Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75e8a9d6-109b-3806-b432-d36650ca6620.roa
File:                     75e8a9d6-109b-3806-b432-d36650ca6620.roa (raw, json)
Hash identifier:          7LoSkK04Ad/MfLYPILE8VBJIZtZtsN4ywbI9YILGhGE=
Subject key identifier:   01:1F:66:9A:57:6B:D9:8E:C9:7E:D3:C2:5A:D2:7E:6B:6B:D5:86:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848F926A30CCCF4213766B8EC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75e8a9d6-109b-3806-b432-d36650ca6620.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     33905
IP address blocks:        104.96.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a3:0c:cc:f4:21:37:66:b8:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=7d8db678-5e90-4c1e-98df-c77fe0260fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:24:09:c5:9f:39:64:53:54:25:76:ce:88:
                    ba:88:8a:da:a6:f7:f3:22:b6:d2:c4:7b:b9:0b:c1:
                    f8:23:15:3a:c7:75:88:5e:55:5e:a7:4b:81:44:ed:
                    be:b3:88:6d:32:5a:43:6f:c5:18:5b:dc:e0:d5:af:
                    dc:5a:58:0a:2a:9d:ec:10:54:f7:7b:66:e3:d2:3e:
                    49:4a:1b:10:f1:4c:2f:07:1c:11:ee:bd:1d:c9:d1:
                    53:97:d5:07:c8:f0:a2:a5:5f:3a:5f:6a:26:c8:b8:
                    4f:d1:ef:74:5a:9e:44:aa:6b:4d:7c:e6:29:41:34:
                    85:90:0c:08:3e:be:d4:21:b9:12:d1:ae:8e:f2:39:
                    06:b5:04:06:d3:3c:d9:fc:64:ef:0d:dc:01:b7:a9:
                    d2:95:83:ee:8b:10:8a:cf:58:e7:c1:b8:6e:b8:22:
                    2d:eb:a2:31:3e:cf:e5:0b:14:b1:ce:d0:88:49:2d:
                    28:b1:7a:42:29:7b:e8:21:1f:4d:d1:d3:73:69:d0:
                    bb:3b:51:aa:79:cc:07:60:76:ce:1e:e0:bc:e6:ce:
                    59:5b:f9:fa:95:40:3c:95:21:c0:c0:ee:90:9e:d2:
                    69:42:95:a7:65:0e:c3:05:8f:ff:93:02:5b:57:87:
                    29:f8:7f:04:c2:1e:5e:fb:f3:66:52:db:e0:e1:f1:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1F:66:9A:57:6B:D9:8E:C9:7E:D3:C2:5A:D2:7E:6B:6B:D5:86:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75e8a9d6-109b-3806-b432-d36650ca6620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.96.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:f7:88:fb:ca:87:af:93:88:e8:1c:23:e1:df:34:5b:c9:
         e0:f4:73:b1:54:c5:79:1c:e4:b1:cf:6f:b7:88:49:7e:94:fe:
         5e:9e:89:52:ce:1d:63:6f:6a:1c:2d:76:36:2a:09:d7:2d:6b:
         4f:62:b5:6a:13:90:33:8d:91:5d:cd:40:6d:73:30:c7:eb:1a:
         2d:f9:e4:25:d6:46:2e:7f:61:37:24:0c:0f:c3:56:ae:60:ee:
         90:0f:7b:74:24:d8:65:6c:b9:b1:7f:e8:32:89:55:be:7c:a2:
         10:c2:77:bc:2f:f1:74:c4:cc:65:f0:39:09:6c:4e:fe:eb:c8:
         28:05:80:52:38:f0:0a:57:26:50:64:c0:50:dd:c7:cf:41:df:
         94:f5:13:65:f1:49:0d:ba:50:70:4b:49:ad:64:f7:2e:47:1e:
         64:af:be:aa:03:d9:1e:bb:ce:05:e5:14:32:08:1e:a2:b3:c8:
         26:f9:45:0b:b3:85:e3:e9:22:6b:0b:77:9b:73:70:8a:6d:35:
         39:24:85:04:f8:30:51:4f:8b:16:9d:e3:69:79:bc:0a:37:5f:
         38:f6:bb:e2:e4:0b:4b:1c:8b:77:75:03:7d:eb:54:e6:6d:02:
         ad:1f:63:2e:8a:fc:b4:e9:33:77:8e:23:5e:fe:ef:f0:b9:3b:
         86:27:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:55 2025 by rpki-client