Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0272fd2-cb34-39e4-98ad-3b14fe75acfd.roa
File:                     c0272fd2-cb34-39e4-98ad-3b14fe75acfd.roa (raw, json)
Hash identifier:          E+UwzwfM2b4SN9j0dC99weO18UUc49lu6goKAcNxS7E=
Subject key identifier:   A0:72:3C:05:87:1C:C4:17:00:6A:C4:10:88:28:1C:FD:B8:83:2F:DD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849350EBB0B580D718FE5DBDF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0272fd2-cb34-39e4-98ad-3b14fe75acfd.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        104.100.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:bb:0b:58:0d:71:8f:e5:db:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=ec57245e-d59f-4518-9493-51bd2c5fdfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:b9:9b:a4:5a:c0:e3:d1:ce:8f:8a:a5:c7:
                    5f:9e:c8:2a:82:da:e6:79:7e:9a:f5:ce:89:70:49:
                    d9:85:72:be:54:d9:d9:ac:0e:59:54:38:4d:7f:47:
                    5f:21:a3:03:cf:74:1d:c9:11:fa:73:0a:04:02:36:
                    e0:a8:56:18:b1:06:90:17:03:d0:bd:5d:be:2b:a1:
                    45:ee:2c:64:20:4c:41:30:a8:dc:76:79:24:d0:c6:
                    ae:31:ba:4f:62:03:a5:c9:bc:a1:f2:0f:83:0c:31:
                    57:b2:b4:67:c6:5e:a2:b6:d4:b1:9f:a7:cc:32:d9:
                    ef:e3:50:d0:70:af:11:1d:12:f0:96:0d:7a:24:83:
                    44:63:ed:ba:10:60:e3:f2:c5:0d:71:80:4e:78:36:
                    18:0a:47:e3:8c:c3:3a:6f:21:51:19:04:1e:29:8f:
                    e8:31:bd:66:6c:cc:44:12:dd:76:59:5a:ca:47:01:
                    18:42:b6:ea:b9:42:8a:fc:0f:a1:14:30:6a:5a:f1:
                    16:3c:de:04:33:c4:ee:df:0d:b1:85:f5:f1:23:89:
                    76:1a:3d:f1:ff:93:33:dc:cc:de:45:c5:53:ff:42:
                    77:45:ff:e8:3c:8c:a4:4e:1a:f5:e6:23:5d:57:df:
                    36:68:ea:14:18:c1:c8:68:5b:b4:eb:3e:9d:70:d1:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:3C:05:87:1C:C4:17:00:6A:C4:10:88:28:1C:FD:B8:83:2F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0272fd2-cb34-39e4-98ad-3b14fe75acfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.100.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:cd:58:f5:4b:2b:f1:ab:b8:55:81:25:54:b3:e1:34:34:
         a1:cb:6f:75:d9:b8:fa:b4:cf:ba:24:a6:ff:67:64:d0:f8:c9:
         08:14:00:36:a8:c2:9c:11:de:d1:79:9f:d0:a2:21:d2:4f:cb:
         f2:af:b4:a7:71:3d:d3:08:20:db:f6:4e:e9:94:39:b9:7e:b7:
         c2:43:27:7c:71:62:fa:53:6e:f7:14:cc:cb:f8:60:9c:b3:c2:
         27:83:ba:7c:44:d8:7f:87:bc:c3:8c:2b:ec:e7:9b:19:1d:dd:
         a8:f8:2e:c1:3c:17:5d:9f:08:af:ce:e0:0f:8f:71:6f:64:4e:
         6a:3d:28:03:e0:e7:e4:e4:fe:c7:90:f4:a2:b5:95:54:e6:60:
         1f:b4:ff:35:3d:a1:32:f1:e8:dd:9d:4d:5a:3e:9c:1a:9d:db:
         76:17:4d:3d:99:2c:d7:25:a5:03:42:7a:7a:35:26:f8:fd:63:
         bc:5d:44:66:ec:22:ee:13:5b:35:71:23:fc:f3:15:b9:a3:62:
         30:ac:3e:c2:59:64:cf:a4:c5:1d:6c:e9:80:e7:87:8c:a1:dc:
         0f:87:d4:3d:68:ee:bb:fe:7f:eb:26:96:6e:a7:b0:3c:f7:c6:
         c0:e8:0b:a7:59:a9:8a:3e:0d:31:47:e6:72:af:d9:5e:c2:1a:
         1e:cd:c3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:36 2025 by rpki-client