Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa
File:                     b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa (raw, json)
Hash identifier:          N+G7VHo56eSkqvf7PSt7gV4F6SBSfATlks1vL4BJHxE=
Subject key identifier:   A5:52:E3:21:00:C8:49:79:39:52:FD:56:7E:60:FF:31:4E:7C:3F:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A146588E4FB8B82D54EC4E500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        104.103.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:88:e4:fb:8b:82:d5:4e:c4:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=8e6a800a-3c08-41a5-9162-f9d04f4278aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1a:b5:a3:2a:74:15:29:da:45:45:08:80:55:
                    30:f9:ae:bb:a6:9c:d6:86:c8:70:a9:bd:71:b2:ec:
                    d1:93:94:6a:d4:f8:e3:a4:ea:45:86:a8:32:0e:4a:
                    82:ce:ae:60:1b:9f:86:6b:15:ae:f4:0f:db:a1:31:
                    9c:06:8a:f4:f0:c4:d1:24:b6:07:e4:e2:a0:78:9f:
                    33:e5:c7:e1:f6:8d:01:2f:71:6e:d3:59:e3:6a:3f:
                    8a:5f:31:92:e0:37:13:08:38:9e:13:f3:f0:2b:45:
                    4d:d8:e7:78:2a:40:43:bf:6b:4d:b4:bd:da:29:15:
                    b3:9a:94:2d:49:0d:44:15:08:07:a4:11:35:79:19:
                    e4:e3:e4:e3:db:dc:0c:e3:32:b9:3a:52:79:4b:df:
                    ec:9f:fd:a6:e2:55:5d:23:c8:bf:d6:0f:f8:e7:1d:
                    ed:a0:67:0d:32:e3:60:f2:7b:a5:d1:85:38:4e:55:
                    27:39:37:37:7e:54:04:bb:79:7e:34:96:ca:c0:d1:
                    bd:7a:5f:e8:3f:39:ce:24:6e:f8:ec:e0:75:a5:56:
                    fa:fe:ec:a6:06:6c:02:f0:c5:b1:0e:d5:7c:4a:1a:
                    60:73:21:9b:48:e5:c2:bd:08:6b:d0:d1:28:ac:d2:
                    02:82:67:8b:b4:12:f4:8a:46:2b:ef:b7:09:1b:fa:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:52:E3:21:00:C8:49:79:39:52:FD:56:7E:60:FF:31:4E:7C:3F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.103.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:05:f2:9e:3a:3c:41:eb:02:05:32:04:a7:3f:1d:28:a7:
         d0:64:af:01:51:86:67:31:e2:0f:63:1e:7f:42:36:57:68:5b:
         16:09:dd:96:bf:22:72:66:64:e8:4b:63:e9:96:27:ce:e4:81:
         a0:6d:d2:e2:be:f1:96:9a:27:86:2d:64:30:a6:ef:76:9c:ed:
         c9:c5:ee:af:13:3d:b2:5d:69:7f:62:04:6d:a5:0b:22:05:53:
         24:c1:28:6f:4d:4a:c7:d0:fd:33:f8:1d:1c:20:d9:ab:35:ef:
         be:a1:75:47:d3:24:a1:9e:dc:f4:ae:b5:27:23:b1:93:8f:a3:
         66:55:ae:f4:72:16:0f:94:e6:99:be:33:fc:51:27:7c:c9:9b:
         13:9c:13:49:3d:d0:58:50:1e:11:9d:f2:43:7a:83:c8:79:03:
         7c:97:6b:59:46:3c:64:af:3a:15:c1:c3:55:35:4b:24:46:f3:
         e6:ef:a9:5a:42:98:0a:fd:23:e8:94:e9:9e:16:ff:34:cc:de:
         7f:87:fb:fc:82:66:23:8a:f2:c9:a6:3e:48:ba:87:03:65:51:
         1e:f5:1f:e0:36:6e:9b:1c:3e:f6:30:a5:c9:12:14:51:04:60:
         2e:70:e2:c6:3f:dd:be:dc:a2:61:00:65:28:7c:06:43:bc:35:
         27:6b:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:07 2025 by rpki-client