Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/6c21457d-757c-3af5-9ddb-f65189535c9d.roa
File:                     6c21457d-757c-3af5-9ddb-f65189535c9d.roa (raw, json)
Hash identifier:          RyfRu4jjAxmrVCCm7+qP2noIdbET1xBaLs+9ul0bKN8=
Subject key identifier:   3B:8D:A8:1C:30:C5:1D:0B:CA:0B:84:40:68:70:D2:38:91:DC:BD:5C
Certificate issuer:       /CN=b9442e36-28bb-4dc7-852f-f37ff2d3582e
Certificate serial:       010D0C9F43285849D85F88169E82BEE8CD8C76D0
Authority key identifier: 4E:45:B4:4C:5C:42:EF:45:7D:B8:CF:8D:99:39:53:BC:12:A3:8B:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/6c21457d-757c-3af5-9ddb-f65189535c9d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     393682
IP address blocks:        104.245.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:88:16:9e:82:be:e8:cd:8c:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9442e36-28bb-4dc7-852f-f37ff2d3582e
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=29d5cffb-4e8c-414d-8ead-9ad1212fc7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:26:45:90:aa:29:89:12:ec:be:7a:1e:ee:
                    5c:46:79:1a:8d:13:2f:0a:08:8f:78:e2:8e:d4:c8:
                    cc:c5:16:7f:a5:50:00:ab:80:b1:8a:f9:c2:20:a8:
                    26:f8:59:bd:83:d1:43:e1:05:ab:0f:3c:a1:65:20:
                    90:38:75:bc:6d:fe:c5:a2:0d:f2:22:84:38:36:b9:
                    ef:9b:fe:40:9f:bb:8e:9c:6a:a3:55:32:71:90:6a:
                    7c:e1:ef:5c:ec:51:57:97:b1:8a:d7:7c:5d:dc:96:
                    09:e2:18:4f:e4:36:8e:b2:ec:25:25:ae:8f:c2:87:
                    5c:0c:0b:27:9c:0a:fe:a4:be:3d:20:e7:f5:10:e8:
                    17:0d:2f:c2:52:6d:e1:bc:43:93:8b:fb:e4:09:e1:
                    86:ac:25:9c:10:2c:92:dd:16:cf:0a:0d:4a:df:98:
                    c0:06:19:a0:8d:ac:61:2d:49:cd:b3:ac:b1:1c:76:
                    d4:9e:10:09:6f:12:b3:27:52:9d:1c:a6:38:10:42:
                    1f:1a:2c:54:09:c2:77:fc:38:f3:2a:d7:d3:0b:f7:
                    02:31:b8:6d:00:fb:6a:43:75:80:5e:16:dc:f8:97:
                    7c:4e:44:4e:f9:b9:28:10:5b:57:f7:6f:76:72:da:
                    11:2a:ce:2e:f0:a0:74:e2:58:60:ed:d5:95:1a:2e:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:A8:1C:30:C5:1D:0B:CA:0B:84:40:68:70:D2:38:91:DC:BD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/6c21457d-757c-3af5-9ddb-f65189535c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.crl

            X509v3 Authority Key Identifier:
                keyid:4E:45:B4:4C:5C:42:EF:45:7D:B8:CF:8D:99:39:53:BC:12:A3:8B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:df:20:fb:12:ff:73:44:55:18:97:28:85:e6:54:0e:2f:7e:
         6c:ca:54:0e:96:61:81:80:8b:31:62:3e:0f:d3:dc:90:52:1f:
         72:4f:60:c8:51:45:42:d1:98:21:04:71:9d:c1:c4:a5:9f:e2:
         2f:83:75:a1:f5:a6:46:bc:66:cb:94:5e:7d:11:01:1f:4d:fc:
         1e:0d:56:5e:1e:bd:17:80:35:80:4c:99:f1:f5:02:cc:01:35:
         47:e3:b0:05:89:a0:08:70:ba:14:8c:2e:4c:f8:f0:b5:ce:4d:
         fe:13:5c:b8:df:fc:ca:8f:87:95:98:6e:e1:55:3a:19:a7:73:
         b6:77:51:75:64:00:63:5f:48:79:e5:73:34:f7:8e:21:3a:f9:
         e2:04:06:02:d2:3d:f2:7d:69:df:5c:aa:54:ba:a0:08:b7:8d:
         bf:0b:a1:cb:f4:bc:b9:4e:0b:ce:b0:80:35:32:65:5e:92:fb:
         bf:a8:45:dd:48:a1:16:5e:0c:85:f3:0a:0f:80:0d:0d:fe:c4:
         fc:14:64:0a:40:79:72:10:74:7c:4e:ca:91:35:2e:ae:46:8a:
         84:f5:ef:a7:a9:44:c1:a7:d5:90:23:3e:c4:f2:ff:fa:8c:e4:
         c4:b9:9b:11:57:92:1d:87:bb:43:18:d0:bd:fe:34:b8:c4:28:
         b5:d9:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:02:29 2025 by rpki-client