Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa
File:                     8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa (raw, json)
Hash identifier:          JLwMPeBy3v9QrKCwXo9wjulaenoYFNeW6u8ocJU2vdQ=
Subject key identifier:   2C:30:D0:B8:8C:9E:AB:3D:24:6F:C0:A6:12:99:0A:9B:DC:10:63:67
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C0129D029151EE0E0DD580
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        104.218.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:12:9d:02:91:51:ee:0e:0d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=856950e4-55c1-44be-b5e5-1a93ecc02e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:4e:8b:29:46:37:9c:6e:cf:64:6e:eb:21:
                    fe:e1:9f:74:90:61:cb:39:1b:0e:87:fb:17:ea:22:
                    bb:14:60:b8:87:95:e6:b3:1b:05:d5:d5:2a:72:ad:
                    fb:56:19:d5:a1:3d:5c:b8:45:b3:48:35:cb:32:e9:
                    94:fa:68:98:7d:79:b2:88:d9:ca:39:88:48:a8:bb:
                    81:79:3d:7a:98:6e:65:0b:a3:3a:09:18:77:a7:c4:
                    a5:52:26:d7:b5:4a:41:64:64:14:00:fd:47:26:b9:
                    c0:f7:84:59:5e:f7:12:da:36:f0:5b:10:e5:80:09:
                    33:24:2b:e3:be:0d:5e:8d:a0:45:53:dd:6b:51:fe:
                    d3:0e:cd:4a:b4:ff:78:b6:97:b5:c2:8b:d7:e7:34:
                    5e:e6:c0:6b:11:23:a0:64:86:71:b0:13:d2:8b:3d:
                    ff:25:93:4b:8a:79:22:da:ff:ce:b0:f6:f4:04:a7:
                    ec:41:3f:b7:73:6b:59:15:e3:f7:4c:80:4f:1f:be:
                    f2:b1:78:59:4d:44:7f:ba:6e:2d:6e:b4:54:64:99:
                    45:eb:96:d5:d9:21:a4:90:d5:87:f1:a2:2f:da:3d:
                    a2:64:35:6c:4b:79:9a:c2:5a:37:c1:d9:21:51:b8:
                    c0:9f:60:9d:bb:c8:21:32:b0:a5:5b:56:f7:71:35:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:D0:B8:8C:9E:AB:3D:24:6F:C0:A6:12:99:0A:9B:DC:10:63:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:6a:b5:75:a5:e0:51:22:f3:ac:0b:09:ce:2e:b3:15:45:
         c5:09:98:99:e2:b3:1b:86:05:91:90:e3:9a:cb:f7:0c:9c:27:
         30:b4:c2:2d:67:46:12:0a:9d:79:5c:75:89:fd:58:81:1d:63:
         f6:6b:ce:81:ae:a0:93:2b:ff:9c:99:b7:bd:97:74:37:0b:02:
         51:9c:72:2e:09:47:ef:9c:e9:a6:8a:48:aa:05:41:ec:e0:52:
         d3:ec:c9:fe:9e:70:ed:e9:16:d4:12:30:ab:6f:3a:0a:3f:b3:
         b6:70:0b:b5:2c:31:af:97:25:50:e8:01:ce:d1:e4:ba:79:8a:
         75:e3:13:bf:3d:de:2e:6b:93:d7:58:67:c2:d7:34:04:49:78:
         42:38:78:22:5d:6b:21:74:d7:e3:7a:8c:0f:4b:27:87:5f:6c:
         9f:05:d4:0a:d9:68:06:6a:6c:70:1c:9c:4e:9a:cb:1b:23:38:
         aa:98:4a:ac:52:2c:d7:e9:78:b8:d3:03:08:fd:b5:de:f7:9e:
         93:cd:95:dc:a6:67:24:d0:eb:95:de:17:01:ec:8b:41:fb:ba:
         dc:7f:d2:81:dc:2a:bd:24:14:1c:8a:c5:7f:85:68:8b:cd:06:
         10:20:b6:8c:37:54:c1:54:07:ab:d6:c5:f3:85:4a:37:53:46:
         f3:06:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:39:16 2025 by rpki-client