Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe25b69-7dbe-3f5a-807e-afc97ba0fa2f.roa
File:                     6fe25b69-7dbe-3f5a-807e-afc97ba0fa2f.roa (raw, json)
Hash identifier:          avDcheRgqQ9X0yZm2krNsEqyNxquV9fRro0j9ihdQhU=
Subject key identifier:   FC:70:38:68:53:81:9E:6E:4E:F1:BA:86:11:E4:B2:90:8F:90:C3:F5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A146590C50D1DB87521180700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe25b69-7dbe-3f5a-807e-afc97ba0fa2f.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        104.94.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:90:c5:0d:1d:b8:75:21:18:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=4435ed0a-068f-4dc6-b33b-314c5b67431a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:b9:39:b8:e7:2b:86:3f:7a:2c:a0:c9:00:
                    f5:7b:0e:bc:eb:55:4b:a9:0e:94:24:88:75:55:8a:
                    d8:bd:54:07:ad:6f:50:66:c4:32:b5:89:18:fd:3d:
                    62:49:5a:01:bc:aa:cf:a1:05:56:3f:0b:2a:30:a2:
                    91:70:33:08:86:7c:7e:f7:f5:ec:24:4e:b3:9a:81:
                    9f:36:5d:16:13:af:8f:14:45:33:aa:45:37:8c:33:
                    d5:eb:47:ea:ec:25:63:76:19:83:f7:b9:1b:23:10:
                    cd:93:9b:1f:52:53:5e:13:c7:03:be:ef:3b:65:ea:
                    05:f5:a3:c1:34:81:f7:2e:c0:63:51:a0:98:5f:70:
                    0c:14:2d:8d:ca:6b:f5:b1:06:86:80:be:6c:ea:4f:
                    91:e3:ee:42:74:c1:6c:95:f2:af:9a:b7:48:3b:a1:
                    d9:7a:77:8c:88:90:75:f2:ce:21:25:99:bd:5d:cd:
                    e2:b4:cb:fa:4a:23:db:bd:9c:4c:ea:b4:cd:c2:40:
                    ad:07:dc:22:51:df:d0:5b:ff:0d:ab:34:4a:90:3c:
                    40:fa:69:75:b4:92:3e:bd:c8:c8:b4:ce:69:09:3b:
                    cf:6c:43:87:29:29:3a:61:85:95:94:64:d0:4a:ec:
                    b3:34:6a:5c:3d:1d:8e:20:e6:af:c8:41:56:c5:36:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:70:38:68:53:81:9E:6E:4E:F1:BA:86:11:E4:B2:90:8F:90:C3:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe25b69-7dbe-3f5a-807e-afc97ba0fa2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.94.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:96:c9:4e:af:d9:e4:ee:21:0c:31:ef:ce:50:b8:0b:9c:90:
         73:43:4f:eb:7e:b7:40:a7:e7:80:fd:a5:0f:86:6c:b2:d6:03:
         b7:28:3a:33:d4:61:a4:15:56:09:9a:c9:d2:ba:3a:d4:41:aa:
         0f:7e:17:bd:54:9e:b7:c0:24:20:2e:84:2c:19:cf:79:b6:ae:
         31:e2:46:84:a7:f5:b0:ed:28:25:61:0e:eb:d4:63:3f:aa:37:
         a7:ff:7d:a0:8a:86:b1:fc:a3:2a:0f:55:b5:1d:9c:a1:35:67:
         ff:53:87:5e:9c:44:81:d2:f1:a3:5c:c3:63:38:8a:d6:cb:86:
         34:94:1f:f6:65:ab:53:4f:dc:45:f7:0f:d3:cd:bb:6a:1a:32:
         1d:2a:31:49:e0:05:52:09:9e:7f:89:3f:e9:c7:75:52:3d:48:
         10:13:e1:bb:ef:4b:1f:b7:72:5e:c0:0a:a7:84:79:b3:80:b1:
         de:a4:53:78:ec:48:35:4d:17:3d:af:77:07:a9:e6:c0:92:75:
         6b:4f:93:3b:9b:58:01:0f:10:74:e4:b4:f9:81:b2:e9:dc:88:
         91:1b:8a:81:1a:79:e9:59:5c:0a:fa:ec:e4:99:85:18:44:79:
         e8:1f:c1:43:37:d2:23:d8:0f:8b:18:08:91:cf:c2:20:c9:cc:
         7b:ff:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:48 2025 by rpki-client