Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d49b67ba-615e-356c-83fe-386eb744f8c8.roa
File:                     d49b67ba-615e-356c-83fe-386eb744f8c8.roa (raw, json)
Hash identifier:          7M2oM8IczotyF4btgpzM9893j60VqSXDCM1zCl8tU2w=
Subject key identifier:   30:4B:D5:70:8C:54:08:21:31:55:45:DF:91:45:1C:E2:93:43:B1:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A119ACAF6968EEC83C9866900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d49b67ba-615e-356c-83fe-386eb744f8c8.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        104.77.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ca:f6:96:8e:ec:83:c9:86:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=fc2f5e65-5258-44d3-95e1-550a802e6b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:fe:6c:12:b5:e9:19:2c:13:22:65:6b:e3:
                    1c:4a:09:51:15:8c:47:59:53:91:56:3a:85:8d:26:
                    fd:a4:e1:19:e4:d0:0d:a5:eb:97:d4:30:f5:c4:ef:
                    e5:2d:b1:74:75:f2:3e:f7:95:a3:6f:8a:86:34:22:
                    93:70:81:af:be:2c:19:87:70:9d:25:f0:cd:47:e2:
                    21:6c:62:1d:67:17:fa:db:68:3f:0a:9e:40:7a:61:
                    be:7f:c1:4e:62:fa:82:cf:15:6a:72:cd:6d:ff:9e:
                    d7:f6:f4:9b:e4:67:50:ad:f2:f2:dc:4d:6a:9f:05:
                    1a:45:c9:24:fe:29:c6:f5:a7:b7:71:58:94:56:bd:
                    82:fe:89:71:98:5b:fd:35:72:e6:a2:05:3f:c3:48:
                    b1:97:23:e6:eb:03:37:90:fe:09:46:95:55:fe:dd:
                    27:5a:98:68:a3:c0:9a:99:20:81:45:bf:4f:b0:52:
                    08:59:08:77:1a:a8:37:37:20:61:a6:ea:cc:7c:87:
                    b4:71:a5:28:5a:23:e6:16:74:7e:bf:8c:0d:be:46:
                    94:52:25:45:c4:81:60:2b:d7:af:54:d7:e1:88:82:
                    96:81:9a:24:58:65:bf:ef:ab:99:00:ec:59:37:47:
                    2b:3e:67:2c:7e:ce:49:c3:6f:b7:15:3b:97:a4:f4:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:D5:70:8C:54:08:21:31:55:45:DF:91:45:1C:E2:93:43:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d49b67ba-615e-356c-83fe-386eb744f8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:55:ba:fc:fa:29:b9:d6:f9:1d:fa:10:dc:1a:01:ae:29:0d:
         cd:1a:fb:f4:db:b0:0f:04:4d:3a:14:f9:c3:d8:00:ee:cf:8c:
         3a:df:e9:49:46:5e:6d:ae:25:51:e7:0b:ba:aa:f4:34:0e:26:
         fa:58:ad:1f:23:31:31:dd:c0:df:10:68:af:01:3a:d3:9f:51:
         d7:ac:9b:e4:f7:4e:eb:00:0d:24:31:52:40:79:13:18:4d:dc:
         29:a9:4a:e9:a5:0f:f2:7d:c0:13:a4:ee:07:f1:83:d5:1a:b1:
         bd:d5:4e:44:a6:af:12:d0:38:e0:f0:0d:b0:41:36:cf:d9:3e:
         5f:28:14:f9:d4:81:58:29:3e:f8:60:1f:b3:a2:64:d0:f4:84:
         5e:57:6f:ed:fd:c4:08:15:11:c8:f6:24:66:f9:93:b9:8f:62:
         97:51:39:ce:49:5f:8e:17:9f:1a:07:6a:65:e0:08:a2:86:e8:
         9d:75:95:cd:07:25:5b:03:ac:dc:16:ee:26:7f:b3:72:c6:a2:
         60:4a:a3:52:36:73:19:37:19:86:18:eb:c9:d7:82:ee:5e:fe:
         a1:e2:df:b4:d4:d8:3d:ff:12:ca:32:99:1b:1f:56:4f:46:c4:
         81:e0:cc:36:1e:5a:c1:70:9a:5a:f9:35:a8:72:0a:bf:5c:4b:
         17:3e:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:42 2025 by rpki-client