Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa
File:                     e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa (raw, json)
Hash identifier:          4vMEBGIsX5FBGEH8AaDJGxLQiGJQUM6flrGAfRR7MyI=
Subject key identifier:   32:AB:66:21:EB:FC:75:5F:52:50:4E:17:06:3A:E0:FE:66:69:AE:93
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584A374AD82CE341D4370ABB7B80
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     21713
IP address blocks:        104.160.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d8:2c:e3:41:d4:37:0a:bb:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=71f7e89a-e2d9-42fc-88cf-4571b38f3e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:79:5f:fa:66:41:80:24:ac:c9:fa:75:97:
                    7a:a1:31:00:34:49:c9:b0:4c:e8:d6:05:17:e6:bc:
                    bf:d7:a4:ec:25:7c:12:4c:b9:20:47:39:d8:de:7a:
                    16:65:30:bc:3c:61:22:cb:26:d8:b9:df:91:33:9f:
                    40:10:4b:8e:0d:89:21:a6:99:63:46:46:b1:ff:41:
                    da:4b:9d:5a:5a:a0:c5:31:59:79:30:e9:b6:1c:da:
                    34:f8:c3:77:23:2a:cc:c0:ab:90:47:97:79:b0:86:
                    2c:a8:f4:6e:e3:ae:e2:9a:80:69:69:c1:10:08:25:
                    5e:73:e9:4a:91:9e:52:b8:7b:9b:e0:fc:d4:b9:30:
                    36:30:b6:2f:05:7c:48:37:3c:3e:07:c9:88:ab:e1:
                    73:e9:00:b4:5c:d0:e3:97:82:da:0b:51:fd:7b:57:
                    65:5c:22:6e:af:4a:b8:60:bc:85:a0:50:d6:de:f1:
                    a2:9c:fa:7b:8f:e9:f9:fd:ef:74:d1:d8:fc:93:7e:
                    07:1a:cf:88:c6:f4:a6:01:68:03:a3:6b:b3:29:a5:
                    66:7d:65:29:80:0f:bf:9b:02:5d:c6:86:21:96:16:
                    95:9e:be:5f:53:77:9d:44:3f:5f:93:dd:42:e2:f6:
                    d5:aa:be:45:bd:8a:2d:13:10:fb:ea:42:de:f5:b8:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AB:66:21:EB:FC:75:5F:52:50:4E:17:06:3A:E0:FE:66:69:AE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:ba:22:47:21:96:ed:54:e7:df:b9:0c:67:6c:40:1e:70:
         a3:72:f0:55:8b:93:65:61:4f:d7:e6:df:51:5c:86:17:47:70:
         5d:d4:cf:b6:5f:96:7e:7e:a2:60:a8:65:3b:06:59:29:3d:a5:
         c1:fa:90:b7:b1:a4:29:02:b6:4f:ec:d0:2d:bb:c4:9f:e7:b6:
         5d:e9:48:8a:1c:b0:c1:fc:c7:0b:37:12:a7:c1:ec:d7:03:00:
         cd:0e:a3:12:51:bc:bc:c3:53:94:c6:9d:ad:50:33:f7:73:8c:
         a1:44:36:66:12:41:63:66:82:07:8f:0b:66:b0:35:af:bb:e3:
         41:9e:1f:7c:1f:52:0f:24:0d:9f:a8:09:aa:bf:29:81:c1:ca:
         27:8b:f0:f0:e3:4e:a0:bb:b7:c7:b9:5e:09:62:a9:ce:0f:8c:
         2d:89:49:24:6c:54:83:e7:46:b6:aa:25:c2:63:0b:9e:a0:32:
         5e:d7:e1:42:04:ef:e3:06:bc:08:02:f9:72:93:26:ba:31:ba:
         82:6b:d5:be:7a:e8:6a:28:dc:2b:03:cc:5a:c7:84:d5:ca:93:
         06:83:24:93:72:a8:16:a7:96:73:0c:3b:a6:c7:95:80:2b:af:
         4b:36:4d:9e:ae:8c:f3:9d:56:bf:08:56:8e:70:b0:d1:12:6d:
         85:95:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:45:18 2025 by rpki-client