Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa
File:                     eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa (raw, json)
Hash identifier:          zVEQ8Aqv0qT5K7gSxKJYcksnhuyZcmnta9c3xGZgdl4=
Subject key identifier:   33:59:D5:DB:02:6C:68:AF:60:FF:18:30:E7:60:11:6D:96:40:DF:9C
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F43285849B9AA07598482F99B6BD7CA00
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     5645
IP address blocks:        104.195.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:07:59:84:82:f9:9b:6b:d7:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=080480f0-a2d2-44a0-9c67-512ab8c7223d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:c1:8f:78:23:9e:3a:4a:a7:5f:ba:cc:70:
                    df:ce:00:e8:82:19:7e:3d:92:ab:65:04:c1:70:30:
                    8e:39:ff:f2:65:16:15:7b:ac:75:41:b1:e0:20:ac:
                    2a:10:ae:eb:bf:20:90:6e:f5:45:d9:c2:c3:43:0b:
                    ea:45:26:57:39:df:dc:c3:22:d1:75:ef:5b:cc:db:
                    df:3e:da:0d:2f:0b:e2:d0:b4:c6:ab:3e:9a:de:f6:
                    85:72:09:45:12:a1:2d:6d:c5:89:2d:4b:64:79:a7:
                    b3:0f:59:9c:57:5d:d3:ee:cb:a7:93:75:9b:2e:f1:
                    d1:76:a2:75:47:02:8b:32:40:82:5e:8e:16:d2:c1:
                    13:48:00:16:78:8b:5f:16:d6:e0:63:53:61:0f:f1:
                    0b:89:58:47:67:86:69:84:1e:db:34:72:3d:64:cd:
                    1e:5b:d1:1d:a8:61:56:8a:66:2a:b9:8e:17:ed:e7:
                    9f:7d:47:02:a8:ec:b8:f6:6f:cd:d0:c9:60:25:7b:
                    09:0d:61:ab:0c:d1:fa:a4:8c:88:a2:53:26:20:52:
                    df:9d:10:d9:e1:83:19:d3:60:71:5b:4a:5f:d5:2a:
                    a3:07:ad:4b:af:75:ef:29:10:9a:7b:6b:a3:81:68:
                    c6:45:96:6f:98:f7:60:90:ad:79:6c:ef:a7:ef:96:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:D5:DB:02:6C:68:AF:60:FF:18:30:E7:60:11:6D:96:40:DF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.195.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:b7:77:93:16:94:69:d8:7f:ca:29:c7:1a:23:23:68:f9:
         97:09:ff:c8:59:a0:55:ca:67:b0:e4:33:15:dd:5f:fb:03:db:
         c4:4b:07:59:f4:22:2c:00:0a:c8:e0:5c:08:fb:ab:70:12:45:
         8a:2e:3d:6d:45:59:2a:11:f2:8d:32:21:2f:e0:b8:6f:ba:44:
         0f:7d:bd:69:38:81:c6:a5:eb:37:47:a0:70:53:6c:6a:14:23:
         db:20:20:9c:19:e0:07:45:d3:4c:7f:ad:f8:a3:12:f7:cd:dd:
         60:21:64:ae:00:ed:d1:71:62:ab:ec:5f:b2:59:d4:ee:62:61:
         2b:f7:9d:91:e0:25:71:5b:99:1b:2e:3a:7a:d4:95:ba:9d:dc:
         e4:93:36:25:f1:71:f1:e5:7d:5b:ab:d7:c6:e7:48:63:3c:2e:
         fc:d4:19:89:8d:a5:f3:81:d5:a8:de:46:63:c5:2e:3a:ca:f4:
         de:8a:0e:71:ed:15:5d:5c:9e:dd:4d:e5:aa:a3:ea:1f:c9:ea:
         c8:27:de:de:2a:11:2c:a9:47:87:a9:1f:93:d2:5f:05:67:d4:
         f2:cf:8d:4d:ea:49:27:26:8a:85:57:0c:5f:2a:87:67:b0:fa:
         30:57:a4:3a:a5:77:46:68:dd:6f:45:4c:5e:ef:4f:8c:46:ed:
         89:51:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:15 2025 by rpki-client