Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
File:                     af0871d5-e0fa-3865-8cdf-a359d771daac.roa (raw, json)
Hash identifier:          Wgqq7RpSzQ1mJmGCcwN0KfHhW75YJGf6gqTCwDI+vgU=
Subject key identifier:   FE:6E:23:40:5A:6D:D9:E2:B0:1C:AC:5B:E7:87:4E:70:30:8A:76:56
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858499F24CA1FAC34CC150786D280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        104.237.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ca:1f:ac:34:cc:15:07:86:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=978b6533-ee4f-4a39-9038-841b0b8439a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:3c:83:74:8a:6c:d9:0f:b9:b6:17:0c:53:
                    0a:56:be:15:bd:87:d0:bf:09:52:74:fe:7c:ab:63:
                    10:91:90:40:1e:f5:d5:60:7b:e9:91:2b:44:92:2d:
                    a6:d7:a6:10:6b:4e:27:a1:c2:49:03:86:d0:20:b9:
                    5b:3c:cc:a3:81:02:5b:a6:9a:31:2c:ce:34:52:7f:
                    47:dd:70:4c:29:d6:09:fc:51:a2:ce:47:a6:e9:8c:
                    9b:f9:5c:96:e0:06:f0:f0:2b:fb:b3:b0:38:1c:17:
                    f7:09:f8:16:a7:27:35:61:31:f5:37:e6:82:32:46:
                    64:9e:ed:86:cc:28:65:6a:6e:b8:92:7f:a6:73:9e:
                    33:3a:4c:a3:98:c5:77:75:f7:3f:bc:66:dc:06:f7:
                    3c:29:2c:20:b1:c7:1c:01:6c:3e:2c:e4:d6:3e:b2:
                    30:4b:ec:3d:bb:f2:31:69:9a:5a:14:84:e9:b4:93:
                    3a:1c:94:6d:26:e8:4e:7e:17:f7:91:91:9c:62:53:
                    66:2f:69:b7:77:4f:59:04:f0:3e:ac:db:4b:21:a9:
                    bd:47:d1:2d:bf:16:2d:6e:22:68:ec:73:01:6e:61:
                    52:5b:43:e0:99:d1:53:54:79:19:13:bf:7e:25:31:
                    36:55:94:70:98:61:19:d6:b5:47:6e:04:37:8d:1c:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6E:23:40:5A:6D:D9:E2:B0:1C:AC:5B:E7:87:4E:70:30:8A:76:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:42:74:4c:a3:fa:09:db:97:84:81:c1:b6:06:2b:f7:7b:27:
         3e:13:ba:42:cd:ed:40:e8:b8:70:e2:06:7f:d5:29:92:3f:8a:
         2e:cf:0b:da:12:db:55:7d:41:d4:f6:80:a1:16:d0:72:db:2b:
         a9:bc:d4:ef:e9:18:1c:61:5e:3a:80:cf:ab:bf:8d:a6:b3:d2:
         da:72:47:bb:7c:8f:12:e6:c9:6b:d7:82:5f:6f:2d:02:a5:a7:
         c3:ae:b7:0e:35:0b:78:82:48:34:66:60:65:77:1e:db:5f:40:
         68:db:14:ae:5c:67:0f:5b:cd:88:92:f0:0d:95:83:5a:13:e9:
         23:66:3c:25:f8:f5:f2:dd:6a:b0:9f:05:b7:8a:59:da:c5:64:
         a7:c3:32:60:ce:1e:92:c4:56:db:11:5b:33:32:04:6a:c3:18:
         f4:61:e8:5e:f6:23:33:6d:8b:81:bf:78:d5:41:3f:e9:0e:95:
         70:4e:90:28:63:d2:a8:3b:38:64:3a:dd:76:b4:4d:28:77:d1:
         ec:41:5f:11:af:68:c1:d4:7c:27:86:d8:5e:fb:ef:9d:40:6a:
         39:aa:52:8a:7e:16:5f:69:e0:9c:5b:26:cd:b3:ea:8f:87:88:
         b0:5b:0e:de:2e:97:bb:cf:e0:9f:8d:c5:73:a2:35:32:03:8a:
         16:f0:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:56:14 2025 by rpki-client