Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7ea0ca3-376d-341d-b9bc-225e8d823631.roa
File:                     b7ea0ca3-376d-341d-b9bc-225e8d823631.roa (raw, json)
Hash identifier:          X9p+ANj8DO4ReYEcRdEY7APRMA5NJd2czWO3DLUFjPI=
Subject key identifier:   A5:7A:B2:02:74:48:FD:CC:40:D9:C3:CA:50:F4:02:71:D6:20:29:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A189555E6B7B339DABFAEC480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7ea0ca3-376d-341d-b9bc-225e8d823631.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        104.112.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:55:e6:b7:b3:39:da:bf:ae:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=247fa84c-a633-4c36-a46d-9ed06c381b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:d8:dc:d5:0f:f7:22:e5:64:95:76:e0:7b:
                    7f:29:09:6e:81:bf:2e:8c:03:14:18:65:02:44:04:
                    58:be:ac:af:b9:bf:50:27:bf:f4:61:4a:d9:97:17:
                    ce:d5:72:c0:3e:71:27:56:ee:b2:c1:83:35:5e:4e:
                    63:9a:92:c9:87:9f:2f:c7:13:d2:75:0f:51:f1:f6:
                    e4:ec:fe:07:b2:a4:03:3a:2c:c0:e0:cc:80:75:7f:
                    e4:cf:88:40:64:36:c1:2e:95:91:45:f7:d4:48:03:
                    bb:6b:0d:3a:cb:83:b7:d3:40:84:5c:0d:ce:50:7a:
                    2c:cf:af:15:81:90:23:1b:fd:44:e0:20:e9:8b:80:
                    cf:b9:11:a8:1f:94:87:79:5f:51:f5:2f:b0:3e:67:
                    f2:09:d1:ca:0f:e1:fa:42:98:b9:cd:d7:2b:1e:91:
                    1a:4c:6f:a5:37:90:28:81:f9:90:c2:b1:8d:24:b5:
                    0b:db:b0:2d:3a:6c:0e:57:eb:d3:56:fc:25:25:06:
                    3d:a8:37:65:6d:3a:66:20:93:f3:a5:7c:ef:83:53:
                    38:7d:99:29:25:54:c2:34:4d:28:c5:72:e7:05:13:
                    64:bc:2e:3e:ca:95:56:3d:09:26:92:6a:6e:91:32:
                    98:e8:12:dc:ee:d7:43:36:2e:63:3b:98:81:95:52:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7A:B2:02:74:48:FD:CC:40:D9:C3:CA:50:F4:02:71:D6:20:29:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7ea0ca3-376d-341d-b9bc-225e8d823631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.112.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:92:77:cd:ed:f0:f6:b8:5d:86:13:4d:53:0d:70:6c:45:
         80:cf:0f:e5:6a:25:70:9f:0c:1f:24:dc:b6:70:a8:68:c8:33:
         f1:87:10:e8:01:3c:6d:d5:9e:8e:1c:41:e2:69:6f:ec:9c:9f:
         b5:1f:68:ec:1e:ec:17:f0:74:07:58:17:7d:49:a7:22:14:a5:
         d8:e9:e6:b5:08:71:7b:9e:45:9a:30:5d:d1:da:9a:71:ed:3a:
         a6:b1:a2:26:7a:a1:63:62:1d:3a:56:65:e6:5a:22:e4:44:fb:
         d2:01:67:61:b0:f7:b0:de:91:9e:01:16:77:90:30:90:62:35:
         3a:72:4b:34:90:dd:c6:fe:02:52:0a:85:dd:94:19:0f:bc:98:
         b5:71:27:31:66:54:7f:e5:cb:e2:e0:cc:03:a8:70:37:17:8a:
         dc:b9:86:a4:ca:b4:af:bd:45:96:3c:3d:fc:30:1f:b5:7f:ca:
         22:cc:1f:8b:c0:40:08:ee:3c:f2:98:74:6b:42:ca:15:b3:5e:
         f0:80:10:a2:4b:c2:d3:39:98:3e:68:8f:f1:9b:dd:66:00:c6:
         65:d7:04:23:77:f5:cb:e4:c8:f4:bb:72:d9:b6:30:b9:57:62:
         71:35:e8:b8:52:99:7f:ff:74:69:60:73:5f:b3:4b:97:8e:44:
         2a:08:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:35 2025 by rpki-client