Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa
File:                     a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa (raw, json)
Hash identifier:          qglGSxCnf79WB4sxrtPNc8HQbOCHrhk4oVJ0YmYRSVw=
Subject key identifier:   04:13:D2:54:BA:D2:C6:DD:A3:3C:97:6D:D4:D4:A6:E8:2A:43:FD:4A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858499F24CE0F71120C99188CBD20
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        104.237.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ce:0f:71:12:0c:99:18:8c:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=b3b428c6-09a3-4686-9a97-4f33cdb64bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:7e:f9:f3:4c:e2:04:7a:27:3a:d8:31:ad:
                    bc:c3:6f:62:80:f6:13:18:25:d7:f7:8a:5f:39:85:
                    df:17:9d:bf:93:2a:c5:f9:60:86:48:30:0a:3c:fd:
                    89:c8:04:e5:27:f1:66:8a:e1:27:9f:91:3d:17:16:
                    03:a3:ca:ff:42:fa:7a:b1:54:ae:8b:be:49:94:4b:
                    84:b7:49:f0:e8:d5:99:6c:43:f2:05:6f:b2:e9:cc:
                    1d:ae:bc:0d:eb:9b:ee:9d:03:5f:78:07:78:6a:0d:
                    d7:96:4e:1e:e0:a1:6c:5e:0c:47:f3:01:40:1e:fa:
                    59:93:32:f1:08:2a:85:55:d7:5c:c4:7d:44:6f:64:
                    98:d0:98:dd:ff:37:94:7b:76:9e:c3:3e:1b:32:2d:
                    d9:de:3a:0c:dd:52:9b:ec:f7:2d:e6:1e:32:fb:5e:
                    05:32:a3:e0:41:ed:68:aa:cf:d7:ba:02:b9:64:a1:
                    7e:9a:2b:9c:7e:21:49:68:8a:17:48:bb:94:8a:b2:
                    7e:ec:50:d5:a3:37:94:33:af:01:50:92:70:94:af:
                    7d:b1:44:fb:82:d0:99:99:99:09:c5:8d:4f:a0:20:
                    e4:81:40:96:88:5f:5e:da:40:e1:aa:86:ba:0c:e6:
                    7f:61:26:a5:de:80:22:67:01:88:7b:93:e6:72:ac:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:D2:54:BA:D2:C6:DD:A3:3C:97:6D:D4:D4:A6:E8:2A:43:FD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:7d:1b:07:e4:61:3a:5e:b7:64:63:70:58:1c:2d:62:27:f7:
         d6:fb:91:ae:58:89:0e:5c:1b:e3:8c:17:51:53:b5:57:8b:66:
         eb:da:8f:bf:87:56:14:c9:c1:d8:7a:81:51:2a:db:16:18:6e:
         49:79:ef:a6:9d:32:96:14:ed:59:da:32:60:99:69:a8:de:bf:
         c0:25:d7:a2:95:6b:00:a3:48:60:78:64:a8:89:85:d2:54:d3:
         40:55:73:ee:22:c9:5e:33:85:7c:04:c3:2f:5c:a8:66:89:44:
         1b:13:ad:27:62:28:5b:2e:eb:9d:e8:9a:17:ac:6b:72:23:ba:
         71:fd:dc:cb:08:3d:33:ae:88:10:cc:6e:ee:81:7f:ac:29:36:
         09:01:86:9f:d7:20:e5:7e:f8:56:38:df:3b:03:1e:1e:aa:ee:
         7a:f5:98:7c:b1:e7:c2:c3:5e:04:25:f2:6a:15:65:8f:d4:d7:
         b3:3c:20:2c:e0:24:71:ab:60:4e:74:3c:f8:11:a3:7e:89:2a:
         35:5b:a7:db:5d:bc:70:f2:23:10:62:c8:c1:02:ce:e6:e9:f4:
         49:f6:8d:18:f2:36:3d:99:be:b3:a9:ab:ac:35:a6:b8:c9:fa:
         de:2a:8c:36:86:42:81:ec:0a:69:1a:b3:36:75:c8:96:6f:11:
         2c:82:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:55:35 2025 by rpki-client