Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2c7b249-7d7a-3730-bb0f-0777647e2a2f.roa
File:                     c2c7b249-7d7a-3730-bb0f-0777647e2a2f.roa (raw, json)
Hash identifier:          YndVb/lKdG0fXMgAVrZGvUF5sQHuspZ5FSlvnu9fd6o=
Subject key identifier:   5C:02:10:E2:3D:93:B1:21:B3:8D:4E:75:42:87:33:E6:D2:2B:8D:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1035510AF54461FE11E4DF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2c7b249-7d7a-3730-bb0f-0777647e2a2f.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        104.74.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:51:0a:f5:44:61:fe:11:e4:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=f73e7af3-5db2-450c-a5de-1c4367c78468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:74:b0:f2:10:7d:bf:89:88:03:f8:fb:48:
                    28:72:25:43:75:83:7a:65:98:bc:76:85:ae:8a:4c:
                    47:e5:2c:ca:a3:fd:dd:06:21:45:c1:e0:3f:c4:02:
                    bd:98:00:a8:6f:1c:33:e1:72:6a:c1:63:4d:08:71:
                    c6:40:73:44:74:17:fe:b6:2a:f0:e6:90:af:1c:5d:
                    49:8d:73:9b:cc:7d:36:67:52:7c:d5:f7:39:07:3d:
                    ec:08:1c:59:80:42:d0:d7:3c:1e:81:0e:88:35:3d:
                    b9:32:dd:58:14:37:59:fb:f7:83:fc:b0:10:ff:20:
                    06:b9:56:f0:b4:98:9f:cd:56:f3:cb:34:7c:c5:d6:
                    d7:fc:31:2f:42:7b:a2:51:30:55:1a:fb:bc:97:34:
                    69:36:bb:06:2f:a1:f2:8a:04:9b:8a:31:c4:9f:3d:
                    1d:a6:06:ed:76:37:95:68:e8:cc:19:5e:0b:62:64:
                    70:64:81:fa:e4:18:93:ad:48:15:95:09:de:73:29:
                    18:79:8d:7e:91:0f:44:07:49:a7:51:e1:49:1d:fc:
                    a9:6e:5d:50:8f:fd:30:0f:75:30:d4:f6:5e:26:e7:
                    67:fd:24:4e:69:2e:d6:57:ba:ed:3c:53:5f:b3:7f:
                    03:0c:4b:49:e4:c5:43:4c:11:ac:da:fe:c1:a8:6b:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:10:E2:3D:93:B1:21:B3:8D:4E:75:42:87:33:E6:D2:2B:8D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2c7b249-7d7a-3730-bb0f-0777647e2a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.74.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:64:f6:cd:92:42:bd:e9:3f:46:b0:91:19:a9:8c:a0:31:8c:
         ea:ab:21:1d:d5:7d:62:ca:f1:2b:80:20:6b:e3:96:21:28:23:
         7b:f8:9b:e5:28:01:32:3f:d9:f8:a4:a1:2d:17:4b:df:54:65:
         03:6b:d6:53:5c:75:48:4e:bb:5a:ba:79:f2:ff:a9:37:09:3b:
         88:47:48:0e:0d:fc:de:0d:93:06:ec:b9:b5:a4:6d:13:82:0c:
         b9:32:ac:ff:3a:70:db:98:c2:a1:fc:6e:84:cd:3c:06:85:78:
         db:51:c9:7f:79:05:f9:e9:74:8d:e3:ea:82:1e:92:ba:fc:93:
         11:18:95:1c:1d:65:cc:ff:ab:e9:71:b1:ad:a7:5d:9d:1d:3f:
         16:c2:30:76:37:4f:db:9b:68:13:5e:66:5b:db:6e:90:23:cd:
         3a:58:8c:d2:7a:f4:32:60:fa:0f:94:d5:c8:57:9a:66:b4:22:
         d5:45:ef:8d:f8:97:a5:c7:80:f2:91:35:c3:fc:b9:2e:a2:7f:
         05:d3:03:25:a2:bf:d3:4e:28:b5:2a:73:97:4c:ca:b4:b6:04:
         53:d8:77:42:c5:e9:e9:49:8e:75:74:b3:12:77:3d:80:3c:22:
         7d:fb:7e:a0:60:75:46:e5:60:de:9c:4c:5d:56:9b:f3:43:dc:
         97:5d:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:16 2025 by rpki-client