:bd:f5:a6:d2:3a:dc:fc:
                    f1:19:1c:b7:c8:64:c6:dc:83:f5:72:e0:af:52:d7:
                    89:63:83:90:01:48:d1:5a:dd:44:1f:ad:96:63:24:
                    c8:66:92:62:e0:80:4d:fe:bf:fd:16:e3:14:e9:06:
                    76:63:3b:30:6f:10:93:19:ea:db:1c:18:04:51:c3:
                    f2:b2:a5:98:33:7d:bb:b0:d6:f9:75:b6:26:0c:87:
                    13:7d:3b:7e:52:7a:07:29:d9:c1:b3:72:80:3b:f5:
                    78:c7:da:fa:e6:f9:5c:01:f6:79:45:e7:74:9b:73:
                    b9:25:59:a4:f6:95:69:ea:6b:95:6d:db:65:4d:e8:
                    ca:51:9f:93:4e:e5:85:f8:02:b6:fb:e3:a6:15:af:
                    fd:c3:9d:fd:f0:e2:63:fb:bb:20:e4:b9:bd:4a:64:
                    30:c7:21:b8:80:93:0a:1b:ad:70:3e:1e:b1:7f:fa:
                    66:50:45:45:5c:e6:7a:fe:6e:20:b7:85:ce:98:fa:
                    52:c8:a9:e9:97:38:cf:c0:d8:1c:83:f9:61:55:5e:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AD:30:B4:9E:59:4F:EC:BD:C0:9C:38:48:AE:F5:DD:0D:4E:6F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4caed1-e92f-3ece-a993-2c374f472a75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.71.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:7c:8b:1d:51:39:c6:97:96:ec:89:8d:eb:b5:29:66:83:
         82:af:12:58:2c:68:5c:92:2e:a5:a1:07:b1:60:6f:fd:61:f2:
         dd:6d:d2:a7:c8:c6:86:07:1b:b9:bf:2d:3c:f3:82:dc:84:d4:
         ed:89:88:ec:cb:23:40:fb:8e:f0:d9:90:e8:92:da:4e:8a:cb:
         f8:3c:a7:01:b5:29:30:5f:0e:d5:5f:25:04:8f:14:f9:9f:09:
         d8:98:c2:c8:d8:0d:ce:77:1d:24:ea:56:ba:ef:69:be:cf:33:
         e8:79:82:9c:75:74:36:75:96:cb:2e:79:b4:c4:dd:37:f0:35:
         b6:0b:cc:18:d3:80:91:bc:3a:7d:71:04:16:de:a9:5e:4e:0c:
         46:c1:64:df:62:8b:e3:9d:16:0b:06:6a:2d:60:ad:f1:9d:7b:
         b8:71:4a:5f:56:dd:44:ba:b1:73:ef:97:6d:9b:62:74:55:44:
         50:4f:aa:f1:f7:ad:03:89:07:43:35:48:a3:d0:7b:c9:38:d7:
         51:e2:e0:df:12:e8:dd:4b:8f:16:91:97:2e:d9:48:34:ef:5a:
         41:71:11:e9:6c:b2:47:56:7d:aa:88:16:69:12:13:09:18:d6:
         03:ac:57:57:48:c4:cc:14:f1:2f:d3:1c:2d:1a:3c:ec:aa:2c:
         a4:65:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:52 2025 by rpki-client