Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/98592216-7266-3a00-80cd-6ef3636b3a8e.roa
File:                     98592216-7266-3a00-80cd-6ef3636b3a8e.roa (raw, json)
Hash identifier:          Pcc+DTvlwyX9pwK85IB6oPLHSwS3W/e1fRAt06YDCc8=
Subject key identifier:   41:AB:9A:B0:3F:50:CC:2E:EC:18:A8:66:29:A0:02:07:D9:F1:69:CA
Certificate issuer:       /CN=a60afcac-eb4f-49e1-8a25-f9596d96a796
Certificate serial:       010D0C9F43285849F3AAD46BAA8C1A586DDDC6C0
Authority key identifier: E8:96:C6:09:EF:5A:31:1A:BD:94:FB:7D:4C:75:69:C9:77:F0:3B:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/98592216-7266-3a00-80cd-6ef3636b3a8e.roa
Signing time:             Fri 23 May 2025 19:39:27 +0000
ROA not before:           Fri 23 May 2025 19:39:27 +0000
ROA not after:            Thu 21 Aug 2025 19:39:27 +0000
asID:                     1832
IP address blocks:        104.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:aa:d4:6b:aa:8c:1a:58:6d:dd:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60afcac-eb4f-49e1-8a25-f9596d96a796
        Validity
            Not Before: May 23 19:39:27 2025 GMT
            Not After : Aug 21 19:39:27 2025 GMT
        Subject: CN=c4d4c3d0-1280-4ee4-9091-0225933986ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5d:08:74:dc:c2:12:64:76:31:38:6c:ed:ff:
                    0f:a6:44:42:74:8f:ba:a9:04:8e:15:a8:08:54:d2:
                    1b:e2:ce:fa:4d:a5:42:08:ce:2f:77:7f:75:c5:27:
                    ab:0e:58:05:ca:86:5d:76:94:b1:4c:a9:6a:9b:b9:
                    b5:76:63:89:52:12:05:42:43:33:4a:b5:c1:07:0c:
                    bd:b8:68:64:43:a0:50:ee:59:10:6c:81:89:22:ac:
                    48:24:a6:25:ce:ec:1b:f9:08:3e:07:fc:ac:44:aa:
                    db:58:a0:87:48:ef:59:0b:a7:27:e9:67:b5:ff:70:
                    6b:d3:18:41:2b:d2:62:66:3b:c5:27:87:c3:69:e8:
                    70:60:c3:eb:e4:85:71:ef:0c:8d:96:c3:ce:15:4a:
                    50:eb:ba:ee:52:52:76:37:6f:8d:ad:0e:af:de:cc:
                    ad:29:9c:ba:21:cb:ad:ee:63:bf:23:8c:39:3c:e3:
                    3a:b9:f2:fd:3f:0e:3e:7e:5d:d7:7f:20:ea:9c:0e:
                    65:ba:fd:df:c5:4a:31:78:8c:7d:82:b3:1b:80:76:
                    94:ee:20:1c:55:08:f9:82:4e:06:d2:ca:d7:c6:a1:
                    e0:98:08:7d:c7:e8:b2:32:e2:54:78:94:b8:9a:e6:
                    ff:6c:0b:3c:14:23:3e:1c:ce:a3:41:d7:80:aa:ca:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:9A:B0:3F:50:CC:2E:EC:18:A8:66:29:A0:02:07:D9:F1:69:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/98592216-7266-3a00-80cd-6ef3636b3a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.crl

            X509v3 Authority Key Identifier:
                keyid:E8:96:C6:09:EF:5A:31:1A:BD:94:FB:7D:4C:75:69:C9:77:F0:3B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cc:77:b6:61:36:32:a5:ae:d1:c3:9c:02:0c:fa:06:22:52:
         c3:03:cd:26:cf:93:8e:bf:c5:09:0f:26:ef:93:aa:fe:62:f2:
         59:1b:93:a9:60:a5:80:9d:d7:21:87:ba:bf:8d:3e:c4:fb:f0:
         24:c6:18:36:22:d1:1f:3a:81:43:4c:1e:50:a6:b8:dd:a1:a5:
         13:36:89:b8:6c:13:8a:b5:30:d4:af:4a:0d:8f:86:cd:2a:64:
         3b:c8:bc:e1:f0:d9:16:b2:88:aa:74:67:b0:64:bf:64:6e:99:
         79:88:99:50:83:b9:41:a8:78:5d:21:7a:3d:de:6e:39:82:e3:
         c0:31:49:a7:b2:70:80:59:74:ae:6d:7c:37:3a:72:91:bb:50:
         99:13:68:eb:4a:98:23:27:e1:5a:3b:c3:ce:c0:af:02:1a:4b:
         7f:8e:98:21:b7:f2:09:b5:8d:97:3c:fc:92:b4:2a:22:f4:ed:
         8e:dc:fe:30:60:f2:1a:80:74:e6:fb:f2:00:c9:47:94:95:4d:
         f0:62:60:44:51:bd:73:58:c1:a4:42:c1:d4:8a:8e:b6:52:41:
         2f:72:3a:77:50:df:b3:4b:32:82:62:de:d3:5c:77:cf:09:e3:
         ab:30:d8:2a:5f:e2:51:4b:a3:cb:84:92:91:ee:49:b3:bb:3c:
         87:d1:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:46:36 2025 by rpki-client