Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa
File:                     f013c061-c284-3462-80b8-386f10ec2f9e.roa (raw, json)
Hash identifier:          5WpkR6p+y+TMDmFQv88ofhgTvc3sjdfxkzfCy6LJYz8=
Subject key identifier:   E4:81:87:CD:FD:9C:A8:8B:A5:93:B2:75:B3:79:E2:8E:3E:A8:28:38
Certificate issuer:       /CN=dc22c315-14c5-4de2-83f3-01be353fd756
Certificate serial:       010D0C9F43285849C0A4D63D1F35257813B0C300
Authority key identifier: D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     2568
IP address blocks:        104.192.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d6:3d:1f:35:25:78:13:b0:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc22c315-14c5-4de2-83f3-01be353fd756
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=9067cf82-a30e-42fe-a981-965a59e0ac7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:94:41:5f:aa:5a:ea:7d:31:01:b3:e3:ec:
                    90:3a:4a:b2:29:6d:8a:29:84:b0:81:23:4f:48:15:
                    b6:89:9c:a7:d6:5c:bc:f5:f4:88:5b:b2:a9:fc:a5:
                    b1:7e:d9:a9:be:de:3f:ee:6b:ec:28:23:54:69:0f:
                    ad:2e:ee:44:bf:d5:1e:45:cd:1e:79:d2:f2:cf:89:
                    e4:66:22:ef:15:3b:c5:d4:cc:6d:c2:8e:bd:a0:a4:
                    12:4d:4d:65:26:53:ad:48:6b:58:d2:9e:9c:2f:54:
                    f0:14:ea:4b:10:8a:a8:d4:99:3e:a9:27:75:c7:17:
                    b6:cf:63:7b:29:e8:3b:79:b2:0e:08:4a:7a:25:ff:
                    90:2a:5f:79:e5:e7:d3:42:ee:a9:66:53:ba:52:0d:
                    9c:80:0b:69:fc:32:5b:16:e9:25:73:46:0d:15:73:
                    fb:35:21:f7:b2:26:86:e9:99:43:b0:cb:80:87:10:
                    dd:65:cb:61:8c:fd:8a:64:66:a4:58:e5:c7:ac:70:
                    a2:ed:a7:7c:18:df:ea:03:28:63:6d:0f:ca:3b:dc:
                    47:f0:0a:8b:7a:77:82:22:6a:6b:fc:07:ad:4c:b2:
                    cc:2c:3d:9a:b9:42:02:81:4f:52:61:49:c7:0d:43:
                    07:60:f5:8e:60:70:0d:f0:e0:aa:25:11:29:39:11:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:87:CD:FD:9C:A8:8B:A5:93:B2:75:B3:79:E2:8E:3E:A8:28:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl

            X509v3 Authority Key Identifier:
                keyid:D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:c5:06:ff:8a:2f:f1:23:27:a1:2e:f6:d7:fd:9c:c3:82:
         aa:08:4b:71:79:92:92:68:45:26:18:bf:72:0d:13:7a:f2:f3:
         a9:da:12:9d:3b:1d:70:e9:da:00:35:03:9c:ea:63:0d:16:26:
         36:91:45:85:0b:44:cc:55:b0:e2:6d:3b:0d:4c:73:2f:a0:3e:
         d8:ec:12:0a:dc:3e:ff:5a:1c:ae:4f:ae:c1:4f:2f:e9:2c:72:
         91:94:bc:1a:18:c1:9a:3e:4b:f4:e2:71:00:34:87:2f:19:0d:
         17:29:2d:0c:ca:1b:31:8c:4d:4b:fd:86:01:13:d7:30:93:99:
         34:5a:ea:78:2f:c0:38:30:6b:34:9e:95:7d:0d:5b:76:65:95:
         42:04:f1:95:23:75:b5:a5:81:55:bc:b2:d8:4e:94:88:a2:2c:
         6f:10:59:31:ca:f7:5d:b9:69:57:3e:02:ed:66:31:d9:b5:d9:
         74:ef:02:d6:82:aa:70:79:24:e6:97:6e:d2:a6:8c:8e:29:bc:
         54:03:46:51:bb:64:28:e4:9e:9e:07:4d:2b:44:9e:bf:77:96:
         0e:7e:5d:b9:87:4b:e0:1d:6d:07:8f:9f:5b:04:23:c8:97:f1:
         20:49:79:c9:f2:a0:4b:de:2a:24:b5:b9:59:93:7b:b7:1a:b7:
         6a:2c:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:22:30 2025 by rpki-client