Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
File:                     1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa (raw, json)
Hash identifier:          mSTtEUbzDWBHCAfTzj4jxeLibcNqmtdbHxI1061hsmo=
Subject key identifier:   05:79:25:6A:66:98:BC:7D:BD:04:17:29:C6:0C:7F:60:AA:22:17:99
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F4328584A3A1592224335F89EA12314C0
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     46906
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:92:22:43:35:f8:9e:a1:23:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=4da5f5b7-6571-4681-a1de-d938b200f288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:26:ca:e4:b5:30:2e:1e:77:bd:57:cc:51:
                    b2:fa:5d:5f:d7:dc:90:9c:f9:92:ea:eb:29:f8:bf:
                    b6:a1:36:d0:6a:93:39:8f:7a:4f:42:11:7a:c3:fb:
                    52:12:29:5b:e9:cc:50:a6:ca:09:20:fb:bd:ea:03:
                    d1:aa:dd:ef:4f:c3:17:d5:b0:5a:16:e1:5c:f4:fe:
                    35:a5:f5:b1:87:c8:34:14:c7:73:96:c1:9c:7b:9e:
                    95:2f:2d:1e:48:8a:fa:ab:87:87:45:16:f8:77:7f:
                    89:57:64:8d:11:9f:77:97:95:6b:c2:ba:1b:02:50:
                    fd:9c:de:72:26:e5:a5:df:16:57:9e:d1:6e:bf:86:
                    05:ac:c7:4b:98:55:0a:7f:07:b6:78:9a:d7:db:75:
                    c9:d7:78:36:c7:01:f9:69:2e:b6:e0:cc:17:f3:0a:
                    cd:5f:cb:d5:75:23:e9:59:9f:5f:23:69:a7:bb:8e:
                    96:cb:eb:25:4b:78:03:d1:d0:a0:69:83:56:79:82:
                    82:d5:6b:04:0b:71:23:1e:6c:9d:9c:4c:cc:4f:2c:
                    52:cc:19:9c:5f:9b:07:2c:63:27:20:42:23:e4:46:
                    0f:c6:7f:e8:0b:0a:a5:82:34:15:46:90:8d:34:1f:
                    2e:75:1f:07:33:96:3b:ab:83:f8:72:0b:29:4e:78:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:25:6A:66:98:BC:7D:BD:04:17:29:C6:0C:7F:60:AA:22:17:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:98:e7:4d:32:cf:d9:1b:1b:3a:26:15:14:69:45:2b:a4:93:
         57:19:29:a5:f3:dc:4f:a8:d2:8c:bd:9c:6a:55:ce:c2:46:dc:
         04:d7:25:85:ff:14:79:d1:e5:e8:49:de:f7:7a:79:c3:ac:ac:
         0d:43:7d:da:8a:a7:9c:2c:61:f3:e9:bb:9c:03:7c:1b:b2:09:
         cc:0a:3d:49:9d:dc:a6:b5:32:82:cb:d3:ad:10:32:9c:5e:8c:
         c8:48:3b:11:3e:0e:50:3c:7e:33:dc:0e:f3:02:b8:e0:1a:a6:
         1d:ef:0a:8a:23:7c:6e:c1:ee:2d:6f:5f:f5:91:e8:27:34:e5:
         ad:e3:63:e2:85:0b:58:b2:a8:62:81:33:de:74:65:e8:cf:e1:
         11:51:ae:98:89:8f:12:cb:9e:56:71:5b:b8:69:82:44:40:52:
         bb:1a:a2:f2:7f:ca:04:18:6d:9b:b1:a2:70:d1:79:5f:53:55:
         49:07:f1:86:31:92:c7:8a:33:c9:09:e7:69:26:ca:77:16:f7:
         7d:2b:40:7d:8f:56:b1:99:31:09:2f:55:ce:64:09:8a:79:6a:
         73:35:c2:d0:00:15:32:10:b1:73:eb:34:f0:9d:eb:87:df:77:
         e0:6d:07:9c:5e:b6:f1:54:cb:c1:7b:3b:ac:d0:6d:02:b3:1c:
         1e:31:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:00:51 2025 by rpki-client