Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d320fd12-be4b-3700-aa1f-1ea9faa87cb4.roa
File:                     d320fd12-be4b-3700-aa1f-1ea9faa87cb4.roa (raw, json)
Hash identifier:          i3HvQBYgL50oSnqgYTeNcCoQzTJJ8gJXVH4UTE2KLHk=
Subject key identifier:   50:51:39:64:6C:77:2F:B1:E3:50:DD:FE:DE:0A:AC:1C:16:23:48:00
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849C31B932482E29B5707A7E540
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d320fd12-be4b-3700-aa1f-1ea9faa87cb4.roa
Signing time:             Tue 06 May 2025 10:12:01 +0000
ROA not before:           Tue 06 May 2025 10:12:01 +0000
ROA not after:            Mon 04 Aug 2025 10:12:01 +0000
asID:                     43260
IP address blocks:        104.250.164.0/24 maxlen: 24
                          172.94.37.0/24 maxlen: 24
                          172.94.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:1b:93:24:82:e2:9b:57:07:a7:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  6 10:12:01 2025 GMT
            Not After : Aug  4 10:12:01 2025 GMT
        Subject: CN=0d73017e-c674-4456-9a80-7d2704742277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:29:77:c0:8e:21:33:69:86:78:4f:96:07:
                    c0:c4:50:1f:ef:3d:c2:28:c9:35:bf:f5:fa:de:86:
                    1f:fd:18:a5:cf:78:e1:3b:bf:b6:8f:fc:1f:2b:69:
                    d7:6d:b3:64:5b:0c:e8:4a:b7:2b:2d:12:98:fb:93:
                    c0:30:d6:5e:da:2d:76:78:e2:f8:02:bf:f4:28:3f:
                    22:5b:3f:6b:75:61:52:24:f4:bd:bb:4a:8e:57:f5:
                    19:32:1b:b9:0c:e4:00:17:d6:9c:43:88:54:01:ed:
                    70:3e:a3:88:e4:be:c0:16:6b:75:ec:ba:37:a8:71:
                    92:36:6a:ca:fa:c1:7f:38:f3:b7:da:c4:7c:98:dd:
                    57:45:56:8d:c4:d7:67:1a:74:76:c8:78:9f:4f:43:
                    90:e8:46:f2:0e:2e:83:fd:95:11:b4:67:7a:aa:e8:
                    71:dd:44:f4:81:b6:2a:64:24:60:d2:0d:ab:b2:bf:
                    37:2e:11:e6:e1:4e:92:bc:ed:a9:31:09:b8:68:df:
                    23:0b:49:b9:cb:a5:65:4e:27:b8:f3:d5:2b:7f:d1:
                    33:56:3d:fc:04:26:8c:e5:0d:c4:ea:0e:8f:ac:2a:
                    54:61:54:2f:11:43:c4:9d:f1:b7:77:d0:3a:e1:fd:
                    af:4a:0e:3f:87:bf:e4:93:ac:17:b6:d5:9e:c4:7d:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:39:64:6C:77:2F:B1:E3:50:DD:FE:DE:0A:AC:1C:16:23:48:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d320fd12-be4b-3700-aa1f-1ea9faa87cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.164.0/24
                  172.94.37.0/24
                  172.94.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:44:d9:79:37:c5:bb:6f:59:a6:fa:ed:f0:ea:33:9c:88:
         89:f1:9e:78:b4:34:ff:b1:df:79:1f:ab:08:34:c0:f3:27:fc:
         bf:05:e7:04:28:be:ef:b8:97:26:e3:ac:32:2a:32:78:e6:61:
         d2:f3:0a:e6:43:72:5b:c2:9b:16:5e:28:a8:dd:9f:ee:2a:93:
         75:c3:62:99:1f:54:a9:91:b9:94:99:fa:dc:ab:2f:c1:af:45:
         93:ab:d4:77:ba:d8:94:11:ea:d5:bd:b8:70:de:f4:0e:de:98:
         87:d3:ff:47:6b:86:75:a4:af:e0:d5:cd:fd:fe:d2:c8:e2:58:
         56:70:b0:89:e2:67:f1:3f:dc:09:06:90:88:e5:c4:a9:fb:bc:
         77:d4:fc:57:f8:c5:21:a8:14:bf:af:78:3a:4b:35:3e:5d:73:
         64:6f:83:40:e7:79:35:7e:eb:1f:79:5e:bc:af:9f:c8:d9:5b:
         3b:89:97:42:2e:da:10:61:85:1e:50:63:e3:b5:e4:b1:6e:75:
         15:e3:36:71:50:fb:ef:d3:08:7c:b7:f7:3d:bf:96:58:51:97:
         74:a7:7f:0f:84:e2:dd:99:05:f1:57:6d:6a:42:5d:07:bf:05:
         24:e9:7f:03:76:42:11:c5:45:45:7f:98:45:27:b3:38:53:fa:
         74:13:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:53:55 2025 by rpki-client