Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa
File:                     997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa (raw, json)
Hash identifier:          Waphqg/TDQa5YuneOMuM+mLq7k9DxNuGmOsvmBSJtgc=
Subject key identifier:   F4:BD:9F:4A:B6:E6:37:1F:D4:74:91:14:95:7C:6D:DD:3A:9D:DA:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A146583F8915666642367AC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        104.90.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:83:f8:91:56:66:64:23:67:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=7fa6fd2c-056a-456e-8a18-b4bae4c37e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:71:0b:fd:a4:b3:a7:c9:ca:d7:56:34:8f:
                    6c:30:8d:d5:b4:5b:e6:ab:77:87:11:53:02:31:cc:
                    80:38:47:5c:78:79:62:e1:5c:7d:c7:cb:c1:a0:73:
                    54:6e:60:15:8c:ed:f6:ce:f9:99:89:40:cd:df:0c:
                    fc:61:12:bc:1c:49:4e:24:a6:51:07:07:9f:85:4e:
                    5a:f9:d1:74:e9:9e:ef:df:6c:04:79:60:c9:ac:2f:
                    8e:8c:0c:fe:84:01:f9:c6:3d:01:fb:0c:e0:9e:8c:
                    69:d3:8a:b3:33:00:d7:9b:9a:95:1a:8f:1b:38:3f:
                    00:9d:18:ad:d2:eb:7a:fa:aa:35:57:e5:16:05:fc:
                    2e:43:ea:9d:32:40:d2:08:0d:40:06:17:b9:4a:03:
                    e8:bd:c6:66:55:82:f9:6a:28:e9:45:fc:5e:e3:e2:
                    84:b2:59:b3:f8:aa:b4:aa:18:2e:de:b0:bd:d8:5f:
                    da:24:1a:a1:eb:23:7c:06:4f:f6:b0:3d:8e:08:b9:
                    f1:dc:9e:46:2e:57:98:06:8e:91:c8:f1:ef:4c:e4:
                    99:c1:4f:4d:58:31:4c:67:b2:76:4a:35:99:c7:ea:
                    b0:f7:53:5c:f1:17:5f:5d:65:72:6b:c8:c1:df:62:
                    2d:ec:85:03:4d:27:ec:48:38:e5:10:3c:e1:4c:4f:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:9F:4A:B6:E6:37:1F:D4:74:91:14:95:7C:6D:DD:3A:9D:DA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.90.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:01:e5:7a:2c:c5:00:d5:09:15:a3:dc:19:25:98:b0:93:
         96:3f:e0:25:5b:9b:3f:5e:2c:20:29:35:b3:18:61:d1:6e:c4:
         f8:cf:b7:66:9a:19:59:88:11:2f:a8:66:c1:b9:1f:8b:7a:d0:
         87:b8:d2:1d:8e:3a:bd:45:bb:75:a4:5f:90:e0:81:af:12:8b:
         1c:b6:1e:84:cf:75:86:31:f7:fe:91:c6:ad:68:e3:ac:15:33:
         84:f8:9c:82:88:5f:2d:39:8c:36:f8:d9:5a:af:0d:e6:87:96:
         c3:5f:a8:75:42:1b:b0:7b:41:31:c9:6c:08:37:d7:3b:e1:21:
         52:24:86:10:cc:e9:9f:87:84:27:10:3e:e8:f4:5d:8d:73:8e:
         b5:4c:6c:03:d7:3a:ee:d9:63:30:79:9b:e6:f6:4d:25:41:98:
         31:e6:3a:16:a7:c5:34:8f:01:1a:3c:85:1b:e2:56:d4:00:28:
         18:ae:20:4f:e1:65:5a:a1:e8:af:92:35:90:f1:ec:64:61:39:
         b6:2d:df:92:44:c1:f5:fa:36:71:3f:2b:b5:b9:62:f2:30:03:
         52:75:52:e9:37:85:48:0e:fc:d0:c6:8c:bd:63:ef:05:17:87:
         63:5f:70:fa:52:4f:49:d1:c6:a6:2d:33:8d:43:b2:22:35:80:
         5a:a6:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:19 2025 by rpki-client