Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ce3bea1-89ef-3324-a23f-15effe9030b7.roa
File:                     4ce3bea1-89ef-3324-a23f-15effe9030b7.roa (raw, json)
Hash identifier:          JetXcuqbQouc0GMSM3hVfVuqkBbuRHK2vrKARTqRd60=
Subject key identifier:   B3:E5:D4:C2:21:A9:86:08:DD:EB:D8:C5:45:06:F2:D6:53:DD:F9:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A14658083E2F8E6B6F96A8C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ce3bea1-89ef-3324-a23f-15effe9030b7.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        104.80.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:80:83:e2:f8:e6:b6:f9:6a:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=cc793839-0596-42ac-b815-6fd91c10d828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:17:99:a1:cb:c0:6e:0c:c0:d7:28:05:96:
                    22:7a:58:8c:94:7a:0c:9d:49:0f:ca:24:90:6f:42:
                    14:0b:fe:e1:c4:76:12:94:bd:fd:65:00:55:4f:e2:
                    96:a7:67:95:21:87:3d:cf:d0:9f:91:fd:9e:5e:ec:
                    f7:0a:20:9e:95:1d:b4:ba:9b:93:a1:71:ab:57:63:
                    8a:4a:32:37:d2:12:89:b9:b8:2a:0b:2a:46:fa:85:
                    9c:25:91:d5:12:95:5e:a5:5d:a3:6d:38:f8:2f:ee:
                    df:d0:f0:35:fd:0f:45:82:6d:8f:af:43:07:6d:8c:
                    3c:2a:86:9d:ec:19:78:27:1a:ff:2c:78:14:35:55:
                    95:9e:78:2d:60:af:95:bd:83:0b:43:6d:c1:6f:69:
                    cb:fc:b1:a5:fd:7a:ce:b1:1f:86:17:4e:40:30:b2:
                    73:0e:ab:52:07:93:d5:1e:d7:e0:b0:26:6a:10:22:
                    ae:79:05:63:d4:09:1a:18:23:a0:59:53:8e:4c:7f:
                    35:8c:00:22:c0:42:eb:41:7c:30:8f:5d:75:c1:ba:
                    61:1b:79:99:4d:93:d6:cb:6e:e7:f9:40:3f:e9:03:
                    d4:2a:e4:0a:8b:cd:a7:eb:06:d4:4a:4d:3d:84:1c:
                    8f:a8:87:68:8a:31:df:d9:56:fc:35:34:f5:bb:85:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E5:D4:C2:21:A9:86:08:DD:EB:D8:C5:45:06:F2:D6:53:DD:F9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ce3bea1-89ef-3324-a23f-15effe9030b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.80.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:b4:3a:8d:39:f7:32:58:00:b5:c4:31:b7:c1:78:fe:ab:
         5f:e6:7a:d9:3b:6f:52:e2:fa:68:2f:e3:87:2d:e6:44:2f:e3:
         c5:7d:75:a9:c3:24:21:04:3d:73:1c:1c:c9:5d:d8:cc:67:66:
         d4:d6:65:e2:07:68:85:c3:b8:ee:f4:db:10:f7:3c:17:6d:0e:
         3b:db:ac:97:a3:07:a6:e0:04:1d:14:4e:f9:0c:2b:df:49:29:
         07:ef:fb:db:ea:e6:b5:b6:25:56:b9:26:37:4e:a8:c2:46:44:
         ad:75:df:18:e7:2f:e1:d9:6d:9f:55:a4:58:07:25:bd:c1:a2:
         07:1e:56:c3:a6:d5:b0:bf:65:66:17:18:c4:d9:55:d1:11:8b:
         9f:a7:3e:2e:1f:e0:d1:81:22:30:14:20:c6:fe:bc:25:0e:50:
         3b:5c:a6:8b:70:42:ea:4c:b6:ed:7a:33:42:fa:b4:7b:36:31:
         f6:ff:dc:6d:46:c8:f8:fd:0a:a2:a6:da:ee:ed:7d:d8:a3:a7:
         b1:8b:1b:3c:54:7e:b8:10:b9:18:f8:15:6d:ec:62:65:b9:48:
         2e:2b:6c:f5:0a:9d:49:85:45:98:7b:43:83:65:ae:da:b6:db:
         68:f5:ee:bf:b8:9c:8b:88:10:97:da:08:bb:cf:13:30:c8:6f:
         fe:9f:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:29 2025 by rpki-client